Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File:                     nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier:          AbuFWDc8USHMWc96otcqNdkp5yhHlBVMPdllLlqeua8=
Subject key identifier:   CF:95:B4:71:2A:9C:F1:AF:26:2B:F8:14:F1:4A:1E:E1:9E:DC:10:80
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer:       /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial:       01962E98C956ED9ED5F34CE0A1F33E73E5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
                          2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
                          3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: TmbEV85+wJLNwcOjgl0fEMNuT3N6tv0Ks2mG9+pVoxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:56:ed:9e:d5:f3:4c:e0:a1:f3:3e:73:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=cf95b4712a9cf1af262bf814f14a1ee19edc1080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:01:95:50:c7:82:b4:c3:72:bb:e4:fb:37:
                    fe:78:56:08:2f:8e:24:ad:ab:ec:7a:c2:56:fa:41:
                    5a:ef:fa:9f:50:4d:8e:da:69:ea:35:03:0a:cd:78:
                    22:3d:b3:b5:34:6d:54:66:6c:1c:a5:c5:ec:16:46:
                    c5:19:a4:8d:bf:bd:53:3e:30:7e:06:be:65:89:e2:
                    79:d5:e0:23:bd:98:19:b4:31:3f:30:f1:a7:09:a4:
                    a8:c6:30:db:a1:68:3b:90:40:4a:52:47:04:5d:96:
                    7c:4f:2e:50:90:a7:8d:ab:28:42:dc:fc:85:bd:12:
                    50:66:78:dd:79:8e:9b:f3:d3:a0:99:71:56:1b:73:
                    b5:79:46:2c:1b:b9:d3:7d:ce:86:a9:77:67:a9:24:
                    0b:90:80:4d:e7:ff:61:7e:72:c0:71:0a:af:39:7f:
                    64:7c:c3:e5:45:68:5d:e1:a9:5d:7e:28:fd:a2:11:
                    d7:ba:d3:e7:0b:7a:ab:f6:e7:7a:19:56:7d:50:d9:
                    1a:5f:24:c2:2a:f6:46:69:8b:ee:cf:4b:b2:6f:15:
                    72:3a:07:ee:45:36:0d:82:c9:8e:2b:c6:1e:84:f2:
                    30:dc:ce:9c:50:25:9b:8a:98:a4:36:31:9b:1b:9f:
                    ff:86:da:c5:a5:cd:a7:55:1f:ea:4b:45:04:06:ef:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:B4:71:2A:9C:F1:AF:26:2B:F8:14:F1:4A:1E:E1:9E:DC:10:80
            X509v3 Authority Key Identifier:
                keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:0a:27:50:1c:fc:8b:2a:b5:90:e2:26:bf:5f:44:16:f4:
         3e:5e:f9:b3:2d:6a:2a:bd:f2:9f:b4:13:e2:b1:90:84:9d:de:
         0e:2b:60:b6:3e:40:e7:b5:d6:a5:36:38:c1:9c:fc:ea:e5:3d:
         f0:94:b5:e4:fa:13:c5:50:17:24:2c:ff:26:05:6c:9e:71:3c:
         7a:ba:cc:18:43:07:2d:31:3d:af:53:39:6d:8c:a0:9f:43:14:
         7e:c0:b6:0e:ad:e6:64:a8:83:6e:f9:c2:b8:37:1d:ab:94:df:
         c7:15:75:19:0f:da:4c:23:c7:a4:b4:e0:56:43:43:c4:41:ee:
         e0:52:64:34:72:08:a1:2d:ec:cb:a1:a2:a8:40:06:ae:db:af:
         1d:1e:f8:de:58:71:04:b5:17:83:45:f5:bd:9e:c1:98:c5:47:
         e9:d4:79:aa:aa:4c:48:8a:67:6a:09:f5:7a:04:70:40:3f:49:
         8e:82:30:cd:63:89:63:46:38:1c:ca:9e:7b:7a:b0:64:83:1f:
         e0:61:b0:f2:46:30:c7:a1:e6:49:a2:f3:5a:79:cb:e4:09:9d:
         8c:04:64:56:c4:5a:1c:c7:a3:4f:0e:c2:e8:a6:69:e6:92:3a:
         3b:8e:27:b7:ab:08:82:60:3d:d2:07:fd:ae:5e:c8:1a:bc:4c:
         e9:7a:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----