Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File:                     nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier:          c9s+mAFrvK9xn1SDYAxkl0tu7AIKCKUyUtwBHOD6lPI=
Subject key identifier:   45:F9:6B:44:D5:F3:10:2A:6C:0A:47:2A:23:72:83:05:43:D7:D4:E2
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer:       /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial:       01962E98FA4EEF93D3A0B7099B0F3D515A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number:          1008
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: eJ8aYZ6pUYB4s+GLVPy+7ANXNSshpy59wgK+EVqZqTY=)
                          2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:4e:ef:93:d3:a0:b7:09:9b:0f:3d:51:5a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=45f96b44d5f3102a6c0a472a2372830543d7d4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:30:72:f8:91:9e:7e:af:38:6f:0c:10:b6:
                    43:23:a3:ab:83:0d:0a:16:d9:43:4d:35:a1:fd:b5:
                    9d:40:21:37:8b:45:2c:e1:90:6d:5f:76:4d:8f:37:
                    cc:76:e7:06:8b:1c:a8:9d:62:f8:c1:9f:4e:78:79:
                    bd:1c:1f:f0:66:e4:e9:97:b4:8c:72:35:fc:b1:c4:
                    b3:f4:df:cf:79:61:fd:63:e1:c4:e7:15:dd:28:77:
                    54:98:4c:0b:eb:c5:44:d7:c9:ea:17:d6:80:f6:49:
                    e4:70:68:1d:25:cc:be:a1:5b:6b:29:d3:8b:48:a2:
                    d5:50:2f:07:b1:47:95:ac:b6:ad:5a:ae:a8:4d:0e:
                    cf:c3:af:6a:63:74:78:37:de:6d:95:bb:f6:e6:e2:
                    d9:64:a7:60:f9:52:88:20:f8:a4:d4:be:5d:ac:a3:
                    98:8f:e6:63:7c:7f:4a:45:90:54:80:2a:6e:2f:88:
                    4a:9d:15:8d:f3:ef:6b:80:d4:3d:5d:f0:02:94:a3:
                    56:67:75:e0:1a:22:19:80:87:55:3c:dc:d2:be:7d:
                    c5:b8:87:22:11:00:52:e8:ad:97:e5:48:97:ac:a2:
                    53:65:f5:6a:3a:1d:a2:e3:3f:ec:8c:6d:0e:26:17:
                    57:f4:d4:08:7a:4b:7c:bb:a8:f5:0b:6a:02:be:49:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F9:6B:44:D5:F3:10:2A:6C:0A:47:2A:23:72:83:05:43:D7:D4:E2
            X509v3 Authority Key Identifier:
                keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:b8:77:08:4c:35:e5:13:01:2e:64:53:02:58:1f:ab:86:
         00:28:45:06:20:69:c3:68:94:ef:06:00:60:8f:96:d2:78:23:
         b4:5b:c6:9f:bf:3f:47:99:44:0a:ed:13:15:50:27:42:f2:d2:
         f2:48:30:05:f1:e6:93:ec:1e:21:5c:c0:23:d9:23:32:55:d0:
         69:5a:cf:a1:43:bd:45:97:ed:31:34:22:b2:78:63:88:7c:c1:
         c7:93:e2:ba:34:fe:01:2e:a9:d6:e1:41:28:13:76:4e:32:d1:
         67:bd:a4:08:29:fa:b4:8b:60:86:d9:f1:42:4c:44:37:3f:35:
         21:98:db:d5:83:33:47:82:9b:14:30:bb:2a:d2:59:51:79:36:
         89:b5:41:48:5c:d4:47:8a:c3:fa:ef:c6:c6:34:f8:0a:be:aa:
         4a:e1:00:cf:75:27:58:72:ba:c5:a7:6b:19:f9:92:36:25:bf:
         8c:9b:e9:ee:2c:c5:a2:a2:b5:ce:37:23:0b:59:b7:04:f2:49:
         bc:f7:c1:db:d1:f4:50:62:22:98:c5:f4:a6:b4:87:75:e2:da:
         24:b6:57:66:ca:62:85:a6:60:31:e1:1e:f0:ba:1d:26:c4:1c:
         0b:e7:cf:32:94:ed:36:70:3a:42:93:06:da:e8:8e:2b:d7:77:
         3d:4c:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----