Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          cR+VSftfb7+tc4LkldyL/pxDmxmlQj44hyMscRMLTH8=
Subject key identifier:   C8:4D:CD:7C:7C:65:20:5C:1D:C0:7D:67:74:D3:A8:FA:44:F4:18:7F
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       01962E99C010AFF12337A722DEBEDA1D6395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
                          2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
                          3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: +DLFh1TDgibb4w3ZL9Ph1P/Z/F17ml00evVXapfgqc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c0:10:af:f1:23:37:a7:22:de:be:da:1d:63:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=c84dcd7c7c65205c1dc07d6774d3a8fa44f4187f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:e3:ba:35:53:2a:6d:d0:13:b3:70:95:da:
                    7a:66:c6:f9:54:21:42:7c:7b:70:b7:e4:20:50:26:
                    b0:54:6a:d8:f8:5a:4f:ed:3b:75:91:2e:ff:ee:f5:
                    f3:de:0a:f7:cf:4b:78:6b:b6:71:93:9b:d9:65:d8:
                    2e:55:b2:2d:d1:5c:6f:94:ab:57:81:a2:8c:bb:8c:
                    f7:4c:4e:ed:14:5d:6d:12:da:72:17:dc:9a:22:f6:
                    2b:c7:38:d3:76:77:b5:5f:8b:cf:8c:3b:fa:89:98:
                    e8:2c:b6:71:15:9b:b7:36:42:0b:95:1f:4d:80:eb:
                    dc:7f:78:b8:27:56:7b:10:a1:f9:f4:f3:90:a9:35:
                    42:ba:a4:68:cf:97:ff:52:eb:3e:ef:d1:58:8a:4b:
                    f1:27:65:f8:3e:bb:9c:03:84:31:be:02:82:32:5e:
                    12:a8:ec:c2:95:69:e8:2b:12:ab:c7:2f:83:60:f2:
                    46:49:ed:a8:1c:85:bf:0c:8d:2a:0b:3f:43:20:f2:
                    3a:a7:1a:bf:e4:ac:b8:27:bc:32:b1:a6:73:33:e8:
                    ec:f6:b4:ce:fd:6c:d8:01:91:e4:50:e9:e7:e0:61:
                    c6:ca:ee:ab:bf:55:a9:a7:97:7e:cc:9d:00:a6:e9:
                    01:fc:2c:01:e1:64:9a:9b:f3:a3:91:a0:7a:5a:7e:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:CD:7C:7C:65:20:5C:1D:C0:7D:67:74:D3:A8:FA:44:F4:18:7F
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:b5:0e:fa:98:c7:f2:7a:df:07:ca:0b:ea:8f:d6:96:25:
         0a:56:49:fc:83:59:77:9e:f4:0c:d0:88:f3:5b:66:b6:b0:e8:
         0c:46:16:11:ad:56:60:20:fd:82:77:bb:ab:79:59:52:1c:50:
         59:b9:7e:dc:31:f9:a6:a1:63:78:6c:60:d5:9d:78:a9:70:e8:
         ca:ab:53:65:4d:de:37:7e:d2:35:f2:6a:95:b7:10:fc:69:d3:
         c6:03:05:10:3f:a7:c9:67:51:f3:e2:dd:00:d9:43:05:90:c6:
         8e:b8:da:53:af:e8:eb:48:b4:17:61:8f:36:e3:03:70:cc:cb:
         53:88:b8:11:a3:66:1e:1b:2f:17:38:3a:43:30:70:ac:90:09:
         54:67:b7:1c:70:d4:26:b2:f6:62:32:d5:1f:27:58:6c:af:fd:
         43:78:59:8f:6c:c9:0d:2f:96:24:bc:7e:d1:13:37:83:34:a2:
         77:18:f5:12:71:2b:06:4c:9c:6c:e9:a2:33:ac:2e:7c:3c:d5:
         c2:2f:6b:18:b6:54:37:38:f8:92:6b:9c:b1:b8:4e:fb:e2:f6:
         33:8f:cd:ba:63:7e:18:18:06:33:6a:7f:55:63:fb:bc:84:75:
         ee:dc:74:01:53:8a:b0:3e:69:82:b1:30:d0:d9:bd:53:a8:55:
         09:a1:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----