Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File:                     nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier:          N4rWpbYeWvYz78G5GVNzZrQt7Iy7wsZSd2G0hTwEXXA=
Subject key identifier:   C8:F6:19:D9:7C:6F:11:15:B7:3F:E8:C2:D2:BA:C7:B9:16:E5:88:95
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer:       /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial:       01962ECFCF365C768C5436B9902D43D9A724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number:          0DB9
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
                          2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: Tdgq838NhsSpZrRyGHQA5d2VhXu4HH21Q7ihklgRNyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:36:5c:76:8c:54:36:b9:90:2d:43:d9:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=c8f619d97c6f1115b73fe8c2d2bac7b916e58895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:9a:99:2c:bc:65:ec:b9:8e:a4:5e:9b:aa:
                    08:ea:db:22:b6:55:10:9f:f4:91:9a:51:28:e8:3d:
                    48:c9:f7:c0:dc:30:5c:e9:ba:7b:c9:22:88:d3:28:
                    b4:2b:93:99:81:5e:98:9f:0a:3c:87:f1:a8:70:f6:
                    c1:43:28:6f:6e:99:81:17:8d:a4:5e:09:db:6b:0f:
                    6e:5d:5e:3c:7a:78:0b:39:b7:2f:87:19:88:48:90:
                    7e:c4:64:b2:0e:b6:37:e8:6a:2a:00:b7:cd:13:60:
                    6a:46:67:43:af:24:3c:42:6e:fb:0f:37:a8:da:f0:
                    99:3c:97:bd:70:d4:bb:cc:71:81:3d:b7:77:99:7b:
                    4f:ee:72:a0:2d:fc:57:d3:be:dd:a7:dc:a5:8b:4c:
                    d8:6f:85:56:5c:01:c3:25:d4:d4:ae:86:41:0e:9e:
                    d5:76:95:e7:87:ac:b3:08:1a:46:aa:34:b0:68:2f:
                    d4:dd:a3:60:38:f5:98:91:28:9c:5d:ce:3c:c7:1f:
                    83:4b:2f:72:fd:33:ec:86:91:fc:6f:5f:b0:51:d6:
                    9d:3e:a1:a8:c6:69:10:5f:d0:4b:95:56:59:45:61:
                    00:0c:b0:fb:ec:59:a0:96:88:c0:31:69:c6:c9:3a:
                    9b:20:50:c7:50:cb:0d:03:3e:5a:96:cd:be:2e:73:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F6:19:D9:7C:6F:11:15:B7:3F:E8:C2:D2:BA:C7:B9:16:E5:88:95
            X509v3 Authority Key Identifier:
                keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:ae:83:e4:c4:78:30:aa:d1:fe:35:4b:14:7e:cc:0f:e8:
         8d:70:26:31:a2:41:85:ad:c5:96:78:d7:6f:f1:02:8d:60:6b:
         e5:e8:fa:d4:53:82:4b:3a:d1:75:ee:19:7b:b6:a8:6d:be:01:
         4c:a4:36:c7:f3:07:dd:ef:ce:b6:a6:0a:0c:e2:29:33:f5:2d:
         16:6b:0e:b7:54:79:91:44:9d:6a:3d:08:01:ad:df:90:dd:2e:
         3e:e3:a9:7b:e0:31:d1:d3:32:d1:c6:7d:fc:c1:1c:73:fc:75:
         28:2b:ea:47:9c:dc:ef:71:7c:97:c1:b4:ea:37:3f:e0:b0:73:
         88:c1:2f:03:f7:da:ef:7c:1b:69:e6:fa:26:f4:14:a2:29:ae:
         b1:68:cc:d8:08:2c:7c:dd:57:cd:95:0f:4a:f6:3b:a0:93:3c:
         6d:e3:7a:78:50:72:b3:98:a6:58:d6:27:a7:17:5e:e7:fe:69:
         8d:0f:4f:9e:58:c3:ce:c2:d1:f1:83:75:c9:79:f9:7d:1d:fd:
         fd:69:8d:25:4c:c8:8b:02:38:58:86:dd:90:17:c5:52:20:61:
         1f:f5:15:f5:78:f2:ef:ef:82:e0:76:48:9e:2e:e5:59:48:9e:
         9f:4f:40:ac:c0:53:8a:32:bf:81:6b:38:78:4b:55:78:ed:ab:
         76:d3:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----