Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File:                     nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier:          5esTI/lT0jUR+E0wcEVsQkRS+YIHGwVf0sNNXOgycb0=
Subject key identifier:   42:11:08:C1:AE:15:22:59:7B:55:91:AB:10:63:CE:7B:6F:7D:32:3E
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer:       /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial:       01962E997999F427276EEA720FC8773EAF6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number:          081A
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: WXWNiyAw9ZdEnBxVdD8GBfdATN1XzDW3EhTEzjA/xfI=)
                          2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:99:f4:27:27:6e:ea:72:0f:c8:77:3e:af:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=421108c1ae1522597b5591ab1063ce7b6f7d323e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:a4:a9:e9:58:1b:77:4f:fe:40:06:23:08:
                    44:bb:a4:70:ea:2d:4b:64:bb:58:a8:d6:b1:4f:35:
                    07:25:ce:d1:27:6d:98:8f:c0:0c:4d:57:97:92:37:
                    ce:54:74:00:80:76:d2:e6:03:c4:11:6e:9d:d2:80:
                    05:73:16:ae:ce:88:35:69:c0:3f:2d:a7:20:bf:68:
                    0f:ec:04:a2:1d:70:08:6e:af:42:84:a2:7f:86:43:
                    b9:83:6a:0e:62:ff:ae:59:96:d8:d3:28:30:b7:d6:
                    50:de:98:2b:69:96:b9:7f:47:10:23:0a:8b:6e:c8:
                    b4:4f:df:0e:cc:bd:44:8e:cf:75:60:03:b7:d6:a0:
                    44:9e:9d:3c:a5:fb:b9:d4:2e:86:a4:36:6e:ac:ee:
                    5c:89:2c:07:7b:61:67:3d:bd:df:55:66:72:f7:d1:
                    7c:43:06:cd:4d:d1:88:98:f9:8e:49:30:42:e4:b3:
                    f7:c7:40:1f:fd:a3:28:dc:ec:bb:a9:95:5b:ef:f3:
                    78:5d:07:13:44:52:12:6e:75:14:9b:d0:b5:c2:5b:
                    3c:42:94:be:4d:eb:70:2f:69:f3:3e:a3:a0:3e:e0:
                    f4:b8:04:8b:e3:78:59:6d:0c:58:05:67:c4:da:68:
                    7b:81:ce:48:84:c1:2a:9f:aa:b5:11:a4:4b:24:ce:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:08:C1:AE:15:22:59:7B:55:91:AB:10:63:CE:7B:6F:7D:32:3E
            X509v3 Authority Key Identifier:
                keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:36:2a:41:4a:d4:55:6f:ae:5c:c6:f4:f3:ac:d0:f2:11:
         08:93:40:d5:7b:e7:e4:bc:2d:69:0a:fe:a9:60:94:a3:ae:ed:
         59:8a:a9:bd:57:10:4a:fc:89:85:18:44:a0:c6:2d:75:77:03:
         1f:6d:31:e4:2a:23:b2:90:bf:a4:62:ec:67:72:3d:ce:9f:db:
         ed:c9:97:93:1f:dd:86:10:4b:f8:9d:0e:1f:ec:d4:30:ea:96:
         b0:32:59:1f:75:a0:7b:32:51:28:17:ad:96:62:6d:4b:71:10:
         c2:d5:9c:00:60:6d:95:74:0c:d4:6e:d1:90:40:0b:71:24:85:
         1e:3b:b6:72:aa:a9:23:ed:ae:78:ea:6c:ac:22:4b:ec:f1:40:
         e0:b0:38:eb:c9:b3:3d:49:66:b6:48:ba:0e:fc:9c:b9:1c:91:
         54:15:df:fa:2f:e0:21:24:73:ca:90:2e:2f:94:d0:e4:f9:22:
         23:40:00:58:28:91:e5:ad:50:d2:4d:19:1b:2a:37:6f:5e:63:
         60:fc:0b:6d:d7:2f:fc:1d:af:32:6b:5a:fd:7a:51:61:01:6d:
         05:db:4c:53:33:2f:12:65:64:2e:77:68:97:c0:2a:d2:19:e6:
         8c:b0:e2:a1:81:5d:bf:84:6b:07:4d:8b:2d:af:40:39:aa:f1:
         ca:ac:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----