Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
File:                     nckgfnB-NQXfaLmlvXCtKM1N04U.mft (raw, json)
Hash identifier:          f6KcaY6srgj5l8upLXQlZBuzj2dUoksWVyN/ZQY3pS8=
Subject key identifier:   93:FA:19:38:21:DF:08:95:64:FC:73:F5:ED:66:7A:46:34:F6:0F:8D
Authority key identifier: 9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85
Certificate issuer:       /CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
Certificate serial:       01962F0690A53BE665C0467CE2F2B4B529DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: nckgfnB-NQXfaLmlvXCtKM1N04U.crl (hash: SqsZOhHbsueLm57sweTNxOHp2B/f1FbdgASHBvsgKys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:a5:3b:e6:65:c0:46:7c:e2:f2:b4:b5:29:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=93fa193821df089564fc73f5ed667a4634f60f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:06:9a:6a:f3:9f:d0:20:17:f5:4e:20:b6:
                    48:ba:d6:a2:b0:3b:23:40:d8:b1:6b:1f:f9:82:b5:
                    ca:ce:ab:96:7d:6e:c9:bd:22:08:4f:1a:31:d4:e7:
                    76:83:39:c1:21:bf:e4:13:6e:69:81:22:14:be:b6:
                    e9:05:23:8a:c5:a0:cf:c8:26:f9:27:b7:15:d1:51:
                    8d:a3:13:cd:3f:bb:80:b5:32:fc:3d:7e:68:ec:55:
                    c3:ef:af:12:ca:81:41:07:e3:cc:e6:33:29:d7:b5:
                    a2:82:e4:ba:ab:60:df:09:66:cf:c0:ab:43:0e:d0:
                    bf:59:56:5d:e6:7f:7b:25:8d:6f:e4:13:e9:04:89:
                    eb:3f:88:90:87:61:0f:03:c3:fd:28:73:d2:92:70:
                    04:7a:63:88:63:c7:00:32:20:15:32:68:e6:5f:ba:
                    ef:83:1e:1d:52:d1:e4:6f:73:2b:b2:77:e1:c4:e1:
                    21:87:1a:9a:c2:bc:d1:6a:11:91:30:a6:52:6b:dc:
                    7f:9d:8b:cb:c2:5c:c8:5d:f6:32:fc:52:39:9d:de:
                    3a:b5:6a:15:1e:43:6a:42:8b:4f:d9:fc:fe:92:32:
                    d3:83:8c:d3:92:e4:b9:f5:34:4c:74:4e:fd:e6:37:
                    65:06:17:0d:9b:c2:9f:76:3c:53:71:80:35:62:20:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FA:19:38:21:DF:08:95:64:FC:73:F5:ED:66:7A:46:34:F6:0F:8D
            X509v3 Authority Key Identifier:
                keyid:9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:73:80:58:12:e4:30:4f:71:62:2d:19:d7:21:34:e5:8c:d1:
         68:db:b6:8d:45:94:e2:35:bd:38:ef:4c:8d:3b:d4:59:f8:7b:
         52:ed:f2:29:16:fb:f5:52:66:61:67:f8:97:f2:87:df:a7:66:
         24:f5:b4:a1:ee:e4:6c:5e:45:47:ff:5b:08:ba:a9:81:52:4f:
         e3:b8:3b:68:db:24:4f:ab:da:b3:1d:ac:dd:2d:42:cc:12:66:
         28:c9:6a:87:a6:7d:4d:0e:a7:32:39:36:5b:0d:4a:7a:00:11:
         a3:23:60:dc:6d:05:f6:02:6a:bf:a9:99:41:ea:45:15:79:b3:
         26:2e:ec:85:fb:d6:c5:3d:28:3c:5e:6e:c1:5f:94:60:f1:49:
         b7:e6:11:b3:9e:96:24:b8:88:70:10:80:f0:68:fa:00:9f:29:
         a1:7b:2a:ae:c5:0b:13:53:ac:d7:6e:a8:d9:de:c2:2e:fb:8c:
         4c:02:73:2e:39:86:0d:74:25:07:a6:42:ee:cc:05:af:9f:11:
         91:e9:f4:45:54:5f:53:2c:ef:72:31:eb:0e:f6:87:87:aa:39:
         e0:aa:32:a3:b6:6f:58:7d:86:9d:fe:11:46:1b:7e:b7:08:e5:
         8a:98:01:89:3c:44:cc:b5:b7:a6:08:d4:a4:93:55:d1:a3:49:
         54:52:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----