Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File:                     noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier:          tQjMD1rAXqVIf8W9XxYNGSAu3jaEJRmUVF9Swe2e77M=
Subject key identifier:   9F:9C:3D:55:06:99:A7:32:A2:F1:AF:6B:44:F2:21:8F:1D:CC:54:71
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer:       /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial:       01962DF3E094603F788E71917C01DBD4876A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=)
                          2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: Q4tibnFEitTxzG3GGHhXiCIVJWzfhuJ2QyncT27t+Is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e0:94:60:3f:78:8e:71:91:7c:01:db:d4:87:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=9f9c3d550699a732a2f1af6b44f2218f1dcc5471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:ec:26:55:db:10:d4:74:41:96:14:1a:b0:
                    88:f9:ba:2d:21:8c:38:5b:50:4b:d4:7e:ff:26:1a:
                    2b:b5:8d:3a:26:80:ca:73:67:49:8a:12:cc:f2:0c:
                    2a:7e:8a:16:1a:ba:09:0d:5c:d2:d9:3e:ce:af:d4:
                    fa:54:d4:33:9c:82:8a:cb:98:aa:fe:e4:f8:f1:37:
                    12:5c:47:e2:1f:7c:c7:f8:f0:3f:5e:3c:72:ac:16:
                    5f:b2:f0:33:e5:e6:dd:0b:ad:53:cf:dc:e6:51:15:
                    b6:ab:9b:fe:74:7e:46:ca:02:07:16:b4:a7:88:7a:
                    7e:7b:03:b8:4d:f3:4a:4b:cc:5f:29:59:6d:e2:01:
                    62:23:34:1f:74:7b:d6:bf:14:fe:b1:ab:80:4f:8a:
                    b3:f8:ca:6b:c4:25:fc:e4:c8:a8:c7:71:00:a7:c0:
                    98:c6:7e:e3:e9:3b:03:82:82:50:3b:5e:29:83:33:
                    87:c0:0f:e3:82:f1:21:25:a0:77:5b:d5:6a:98:9a:
                    a6:c3:91:13:63:43:a2:f1:d2:7d:a2:67:ec:1b:5f:
                    57:e1:ed:30:3e:1d:82:75:6a:fe:56:8a:c7:87:5f:
                    69:fa:9c:97:6e:6a:d4:ea:58:c5:d6:82:47:01:34:
                    24:c7:af:98:a0:57:2c:9b:a8:d3:20:3c:33:f9:c7:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:3D:55:06:99:A7:32:A2:F1:AF:6B:44:F2:21:8F:1D:CC:54:71
            X509v3 Authority Key Identifier:
                keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:84:a8:fc:24:ba:5b:3c:50:6e:ae:84:d8:dc:3b:9d:b6:
         0e:3d:cf:8d:7c:3c:44:af:3d:c1:20:cc:f7:de:76:6c:32:9c:
         14:83:b2:5e:37:7c:d3:c2:3b:95:e9:75:fa:7f:35:67:4e:3a:
         2a:43:f0:34:08:a2:8c:83:56:a7:be:ef:4a:64:89:f5:db:f1:
         e7:dd:04:fa:d2:58:9b:6e:88:79:c5:9c:d0:35:c2:5e:7f:3e:
         7c:fd:b8:4e:d3:63:19:d0:9a:49:a4:7b:eb:e2:62:7e:0d:8b:
         99:32:ac:9d:a3:8f:ec:4a:2c:90:44:20:b6:cd:86:ad:38:51:
         ed:c6:06:e1:15:34:26:22:3f:49:95:c2:e8:d1:05:b1:2f:d1:
         9f:2d:5e:eb:2c:c0:15:05:98:62:88:34:3a:23:73:74:2d:2a:
         db:0e:ad:ab:b7:77:03:17:53:db:5f:02:6d:24:00:33:67:e3:
         93:45:00:39:4f:3c:30:e7:1f:1e:7f:21:76:8f:ab:cb:8c:1a:
         a6:8d:4c:f5:60:03:05:ef:40:04:94:47:3d:94:7c:12:ff:11:
         56:ee:8a:9c:a4:f7:ec:21:65:86:35:a8:b5:c4:59:96:2e:80:
         27:45:ef:dd:7d:ed:65:70:e6:fa:d0:60:30:c9:91:62:d7:5f:
         e9:6d:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----