Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File:                     nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier:          YbRcFa07+78ik3WSJ7UnOPRd9E3HvLHmyr9ZQ7aJAss=
Subject key identifier:   36:2C:54:4A:7C:1D:9F:EE:1A:0F:F7:B5:EC:C8:AB:52:F8:DA:E9:AD
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer:       /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial:       01962ECF71C335D0C7CA2512F7B3399FC1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number:          079A
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
                          2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: aHDr3lxTc4fSQib9jFRh8f/35kMqGl9PAfY2T5qtx7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:c3:35:d0:c7:ca:25:12:f7:b3:39:9f:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=362c544a7c1d9fee1a0ff7b5ecc8ab52f8dae9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:a4:e4:50:d5:d2:60:88:9a:0f:53:8b:8a:
                    7f:57:6f:2f:e6:01:ce:f7:48:a7:30:6e:f1:6a:c9:
                    1c:77:7d:eb:d4:65:af:69:e3:9f:7a:96:b6:3d:ec:
                    28:38:c2:e8:85:67:d5:8a:ad:d3:32:15:a8:80:2b:
                    b0:d6:79:83:ed:1a:52:02:5c:dc:16:fb:c9:2f:df:
                    b4:d3:11:e0:8b:8e:c5:ad:55:50:a7:c3:17:b2:c5:
                    35:28:fd:a4:f4:c3:dc:08:5a:d5:ec:92:6f:1d:7d:
                    63:5c:b0:0d:1e:47:54:2a:ec:1b:79:a4:76:db:05:
                    a3:8e:8b:a7:cb:0e:81:9e:09:03:c3:00:d5:f6:48:
                    ee:d0:65:65:3a:63:d3:63:14:0e:47:1a:79:7f:1b:
                    15:ac:e0:ba:eb:b5:7b:68:62:b5:e3:98:73:bc:7f:
                    c6:18:26:9a:74:9a:30:44:e6:29:ca:60:ff:1e:8b:
                    41:25:f7:75:63:ba:2e:7c:7f:3a:a0:6b:e1:fb:33:
                    79:96:f3:23:18:5e:b3:63:74:4f:f8:80:9f:35:03:
                    71:fa:72:7c:96:47:ed:a8:7f:e2:d1:03:c8:6e:f8:
                    ad:c8:72:bb:fc:6a:08:83:5b:96:78:54:7d:a8:c3:
                    45:ec:75:73:5d:6f:52:6f:25:89:4b:42:c8:19:90:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2C:54:4A:7C:1D:9F:EE:1A:0F:F7:B5:EC:C8:AB:52:F8:DA:E9:AD
            X509v3 Authority Key Identifier:
                keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:d4:57:b3:17:49:23:a4:af:fc:13:71:91:a8:61:c9:70:
         1a:ee:6f:44:a1:e8:a5:7f:09:8a:fe:51:47:6e:f2:0d:8b:56:
         ef:f2:5e:ba:1e:bf:18:aa:01:8f:96:b9:99:a7:06:4b:89:e6:
         06:2e:b0:45:21:9d:1f:07:9f:65:0f:6b:d0:9e:fc:bd:3d:50:
         16:52:67:c7:d5:8e:e2:ee:8f:9f:f4:ee:cd:cb:fa:32:1f:d1:
         5a:7b:dd:47:c9:a2:85:f3:44:ea:44:2a:85:7b:2d:87:2b:59:
         78:39:b8:c6:46:4b:2c:32:79:a9:ff:3a:dd:78:06:39:85:14:
         5f:f8:ec:89:92:58:a5:27:1e:4a:54:20:ff:6c:94:43:fc:e8:
         53:b7:c1:60:1a:a6:19:6c:d9:c1:40:59:84:f4:e6:63:84:47:
         43:35:19:89:51:60:01:a7:b3:02:db:9c:c4:89:1f:14:47:e4:
         67:49:ab:c0:97:64:ff:65:bf:5c:3c:0e:1b:31:8a:3e:40:4e:
         5b:c2:95:5d:42:90:fd:dd:0f:10:8c:ac:d8:0e:80:d7:75:42:
         e4:7f:d4:c2:ed:41:e7:54:97:69:c4:57:81:3d:fc:18:6b:38:
         ee:60:b7:fc:03:30:56:ef:bf:f6:a2:d5:31:a9:3a:5c:7d:30:
         6b:ed:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----