Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File:                     nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier:          /I4Zkq+lGDfm8EOmsUh0eSDL8cCoPankedlShuCANN4=
Subject key identifier:   7B:35:42:A1:CC:4C:86:25:D1:0B:09:38:5D:9A:63:58:85:4F:C6:CB
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer:       /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial:       01962E995881C082D9CFDEB98654330F66A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number:          0762
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: cb8dWgekdgTmGEn_puzoSrtajs0.roa (hash: klMt7aeT4NJnkoShXspgSHaq5Jk7n53EuU54bLRTaLc=)
                          2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: O7jRYbgMgGwd1Kumr7owzU6VJxB4kbQBkhlh9dIeiJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:58:81:c0:82:d9:cf:de:b9:86:54:33:0f:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=7b3542a1cc4c8625d10b09385d9a6358854fc6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:c6:02:65:24:83:54:eb:30:31:e7:28:86:
                    0a:0d:39:ca:51:b2:c6:36:33:1a:51:8c:40:63:35:
                    0a:f2:ba:cc:92:a9:e9:00:66:07:47:11:96:27:0a:
                    34:98:e2:2d:ff:d9:d5:7b:d5:49:52:59:f7:db:36:
                    31:67:fa:0f:25:51:73:90:98:17:81:25:c7:29:f6:
                    a8:be:3d:ab:5a:39:f7:04:2e:49:b2:d4:a4:98:79:
                    e3:2e:32:41:12:f0:66:b6:fe:aa:f5:b1:90:d7:b0:
                    16:84:7c:17:2c:cc:b0:e2:e8:5f:c2:0f:01:3c:ce:
                    b7:1b:8b:b7:3d:f1:a3:f1:5b:4b:1b:7d:be:24:e6:
                    ee:9c:72:45:37:93:02:d8:0f:1a:17:e5:40:59:08:
                    ac:b0:f5:e9:b4:5b:40:a9:7c:80:cb:e2:65:1e:1b:
                    53:23:fd:84:ea:60:c0:35:e5:46:d6:2b:0a:3d:3e:
                    49:7d:66:c7:f5:1b:3c:e0:5b:3c:5d:3d:67:78:f9:
                    78:d5:70:c1:1b:b8:e5:07:58:d4:93:be:17:01:f6:
                    31:86:68:f1:ce:c1:35:78:65:9c:a5:a4:54:30:6e:
                    63:42:25:ef:72:a0:4d:8c:a3:ed:f2:7d:e8:8a:8c:
                    41:40:03:b0:04:24:ba:00:de:0a:37:97:a4:7c:51:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:42:A1:CC:4C:86:25:D1:0B:09:38:5D:9A:63:58:85:4F:C6:CB
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:68:9b:1d:6a:c5:c3:f4:a6:35:12:87:36:f9:dc:be:f3:
         e1:fc:0c:9c:33:10:19:94:48:bb:72:ee:37:0d:24:cc:ca:d2:
         92:64:c7:ab:a4:fd:0b:39:7f:f1:09:e9:bf:30:b6:f7:de:05:
         3e:dc:12:18:0f:aa:7c:9a:fe:7f:29:6b:69:d2:03:96:f1:a5:
         e9:ab:51:b2:22:29:e5:9f:68:c6:6d:f9:38:a7:40:10:0b:b4:
         9e:ff:e6:63:eb:d2:c2:2b:84:da:e7:f9:2f:a7:9a:79:e4:3a:
         2f:41:08:e9:66:e1:fa:18:80:b8:ff:55:5a:4b:3c:78:e5:de:
         1d:19:a7:cd:d4:b4:25:4c:27:9e:d4:05:d4:7d:dc:4e:97:ca:
         7c:30:a9:80:97:f2:99:de:05:19:a5:0a:6c:85:b2:97:e5:33:
         db:eb:0a:5f:21:30:08:ec:d6:b6:a8:40:0b:1f:94:a1:a7:e1:
         07:93:a9:44:44:73:96:d3:ae:a2:1b:93:00:e7:19:5a:b1:8e:
         ff:db:28:60:bf:dd:d2:e9:17:47:b0:6f:64:07:d5:de:71:26:
         e8:19:30:e8:17:b3:96:ce:86:09:c4:06:a7:4a:98:ad:79:f1:
         e2:10:22:a8:c8:36:73:6e:38:a8:45:9a:89:f3:ba:27:f3:f3:
         5a:7d:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----