Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          KRQsmgPG26hUvYiOdQo/sLFCz15cT3P5H8YoKbD9LmQ=
Subject key identifier:   15:FB:12:8D:8C:62:2F:57:42:67:08:29:D1:B8:46:43:76:D2:90:45
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       01962F073FE0AFE3229D99C9F487B2A8445C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          0E2D
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
                          2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
                          3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
                          4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: xnwU0Z/QSDdoeB1pUulPedlrr0Sc1g+rdUHplFK3nic=)
                          5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
                          6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:e0:af:e3:22:9d:99:c9:f4:87:b2:a8:44:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=15fb128d8c622f5742670829d1b8464376d29045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:db:1c:95:5d:1f:c0:e4:7c:b4:74:48:64:
                    af:6e:b7:f6:40:09:79:d0:70:16:47:e7:97:33:dc:
                    f9:d1:47:b5:48:bf:e5:29:53:2a:3a:d0:20:fc:66:
                    8d:d3:a7:0a:12:de:a5:65:87:72:93:a1:01:64:23:
                    4f:f9:10:86:57:50:6c:82:5d:67:76:d6:fc:1d:fb:
                    75:d5:2e:f0:2b:63:4a:1e:48:bb:e9:ae:78:42:be:
                    ec:2d:e2:52:f2:f4:e0:ec:45:47:71:82:ca:b3:e5:
                    0f:a6:9a:ef:e9:c3:c8:cb:70:2a:ea:82:51:cc:1a:
                    3b:b5:ab:61:6a:7b:06:ab:c7:64:3f:55:32:eb:5b:
                    4b:61:f0:00:d5:b7:52:cd:3a:2c:20:2c:87:9b:7c:
                    dd:83:45:f7:7d:78:cc:08:bf:37:fb:0e:ad:68:86:
                    32:0b:03:51:89:12:f6:89:61:0f:45:a4:9c:f3:ab:
                    f8:2b:e2:6b:40:60:2a:40:67:28:18:2e:9a:1f:1c:
                    fc:1f:a4:15:fb:37:33:63:ff:3c:dc:04:64:ac:ac:
                    08:a2:eb:82:97:b5:f5:9d:dd:7f:4a:ee:e7:a9:3e:
                    9e:6f:15:82:20:7f:37:bf:50:2f:0f:71:ef:17:9b:
                    b9:7d:1e:84:d1:65:ea:66:dd:2e:c7:08:af:e8:61:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FB:12:8D:8C:62:2F:57:42:67:08:29:D1:B8:46:43:76:D2:90:45
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:ef:07:5e:c2:81:c0:78:c9:be:52:da:8b:76:b0:07:a3:
         21:3d:0b:b1:b7:3a:c7:13:52:63:1c:35:d1:83:d5:ea:f4:48:
         ed:b8:8f:85:10:7e:c8:80:8b:f6:0e:c5:19:64:c8:b2:d1:5a:
         66:1b:84:d7:5f:40:c5:99:04:d1:74:da:6f:f3:16:69:1b:91:
         05:49:db:e9:48:3e:11:d9:fa:b7:10:cf:17:4e:c4:64:0d:44:
         d9:20:5a:4a:ef:79:31:78:66:1a:66:6a:ba:e8:66:ff:46:2b:
         4d:60:e1:06:2e:88:2f:41:cb:b7:39:0f:89:d9:b0:6f:97:7d:
         15:9f:db:7d:ff:be:52:f9:a5:64:10:d2:af:fb:01:26:d2:f6:
         ff:9f:c9:87:b7:75:63:5f:2c:b4:11:55:5a:c5:be:c4:50:1d:
         1c:92:21:6d:42:37:6c:d4:85:3d:84:20:8e:d1:8b:73:cc:6f:
         de:39:3f:f4:d6:c0:f4:c3:cc:09:99:48:e5:1f:a6:5d:66:d5:
         3d:84:fa:7a:d7:51:e1:a7:fe:c0:26:c9:08:c2:dc:b0:a0:42:
         74:7f:a7:72:d2:8f:52:5e:4c:89:7c:ac:84:54:8f:a4:6b:0a:
         27:64:47:af:0b:84:08:77:70:eb:2c:2c:24:49:a3:12:d0:38:
         10:98:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----