Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File:                     nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier:          PW6OuekLlVTTs38lC8O6tnQoRltZK7VNQrhnEA8GP/w=
Subject key identifier:   3C:D8:F8:26:80:BA:C7:33:B9:3C:B2:61:03:45:C3:D8:E2:45:7D:33
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer:       /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial:       01962E9874C387E0B60E36336792111573E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number:          05E8
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: VlsdQU4fOMkrmrwOvsj3CXmLU9kM6BrIivAqV+OLtSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:74:c3:87:e0:b6:0e:36:33:67:92:11:15:73:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=3cd8f82680bac733b93cb2610345c3d8e2457d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:c0:1e:b1:64:86:a4:75:72:5c:75:7d:b7:
                    b9:fa:9a:d5:bc:8d:8b:8e:05:4c:fc:55:6b:ba:45:
                    70:37:d9:0e:f9:c9:88:bc:e6:6e:4e:20:08:6b:03:
                    69:c0:9d:de:6f:44:af:03:a2:d9:bb:81:d4:4e:1e:
                    7a:6b:bc:84:0a:4d:84:08:80:bd:a4:d1:0f:b4:71:
                    0c:1d:76:9a:7f:ff:09:bd:12:54:59:81:b3:29:3c:
                    b9:96:f5:89:a8:70:0c:c8:f6:42:e8:86:d6:78:ac:
                    98:1b:40:75:64:a2:cd:d8:20:b7:d8:a9:25:2f:1b:
                    65:9a:6b:c7:cb:58:85:f9:00:ca:14:31:11:7f:58:
                    89:4e:7e:5b:ef:7c:e8:3b:34:18:b4:5d:45:37:29:
                    f6:a8:d8:56:9b:64:b0:8b:1c:67:8a:a0:13:ef:17:
                    76:3b:c3:09:72:b9:8a:02:d9:66:76:67:1d:d5:25:
                    dc:74:0c:be:17:72:25:60:cc:75:c3:f7:7c:40:95:
                    f1:8e:5c:c1:5b:8a:b2:22:b4:0b:e1:26:e1:07:7d:
                    4c:f7:31:35:f5:7b:7c:42:43:f0:47:92:8b:d0:91:
                    59:b2:9a:89:4e:75:a9:9d:ef:f9:aa:9d:53:ec:77:
                    22:a5:8b:ec:34:93:3e:a7:9c:09:d0:63:f8:a9:03:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:F8:26:80:BA:C7:33:B9:3C:B2:61:03:45:C3:D8:E2:45:7D:33
            X509v3 Authority Key Identifier:
                keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:18:a8:f7:05:94:73:0f:83:99:27:b4:70:24:df:1d:50:
         2e:c5:63:16:9e:40:df:46:72:85:4c:77:11:05:61:f7:f4:23:
         ff:de:2d:2f:99:11:10:23:31:63:6c:40:2e:cc:68:02:0b:c2:
         a0:61:23:e2:29:fa:c8:28:94:84:f8:19:02:a8:3f:3f:11:32:
         b9:8f:ff:5e:27:ea:9a:72:61:5d:6d:c0:b2:f0:97:ed:28:0f:
         6c:3a:47:fa:ef:8e:6f:77:19:cb:ac:b1:30:c3:a3:ec:ad:42:
         ec:af:d4:dd:38:d2:73:48:d5:2f:a2:52:2b:b7:0c:4f:83:af:
         8e:90:b5:42:f1:f6:07:69:5b:f4:1e:ac:2c:7c:06:af:d3:e8:
         c9:d8:a8:c4:ab:b6:74:33:da:d6:9e:43:0a:de:c4:f0:c9:87:
         3e:0d:fc:a7:37:00:61:fd:66:c8:fb:93:f0:e4:c7:7e:c6:2b:
         38:c8:db:2f:3c:dd:40:01:45:c4:48:92:b9:e0:0d:0f:c3:e6:
         0a:9b:3e:3a:e1:e1:9b:bd:74:d7:42:8d:94:e6:fd:d6:f0:96:
         b7:7b:f7:0c:ae:14:a8:2f:e0:df:07:c6:6d:8c:44:1b:77:12:
         06:71:9d:7c:28:08:13:c4:3f:dc:ff:2d:7e:0a:26:56:fb:f2:
         78:24:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----