Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
File:                     nA6h0d1bYGSFHYSccPHLFPyyo4M.mft (raw, json)
Hash identifier:          dUTR4IWi35Ispwhm+rTVYaFeZuoFt49/jq6/VCOscXY=
Subject key identifier:   BD:38:13:34:DF:95:9D:25:97:2E:37:77:66:2D:0F:7F:36:E9:75:9B
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Certificate issuer:       /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial:       01948EF54DF68924EDD897079B62DDC71AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft
Manifest number:          074C
Signing time:             Wed 22 Jan 2025 17:00:28 +0000
Manifest this update:     Wed 22 Jan 2025 17:00:28 +0000
Manifest next update:     Thu 23 Jan 2025 17:00:28 +0000
Files and hashes:         1: Uh2iPJxuHdDukuvdAgLnHChIlRQ.roa (hash: P7IzVfswDuCa9rPQa+x0Y8KRXxnLbD76QVgGKU1lQe4=)
                          2: nA6h0d1bYGSFHYSccPHLFPyyo4M.crl (hash: lYtpNkZGXjygiWSUMGnO4M9+MMZbJHvgCQcCUhvRDTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:f5:4d:f6:89:24:ed:d8:97:07:9b:62:dd:c7:1a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
        Validity
            Not Before: Jan 22 17:00:28 2025 GMT
            Not After : Jan 23 17:00:28 2025 GMT
        Subject: CN=bd381334df959d25972e3777662d0f7f36e9759b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:93:8f:7c:56:66:e3:68:40:96:d6:2d:03:
                    4e:24:7b:b0:5c:c2:77:59:86:93:49:04:e7:4c:ae:
                    e2:3c:c8:1c:2e:c1:f7:3d:26:23:f7:8f:73:58:eb:
                    dd:89:f9:0d:64:ef:7c:84:37:87:ca:f0:b3:20:f1:
                    29:a5:da:0e:dd:2f:2a:24:56:ea:5c:bd:3f:28:a6:
                    2a:07:d0:b6:9a:00:89:67:69:6a:8d:19:00:77:f8:
                    df:60:30:34:4b:67:9e:c3:2b:88:9d:ff:25:01:3c:
                    92:ea:ac:95:0a:81:ac:97:06:d3:64:4f:a1:c5:8b:
                    ae:84:7b:f3:45:52:26:df:60:29:23:de:2b:be:fd:
                    d4:84:63:7e:ec:c5:e0:2e:6d:4e:f6:c8:45:0d:82:
                    f9:45:6c:aa:de:32:1d:2e:15:9e:23:1e:2b:8d:09:
                    01:e1:6f:97:e5:99:8b:a7:a9:99:00:b3:d4:ae:db:
                    e1:fd:08:e6:a0:09:63:08:d3:39:b4:24:d6:15:45:
                    ed:f5:fc:a1:03:29:14:24:86:4f:35:36:c1:ec:d6:
                    d1:68:2f:90:c4:5e:7c:ae:c5:5d:69:8c:c5:6c:93:
                    98:cf:33:7a:e8:fc:04:cb:54:39:05:b3:ca:30:f3:
                    3d:22:ed:db:12:8f:3b:83:be:c4:09:39:9e:49:52:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:13:34:DF:95:9D:25:97:2E:37:77:66:2D:0F:7F:36:E9:75:9B
            X509v3 Authority Key Identifier:
                keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:b0:28:86:9e:3f:44:0a:5e:5e:00:37:11:34:3f:a8:2c:
         f3:13:33:ce:bc:ff:cb:3e:5d:89:81:f9:4f:30:5e:b6:3a:06:
         f2:88:dc:c2:7b:7b:28:74:ef:af:1d:9d:b0:75:49:5e:89:d5:
         e0:b3:2b:50:5d:a0:0b:68:7a:9a:9d:c1:1b:06:cc:2b:d6:91:
         63:c4:df:72:3b:1d:c7:64:ab:d7:1d:13:a1:42:9e:3a:fe:0a:
         56:74:d5:1d:21:43:c0:c5:9e:bb:6c:88:df:46:ee:24:63:21:
         6f:9c:bc:d2:80:16:dc:79:9c:e9:fa:a1:61:5c:4f:6f:41:2c:
         ce:0c:14:58:ae:31:d0:9c:50:c4:32:f5:6b:4a:aa:6a:ed:4d:
         d1:e8:fc:62:ee:dd:cd:70:5f:80:57:5e:d4:d0:2f:8f:46:7e:
         43:8f:19:ab:91:90:7a:0e:92:d6:da:3e:1c:d9:1c:da:a8:d9:
         4a:d8:7b:09:17:14:66:95:51:a6:ab:36:87:84:0d:5f:a0:f3:
         0b:08:35:71:35:00:86:31:de:72:d0:94:61:b8:9b:7e:e6:a6:
         f2:b9:b3:b6:8c:da:54:ab:8e:1e:82:e6:a9:14:53:80:1f:4d:
         d4:9e:1f:28:4b:47:ab:47:53:0b:f3:ed:70:e6:0a:9d:81:b0:
         ae:84:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----