Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File:                     nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier:          O/wLFSqjdqikOYP6GUep49b8ELe5kLs+7hU7MizRs3c=
Subject key identifier:   12:07:EB:46:E5:07:33:3C:0D:0E:C3:6A:3A:2D:BF:82:BF:4B:AC:0C
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer:       /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial:       01962F3D2C955C3E820D541ED9BE9F1CA6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number:          11AB
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
                          2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: eHusv1etTxVzow2euhAR/jGuZos7q9bOYsOgj7O5Q/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:95:5c:3e:82:0d:54:1e:d9:be:9f:1c:a6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=1207eb46e507333c0d0ec36a3a2dbf82bf4bac0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:ec:f0:84:3f:e7:ae:1b:78:ac:3d:56:12:
                    30:fc:c5:6f:de:1b:59:7a:87:d7:e9:4e:1e:8a:65:
                    84:30:16:e0:65:f3:0a:81:d5:06:9f:58:1e:14:2a:
                    1c:3d:b8:51:ce:f8:1f:c4:65:8a:5a:50:bd:d4:b6:
                    dc:63:64:38:f8:18:fe:40:f2:34:e1:2b:b5:fb:98:
                    ac:2f:63:70:4c:ce:ab:33:27:d6:45:33:e0:4a:c7:
                    6a:28:d3:9e:02:8d:c5:9a:64:6d:78:c2:27:84:c5:
                    b3:45:9c:dc:9c:c5:8d:f0:ac:24:08:4a:ee:30:cc:
                    8c:7f:a1:94:80:07:e0:03:26:bc:4d:60:07:c9:90:
                    84:be:a6:8d:43:a4:58:73:40:80:76:df:e8:ab:27:
                    42:32:98:b6:34:4f:2d:bc:97:60:e6:20:87:e7:ff:
                    fd:30:2f:ff:31:07:9c:92:d6:f0:b0:6f:2a:4e:3f:
                    53:e8:6f:24:1a:bf:aa:dd:50:46:30:86:04:1e:c5:
                    04:31:b6:50:30:bf:00:ce:5b:8c:3f:fa:1d:ea:2f:
                    e6:62:c9:6f:cf:67:d3:07:38:3f:26:24:2b:39:c9:
                    c4:e7:f4:78:18:89:6e:68:c0:31:ce:b8:7a:d7:74:
                    8e:f8:cd:59:cc:42:c4:59:e7:24:d0:4a:cc:e4:17:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:EB:46:E5:07:33:3C:0D:0E:C3:6A:3A:2D:BF:82:BF:4B:AC:0C
            X509v3 Authority Key Identifier:
                keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:42:32:4e:4f:43:e2:71:4e:88:68:9a:a5:40:69:20:ef:b9:
         16:74:cd:63:39:da:a2:bb:d2:2e:66:34:2c:29:78:12:fd:79:
         d0:64:20:c2:f6:88:c1:95:24:71:0c:a5:60:90:91:f8:92:f6:
         d6:80:0b:6b:2b:5e:a2:cd:ab:01:0b:14:b7:64:79:1f:9e:aa:
         6d:dc:49:8f:28:d3:cb:56:a2:55:18:f9:35:8a:cc:51:95:57:
         79:d1:73:0c:ee:ab:09:cf:9b:84:19:5c:7c:84:a5:d4:17:5e:
         a6:de:48:c3:2a:e1:36:fc:52:19:ad:08:1d:17:17:21:23:c0:
         2b:8e:4a:97:fd:6f:e4:8b:f6:5f:73:1c:1d:77:be:d7:95:b4:
         0c:ce:be:b2:f9:cf:ac:c4:de:29:49:e4:a4:e0:75:05:c0:0e:
         e7:cf:39:1a:87:93:09:30:97:2d:08:27:2d:fa:d6:be:27:2d:
         47:c9:fc:8d:4f:71:ab:af:f9:11:62:84:4d:37:51:9a:c2:23:
         db:60:64:2c:66:35:17:cb:6c:b0:58:04:5c:ca:04:37:2a:19:
         7b:82:66:a4:cb:ac:c1:64:b1:12:5c:11:86:a9:e9:d4:f3:c4:
         b1:eb:df:34:07:ee:c3:e6:ba:a6:67:ab:9f:91:01:62:29:38:
         ab:59:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----