Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          CSj1eZoHcWQQiO1ycBfug5PjfzBgHz6mss4BRMGzGdY=
Subject key identifier:   64:1B:7D:4B:51:46:5D:76:52:8D:1A:B2:A0:8C:15:52:4D:E3:99:C3
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       01962F745484E9D0F77EEF36F66ABEE5C4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
                          2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
                          3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
                          4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
                          5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: SEG2eVcyu7pSGbhReCj9DOMRCuQJxIgBIHBI2I84aJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:84:e9:d0:f7:7e:ef:36:f6:6a:be:e5:c4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=641b7d4b51465d76528d1ab2a08c15524de399c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:85:12:9b:d3:aa:18:d0:a7:a4:2b:f1:01:
                    40:04:df:7a:15:3c:9c:91:d3:c4:9a:16:35:02:44:
                    96:2a:a3:02:32:96:70:d5:a4:b5:2c:4c:ab:74:5d:
                    58:1b:25:6e:e8:3c:48:f9:51:2c:89:8c:66:cf:91:
                    69:e6:78:28:f5:5c:d2:26:df:f4:f9:86:ef:ad:7c:
                    34:27:e2:8d:fe:a6:12:c8:80:ae:0d:95:e5:fc:3c:
                    4f:7d:a9:c8:9d:ed:a7:fe:60:92:d7:04:cc:25:03:
                    e1:f3:9d:c7:f5:3f:a2:69:29:9b:ee:06:f8:60:da:
                    b9:3b:d4:fc:90:a7:6c:9b:b3:4b:58:18:97:64:27:
                    ca:80:c6:1a:d8:2e:35:a4:f0:0d:b3:a4:33:5d:16:
                    c7:5b:db:64:41:bb:1c:72:06:d1:97:d4:c6:a1:ce:
                    1c:02:1b:20:0f:4b:b1:de:8b:f0:f8:54:58:9c:c2:
                    fd:80:35:ff:ef:ba:cd:96:9f:0d:69:f9:7a:c2:5f:
                    91:5d:da:7a:36:8e:a9:cc:1f:be:54:08:c9:38:0a:
                    88:9c:17:f5:14:30:5a:73:6a:c3:2a:77:c2:c8:07:
                    8f:b4:e4:05:60:cf:7c:72:aa:99:05:9e:ee:9b:62:
                    a1:a8:06:34:26:73:2d:5f:ed:10:b3:e7:6d:04:6e:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:7D:4B:51:46:5D:76:52:8D:1A:B2:A0:8C:15:52:4D:E3:99:C3
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:9c:f5:93:4f:0d:bd:5b:52:c3:0e:2b:c4:c7:0e:fc:1c:
         af:b1:e0:64:84:20:48:a7:46:fb:3f:c8:52:91:92:84:34:83:
         a6:a2:68:89:ce:91:2e:ea:33:f1:d0:8d:ce:c6:c9:51:c4:b5:
         ce:5c:1d:35:f4:64:00:70:0e:d8:93:1c:cd:58:a9:4a:c9:ef:
         54:0a:f8:d0:d7:f2:2f:44:80:90:11:18:30:58:21:bb:59:56:
         40:d8:6a:68:df:32:d7:a4:6e:da:89:c2:17:e2:cf:21:60:84:
         57:d9:2d:95:df:ca:09:62:2c:4b:f4:02:9d:34:f0:0b:88:73:
         5f:1d:94:43:c8:7b:b9:a4:7b:1d:14:82:36:9d:62:d2:b8:e0:
         b1:ca:73:e7:73:e4:3e:50:fa:0f:e5:10:b4:22:37:b4:a7:be:
         c3:52:8f:fc:b9:e4:99:1f:e3:a6:09:03:df:f8:26:d8:4d:dc:
         53:70:1d:33:a4:56:ac:fd:fa:89:da:c7:0e:4e:c7:cc:dc:93:
         92:32:af:20:b6:39:26:2e:dd:43:0c:e0:f3:ec:4a:21:ca:7e:
         07:93:94:44:d9:bc:63:9f:d8:52:a3:bb:a2:d3:db:6b:7b:e7:
         a1:46:8d:7f:64:ff:9f:5e:01:d6:ab:5a:32:5a:48:11:c6:d5:
         66:6b:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----