Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File:                     nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier:          dkCwjnV2v3lQPHC5XMfzjgEuE9EGf/diA4/Uf7+pIsU=
Subject key identifier:   DE:BC:19:57:D6:FC:B1:D2:0E:E4:5E:30:31:FF:FF:18:E0:8C:4C:7D
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer:       /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial:       01962F7468450E62A51DAB6266B6A14DE8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number:          08EA
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
                          2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: FlNfQWmw76DMXaQ6bm+ir+npUxRosHgwawEAtOz10I4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:45:0e:62:a5:1d:ab:62:66:b6:a1:4d:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=debc1957d6fcb1d20ee45e3031ffff18e08c4c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:32:d4:17:97:34:8c:8b:cc:89:e0:f0:d0:
                    53:84:2b:c1:65:66:1b:e0:7c:1e:ef:fb:da:69:ac:
                    39:80:3f:0b:78:c5:7c:4e:c5:07:96:c6:19:22:8d:
                    79:b5:22:23:d6:70:24:ca:6d:68:05:fd:ea:47:7e:
                    5c:6d:dc:0d:75:af:09:b9:ec:91:29:00:db:f8:21:
                    1f:a8:d6:d4:7d:43:52:17:55:c4:65:77:d9:c1:f3:
                    5a:37:11:e0:79:c1:4f:bf:48:a8:20:92:ff:02:bc:
                    f1:d3:40:3b:bb:8a:06:2d:e7:9e:59:0c:f6:40:75:
                    46:b3:b7:5b:50:f9:39:68:60:ae:29:cc:f7:e1:bc:
                    b4:4b:5e:c5:58:d7:8b:98:92:53:f9:26:06:d3:7c:
                    f1:45:05:5d:5f:8f:5f:b1:84:e3:52:f1:be:27:37:
                    02:3e:22:b5:de:c9:26:fa:8a:7c:ec:28:f7:ab:b6:
                    74:60:d4:87:3f:ea:9f:d7:97:8c:76:3c:fb:35:57:
                    c8:a6:d2:63:c9:8b:ef:72:00:14:30:99:d6:f8:e0:
                    f7:d9:d3:62:cb:1c:2a:ca:ea:33:c5:f3:c6:8e:fa:
                    4f:cc:90:23:ab:87:a0:9c:37:c1:1c:8a:48:b1:29:
                    9c:79:80:8c:d8:7e:55:fc:d7:40:28:b8:2e:25:24:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:19:57:D6:FC:B1:D2:0E:E4:5E:30:31:FF:FF:18:E0:8C:4C:7D
            X509v3 Authority Key Identifier:
                keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:11:83:2c:1b:2b:cd:9a:f3:4d:5d:24:5f:94:6d:80:ac:60:
         2b:9d:98:c7:78:ad:d1:44:ef:21:83:85:1d:16:fe:77:b3:2a:
         d9:0d:1a:67:36:fc:97:d2:a4:29:72:69:d3:57:df:d5:ca:46:
         10:44:b6:84:34:1a:97:6a:ff:87:a2:52:1e:38:18:dd:3e:a5:
         1e:5e:bb:58:81:8a:48:d5:d1:fc:b6:6d:a6:fe:8b:e7:3b:c7:
         18:5a:25:56:46:a0:4b:a2:52:8c:76:3d:ec:a0:78:c1:34:1f:
         76:b9:42:13:b7:9b:a0:88:c3:7f:21:a0:45:6f:ed:0b:5f:8e:
         19:62:a9:f0:a2:7a:f4:74:97:95:ae:2e:f4:5d:20:7c:78:5b:
         6b:a1:96:51:b2:d9:d0:16:ab:6c:45:b6:f4:c7:e1:06:0f:75:
         cc:17:bf:43:c1:55:5a:bb:8a:7e:c0:0a:a7:61:14:af:25:41:
         9a:44:f2:4d:73:1d:15:88:55:20:95:6c:62:07:40:b0:9d:c4:
         37:1c:b3:64:88:42:d7:2f:44:ef:34:79:c9:43:b6:45:8a:a4:
         81:77:32:eb:dc:86:71:c6:b6:e7:4b:47:74:97:68:fd:ca:eb:
         c1:3f:d8:99:8b:ed:fe:f9:a7:1a:de:59:b0:22:fd:0d:b4:22:
         7e:de:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----