Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File:                     nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier:          kZTtGJ7WHCD0NGTvFZ5LO5YvVzPMuMieiPmk87SyI/8=
Subject key identifier:   9A:74:AA:6E:32:AA:0E:0D:F5:AB:B6:57:9F:5A:F4:D2:DC:A6:B5:80
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer:       /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial:       01962F0732ADB5923DA2868B285CE4721DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
                          2: hvWaFS0EttocYGvPpBWtHglH1UU.roa (hash: 5kJHcJE58dfjo4vnxy+41rEzTCWfIQJ14p7YHDvJKE4=)
                          3: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: xxpDYyAe/QVN3OeNEUmxUt7tFwsQgYI5zB+k57/5CNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:32:ad:b5:92:3d:a2:86:8b:28:5c:e4:72:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=9a74aa6e32aa0e0df5abb6579f5af4d2dca6b580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:f9:c2:66:08:11:54:7e:a7:a5:de:a4:a1:
                    53:7a:b2:ce:0c:6c:a9:95:99:86:42:a7:3c:e8:08:
                    b6:c2:cd:f5:96:60:25:d1:ce:f3:cd:c0:bb:1a:42:
                    85:e3:d0:9e:6a:d9:f9:d7:86:91:1d:2a:82:c9:30:
                    65:3a:4b:c3:34:b0:95:27:44:e0:b0:82:6c:31:0f:
                    3f:15:ee:fe:c8:6e:2b:29:1a:fb:17:b9:c6:3c:19:
                    34:b6:e4:a5:2e:ed:79:86:37:5a:58:c7:c1:9b:6f:
                    11:44:1e:3c:7e:6d:89:76:4f:b5:e4:8d:30:e2:6f:
                    26:a6:57:16:f9:e8:03:f5:0c:58:5c:d9:61:a1:28:
                    29:51:74:21:fa:5b:c6:1c:9f:97:e6:80:b9:dc:46:
                    13:46:f7:3b:f3:91:02:d1:98:8d:94:1c:74:f4:3e:
                    72:c8:7b:b6:d3:a1:8b:76:d3:30:a2:24:ba:58:51:
                    8a:42:3f:83:d8:9d:2b:e7:10:c3:32:14:e3:d2:99:
                    c0:dc:d4:49:a6:ad:5c:c3:ab:06:c0:07:53:84:06:
                    43:bc:d9:97:a4:de:e7:72:87:58:19:f9:f6:ea:97:
                    57:f3:cc:fb:b6:cc:76:5e:6c:60:1a:51:68:ac:45:
                    41:94:09:16:16:3a:76:63:8f:68:38:89:16:9d:57:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:AA:6E:32:AA:0E:0D:F5:AB:B6:57:9F:5A:F4:D2:DC:A6:B5:80
            X509v3 Authority Key Identifier:
                keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:d8:c0:b9:d2:03:24:93:bf:4f:9f:0e:1a:9b:68:74:c6:
         cb:d3:b7:72:67:a9:cb:57:4b:06:83:c4:16:4b:40:b1:57:ae:
         93:c9:f3:ae:0e:66:2c:83:f1:ce:31:85:be:18:f7:6d:53:29:
         cc:56:03:e4:78:4b:93:4d:bc:cd:de:3c:97:23:ae:96:f1:c5:
         d8:14:7e:7f:33:1f:61:93:02:48:d3:62:e3:41:01:c9:0a:53:
         33:cd:bd:f5:56:a5:f8:a7:9a:42:d0:68:2e:ec:ed:c4:ad:7f:
         2d:df:b2:0c:eb:d1:61:9c:91:ce:73:e5:1c:f8:7f:39:11:bb:
         7f:f3:6a:b2:0f:95:6f:fb:cc:7a:24:78:f9:b4:f3:93:9c:c9:
         1c:ff:cd:83:91:de:bb:bc:c6:a5:b7:58:56:65:63:43:57:d6:
         a7:61:d9:84:a8:e7:6f:2a:48:9b:a1:bc:d4:09:19:5b:76:b1:
         e9:9d:cf:39:77:f8:9f:fa:4c:d3:97:71:8f:7f:30:7a:10:82:
         04:9f:fd:28:5f:bb:f8:38:d1:cd:8a:10:9e:05:5c:3a:e3:c9:
         7f:81:e6:31:ec:2d:d9:41:f6:a8:e5:b9:37:ea:a9:27:64:3b:
         0a:c8:71:3d:a8:fe:ef:e6:b9:db:ea:b3:44:4d:4c:e2:2c:2e:
         a3:9f:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----