Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File:                     nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier:          dGSQCw8qc3X4+V64oJs5Vt71Pz+ERr428OOFzILWZOo=
Subject key identifier:   89:98:20:A2:2E:36:DC:53:BA:82:FE:63:CB:6C:DE:DA:47:6A:C8:97
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer:       /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial:       01962E2ACB13702ADFC24C41154F50029E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
                          2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: BmkBYrb9BtEZxmAk1aCKuoHXHZmWLZtM3lF7WeiPU7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cb:13:70:2a:df:c2:4c:41:15:4f:50:02:9e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=899820a22e36dc53ba82fe63cb6cdeda476ac897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:cb:a4:b8:97:c0:0f:ce:1f:64:27:69:ad:
                    93:f8:ee:10:0d:41:ff:b2:c6:9e:b0:1b:19:a6:c2:
                    f9:0c:1b:8c:cb:2c:97:79:4b:43:f1:1f:0d:a1:cd:
                    22:06:f1:0b:4c:88:c0:82:14:74:a2:5f:c7:03:42:
                    d0:e2:0a:d3:ed:84:70:19:ee:5e:e3:ba:f8:10:38:
                    7d:e6:31:8c:95:f6:fa:f0:6f:2f:b7:2d:61:ed:80:
                    23:7d:88:e0:5b:93:35:ef:c7:1b:e4:b3:08:0b:93:
                    04:09:03:82:92:75:8a:c3:30:f7:83:a0:f8:3d:52:
                    12:80:fd:13:e1:be:e8:69:74:39:3c:a9:0b:ea:94:
                    28:c3:a6:52:de:f2:db:4a:97:96:64:a1:c6:52:4d:
                    d3:b4:1a:14:83:61:9a:1a:7d:62:fe:b0:0c:5a:11:
                    f4:c5:99:58:7b:cf:6e:44:32:9e:e2:da:40:77:c6:
                    d6:cb:56:cf:66:b4:1c:94:db:b0:0f:68:e2:fe:be:
                    96:4c:83:95:ed:2f:d2:88:c7:cf:fd:00:0e:32:2a:
                    84:4a:8f:e4:f7:79:03:f7:97:71:e1:f4:73:ac:86:
                    9f:4e:2b:b1:cd:ca:4c:8d:14:8e:a3:f5:b8:38:c5:
                    b6:74:c2:a6:26:87:da:10:84:60:45:84:eb:53:71:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:98:20:A2:2E:36:DC:53:BA:82:FE:63:CB:6C:DE:DA:47:6A:C8:97
            X509v3 Authority Key Identifier:
                keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:82:68:25:f1:c5:6f:19:1f:0d:4a:8e:7a:95:2e:5f:be:9d:
         f0:64:68:4d:82:dc:dd:cd:d7:4c:21:9e:16:24:61:87:37:ba:
         48:02:71:d0:69:a2:20:79:8d:8f:d0:51:89:26:fc:56:10:ab:
         36:22:33:c8:d0:8c:43:0f:eb:d5:56:7b:ee:84:06:c6:42:3d:
         ce:a1:c7:7e:74:29:1a:47:0c:a1:5d:a7:ed:bd:4a:71:6f:84:
         c8:26:77:5a:d8:8f:92:87:60:62:48:1f:94:e2:ac:54:9f:7c:
         0b:c1:e8:6e:24:de:73:9f:ec:33:e6:6b:d1:03:17:c2:8f:91:
         0f:7b:77:f8:5b:dd:1c:22:bf:38:80:a4:4d:1e:70:53:45:2c:
         fe:24:ff:16:29:18:c9:b8:dd:df:f4:88:21:45:32:31:70:35:
         7e:01:28:f9:b2:5c:8e:c3:d0:64:eb:74:db:a3:ba:4e:7b:f6:
         07:b2:47:82:f1:11:a1:14:5d:6c:a5:84:28:39:c9:78:10:e8:
         78:1e:5e:d7:07:69:37:34:5a:0b:ab:09:27:36:09:68:47:fc:
         75:fd:6b:aa:b6:e5:d0:18:78:3b:bc:73:96:41:00:fa:d0:57:
         7b:ef:19:f1:8b:33:9c:fb:38:29:68:28:a7:e3:0f:cd:d5:6c:
         d7:79:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----