Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
File:                     n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json)
Hash identifier:          b+wZuTnZyOk4G+SlD5PpVJeUyHcWRdEQquZVZNjOu/0=
Subject key identifier:   4C:3D:A9:D7:B9:F8:CF:6D:45:F1:39:AE:8D:3A:AF:46:D2:FD:0C:3C
Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
Certificate issuer:       /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Certificate serial:       01962E98A3346C4972F88C6052D50BE22494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
Manifest number:          025E
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: coXri03+7BvH8EpFQ7xhpYN+yFV9HE4/j0GeGFxCz7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:34:6c:49:72:f8:8c:60:52:d5:0b:e2:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=4c3da9d7b9f8cf6d45f139ae8d3aaf46d2fd0c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:7e:ad:c2:77:13:67:e6:17:b9:7f:1e:51:
                    ff:cc:8c:ef:70:ac:c2:c2:4f:e6:e5:84:eb:41:a9:
                    36:47:0f:26:fe:1a:bf:21:38:c0:b6:2a:95:69:a9:
                    96:1f:44:98:94:d7:6f:e9:49:2a:dc:fa:15:cb:d6:
                    20:64:d0:1e:8c:ca:35:c3:33:1e:c1:db:0e:65:ac:
                    14:4b:5c:40:34:0b:40:65:74:32:94:e6:88:2c:80:
                    5e:f3:14:42:9a:7a:bf:5f:c0:81:8e:52:fc:c4:29:
                    ca:3a:e8:e5:83:2d:a8:80:41:ef:96:05:20:5b:53:
                    43:0b:53:f9:c7:21:19:91:f1:3b:70:58:1d:20:18:
                    4a:17:c0:bd:d3:6b:ca:97:5f:7a:70:a9:3d:30:fe:
                    b8:d9:e2:bf:a7:7c:87:d3:1b:ec:c7:74:d0:7c:52:
                    3b:16:a8:49:cf:1d:4e:59:cc:2a:36:1b:8b:e5:b1:
                    b0:16:28:ab:a1:08:e0:e0:e7:53:57:52:3e:33:62:
                    d9:76:14:57:52:d7:f7:c3:f0:d7:3c:ec:91:b7:92:
                    9f:5c:fb:67:1c:59:c7:5d:a9:3a:f6:28:f5:62:f6:
                    0f:71:24:47:0c:ad:32:c5:e0:15:a4:ab:97:7d:25:
                    e4:b3:66:71:db:69:03:fe:e2:46:70:aa:75:aa:58:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:A9:D7:B9:F8:CF:6D:45:F1:39:AE:8D:3A:AF:46:D2:FD:0C:3C
            X509v3 Authority Key Identifier:
                keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:69:df:82:dc:f1:8f:82:18:42:c2:f5:f2:a7:8b:e0:77:8e:
         75:d6:98:96:61:18:9a:d4:fe:15:ec:68:af:70:77:ff:45:28:
         89:cf:9a:fb:2a:3d:5c:0a:67:ff:aa:14:b1:27:87:02:61:93:
         a5:20:74:64:c7:ff:e6:91:4a:6a:73:71:c9:3c:73:51:f3:c1:
         d9:4a:65:25:ad:c4:c9:81:ac:0c:d5:63:3a:df:0f:bc:f1:e7:
         a9:38:b6:22:7b:25:3f:36:bb:46:cc:e1:d4:b7:1f:70:a7:1c:
         c3:ac:9f:0b:56:fe:f7:52:9b:56:63:b7:90:e1:72:a2:dd:6d:
         cd:ef:af:bd:73:61:72:6b:e6:85:e0:73:c8:4e:f3:7e:bd:88:
         a3:c9:94:cb:57:e9:f5:7d:4f:84:a0:a6:af:ca:52:43:13:81:
         41:6a:fe:7f:5f:60:e0:55:d7:36:15:32:0f:a5:43:b7:40:91:
         fb:13:4d:d8:0d:18:16:05:d4:2f:ad:cf:44:8d:57:09:df:72:
         d1:a5:0e:e7:6d:df:72:f0:94:cb:c7:7d:5e:76:b5:58:43:99:
         1f:67:47:d9:93:5c:db:9e:66:85:ca:c2:2a:c3:16:98:10:ac:
         97:2f:c7:0a:63:33:a0:c9:5f:9b:fb:fc:1c:9f:c0:5f:eb:d3:
         50:f9:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----