Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File:                     nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier:          Y5sr1pLEJufZkmFOqntOLvX5vAYvLSyJ0Yp/eQavyco=
Subject key identifier:   06:CD:85:FE:08:56:93:AB:E3:52:B7:85:3C:1B:34:8E:C2:84:4D:DC
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer:       /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial:       01962E2AE497FB29746B46E05F631E7147B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number:          0DE8
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
                          2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: 21GHSZ8gVII37MdbzGXcavhXtSLCpaDp+sjvhGmC7C8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e4:97:fb:29:74:6b:46:e0:5f:63:1e:71:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=06cd85fe085693abe352b7853c1b348ec2844ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:90:7e:6a:88:a8:60:07:18:7e:ec:bb:7b:
                    5c:f2:3f:5b:fa:8f:f8:2a:5e:25:91:a5:16:6b:2b:
                    51:98:b2:52:77:9f:6f:8f:e8:8f:5c:ff:a2:61:14:
                    66:25:47:97:6e:fd:8d:37:3e:e5:46:f4:ea:e5:d3:
                    71:8e:a1:38:79:63:44:aa:42:ee:15:58:f7:71:96:
                    03:c9:84:1e:f9:10:c7:c3:8f:89:4b:e4:49:80:ad:
                    96:1f:b0:ae:06:aa:ff:4b:77:be:d4:32:3d:5f:4e:
                    09:1d:60:32:cd:13:52:e0:3a:9b:8f:31:ff:e6:b6:
                    96:8f:19:9e:dd:d2:bc:27:59:24:08:bd:1a:b9:f8:
                    05:57:44:bc:38:e7:a8:4f:a7:fa:0b:8a:c8:7e:f1:
                    e6:6d:5d:b9:f5:84:e7:e5:4e:7b:73:58:a3:51:83:
                    1e:c1:35:ff:58:aa:ee:56:8f:42:39:86:ab:36:ce:
                    41:4e:b8:a1:7e:20:20:0c:3b:08:64:a3:c4:7e:e3:
                    3b:eb:51:c9:5e:81:50:bf:a1:ea:d5:9a:64:d4:9b:
                    fb:2d:17:2c:c7:d4:cc:57:69:ee:24:e8:ba:c7:fd:
                    68:5c:d6:56:73:67:f2:27:f4:31:de:ed:32:02:c1:
                    83:82:5d:94:ab:28:fc:83:51:af:0b:09:f9:1a:c5:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:85:FE:08:56:93:AB:E3:52:B7:85:3C:1B:34:8E:C2:84:4D:DC
            X509v3 Authority Key Identifier:
                keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:23:14:d7:42:a8:f5:d0:69:98:0a:c5:85:c7:25:04:ee:
         78:1e:db:06:86:80:47:1a:53:d9:6f:7e:1e:4d:6b:aa:ab:bf:
         ca:f9:7d:9d:7e:41:bb:14:30:b0:53:a8:d1:09:c4:2f:2a:4a:
         c8:60:d1:74:b2:52:b4:4a:98:cd:07:d2:55:87:02:3a:23:6b:
         cd:8c:61:94:0e:97:ce:d3:42:43:8a:b7:88:4a:54:f6:e5:6c:
         63:51:54:7e:17:37:f8:c0:fc:8c:ad:e2:8b:22:a1:1d:e2:0b:
         70:5c:d8:55:c9:3e:3d:11:39:95:8f:dd:a0:d6:05:64:dc:4a:
         05:8a:5c:81:c2:0a:e0:b8:b5:2e:27:cd:46:89:61:85:1f:bc:
         23:a0:d7:ea:8b:77:0c:2a:37:a2:d5:fb:e5:5d:70:3a:57:3c:
         9d:17:75:48:25:4a:b0:3c:2c:55:fd:28:6f:e0:cf:35:62:98:
         01:be:e3:c0:a0:9d:45:e2:0f:24:b4:dc:8b:56:04:e2:88:6e:
         43:ab:43:cf:6a:52:31:72:f1:12:ea:e6:ca:5a:2e:3a:cd:36:
         18:fe:9b:62:de:b6:16:80:eb:2e:e1:3b:dc:87:4b:ff:cd:81:
         58:13:16:21:f1:19:11:2a:4e:6f:55:ab:cc:fd:20:6d:a2:48:
         78:45:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----