Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File:                     nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier:          at92uRcwIZR6Pjo8QhU2hwl8sXfXTNqrAkfk7PUOM30=
Subject key identifier:   17:C0:81:BB:C8:FE:0C:F2:E2:91:5F:C5:BF:2A:86:53:37:75:79:F9
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer:       /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial:       01962E989A869B4E90E5EC5A8EC86C9FFCBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number:          0670
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
                          2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: LBkOc5ySub9FN55IuBL2lKGLFC2ypQsNvZVAc87Z7Ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:86:9b:4e:90:e5:ec:5a:8e:c8:6c:9f:fc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=17c081bbc8fe0cf2e2915fc5bf2a8653377579f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:aa:f1:2e:0b:63:6d:30:95:11:7a:a1:39:
                    64:22:b3:94:df:b5:8a:24:03:d8:7c:24:8b:4e:48:
                    75:b6:a8:e4:a5:dd:a5:c0:66:84:17:be:ff:91:1a:
                    1f:0a:84:ac:e0:d5:bf:7b:27:d1:73:00:c5:80:45:
                    81:4f:73:f5:b7:a4:8b:09:eb:9e:6b:ce:c4:45:8f:
                    5c:8b:63:22:64:4e:92:ee:43:87:e8:dc:64:da:e4:
                    04:3e:60:f9:44:79:51:74:7f:88:43:24:65:cc:12:
                    fc:e5:30:72:0f:a1:43:1e:54:90:3e:0f:39:8b:58:
                    86:17:57:aa:09:05:8f:3f:44:82:ca:6e:fb:18:a4:
                    e4:cb:40:46:c0:b1:c6:bb:f9:46:0f:a5:0b:1f:0d:
                    fc:74:39:84:3b:60:79:87:1d:c7:00:af:ce:5d:d2:
                    9e:6d:0b:f8:9c:20:a0:73:25:34:49:d4:47:ae:44:
                    71:2d:d5:1c:1a:b3:56:e9:7d:ac:e4:5c:e4:60:b8:
                    f4:56:ef:61:1d:36:2d:27:9b:7c:4a:ce:26:29:b7:
                    81:30:db:64:d3:56:50:0e:a0:4f:53:49:3a:29:72:
                    d5:50:21:c7:5b:2f:c2:aa:b2:9f:f8:03:03:8f:c9:
                    ec:6d:f6:03:00:0e:1e:b3:93:4f:5f:c4:f5:5d:5f:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:81:BB:C8:FE:0C:F2:E2:91:5F:C5:BF:2A:86:53:37:75:79:F9
            X509v3 Authority Key Identifier:
                keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:ea:0d:81:35:72:bc:ff:5c:82:e3:87:f2:d3:64:e9:66:
         00:bb:d4:5d:ad:03:4a:78:f1:ca:80:34:79:43:b5:08:6c:ed:
         46:73:5a:a3:e3:74:34:ce:71:e6:57:15:8e:17:bb:8a:6a:4b:
         c7:4c:98:3a:7a:a0:03:6d:66:41:63:a3:d0:4d:14:27:9d:96:
         8b:13:e8:ea:3e:4b:01:2a:ef:9c:90:09:1c:6b:3c:6c:5c:cb:
         f5:ef:14:d4:86:8f:a3:6a:a5:e4:9f:21:6b:a5:1e:23:fc:8d:
         3c:7f:ca:31:0b:d3:71:84:e1:93:2a:94:21:f6:7f:39:89:43:
         c1:8e:33:c5:54:03:ee:ab:9a:b7:50:32:dc:db:1e:96:a4:86:
         d8:2b:88:10:66:6a:a0:9b:6b:82:da:0a:db:62:21:71:01:41:
         96:e4:78:fa:71:ff:70:7b:b1:7e:0b:01:93:66:4e:62:84:7c:
         b6:02:e5:d9:fe:ac:ec:71:08:c2:3a:22:0d:e8:5c:f9:36:72:
         42:ae:f8:5f:de:9e:a9:12:1a:75:0e:11:4f:e6:91:e2:64:98:
         b6:2c:65:bd:78:76:46:fd:71:dd:2e:61:34:92:fa:c1:fd:92:
         7f:d6:25:41:57:ed:40:81:8d:eb:81:55:1f:ed:61:cc:80:81:
         08:dc:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----