Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File:                     nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier:          p9/d4qjMb8EBVfXVR4MVICfQRA8tPwd6a+PTA8gZpBA=
Subject key identifier:   56:95:E9:EE:33:D7:02:42:1F:8F:60:5C:16:9E:05:29:35:0B:3A:C7
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer:       /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial:       01962F74D1606D4BDB17A8E7B41C9A0948C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number:          F0
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
                          2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
                          3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: RceEGetiyUeknHjKClJgVXMmHGiuKcP3IB/w4dvZB/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:60:6d:4b:db:17:a8:e7:b4:1c:9a:09:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=5695e9ee33d702421f8f605c169e0529350b3ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:9c:7b:2d:9c:10:6a:23:4d:ad:bb:09:2c:
                    b6:e0:8b:d6:1b:d5:29:8b:d1:a2:46:b7:bd:6f:a1:
                    c2:1c:df:ee:23:a1:5a:61:62:c2:82:21:03:52:82:
                    26:a4:11:51:a2:ca:7b:4f:2e:33:e3:b5:50:ac:22:
                    3a:8d:25:4f:ff:41:91:d1:50:53:e8:c5:cf:22:6e:
                    8d:40:66:f3:f8:09:4d:76:85:ea:cf:ba:4d:00:e5:
                    77:ce:b8:1a:28:93:5e:31:a7:c9:91:13:4c:89:96:
                    bc:59:35:52:c5:fe:9f:c3:10:2f:7d:95:a9:94:92:
                    ed:b2:4f:d2:55:ee:bf:0c:ab:3b:5f:ac:c6:b4:60:
                    53:76:c9:c7:e2:97:57:fb:ff:4f:59:a7:24:58:72:
                    be:40:a2:27:37:31:1c:84:1e:8b:c1:4d:21:c0:92:
                    59:ee:fe:02:0a:44:f7:0c:70:38:98:a0:4e:f8:d5:
                    40:61:ff:97:ce:d8:21:df:fd:f9:9a:bc:2d:1b:03:
                    f1:46:a2:74:f6:65:fc:a3:24:d5:37:9a:ee:0d:f3:
                    41:5b:f4:66:fa:36:f7:ef:96:28:93:2b:c7:68:1f:
                    02:52:ca:c7:72:8b:27:11:bd:e3:97:ba:e3:99:c7:
                    2d:9b:22:c2:b7:b7:c1:f9:4e:b9:eb:9f:dd:0f:76:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:E9:EE:33:D7:02:42:1F:8F:60:5C:16:9E:05:29:35:0B:3A:C7
            X509v3 Authority Key Identifier:
                keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:42:6e:dc:1d:02:e5:dc:19:bd:69:9f:e1:22:27:ec:d5:bb:
         e3:1a:e6:13:18:7c:bc:47:bf:6e:f9:30:88:fb:ac:1a:71:05:
         31:27:3b:d5:28:c9:68:a6:a8:8b:37:af:6f:9a:40:74:a8:27:
         9d:7f:6c:08:c0:45:c0:87:92:4e:89:f1:df:35:29:8a:9a:57:
         65:76:0b:ec:b0:01:df:c8:10:b8:23:46:c5:fd:bc:83:ad:86:
         61:37:61:b2:4a:6f:88:bc:bb:b1:1d:27:24:91:23:09:e4:7f:
         20:3d:49:bb:43:52:ce:b2:91:91:80:e3:46:ad:8e:ad:df:c9:
         ed:71:88:46:aa:06:f3:68:33:f1:d6:03:84:00:e9:d7:5c:f5:
         4f:60:05:0a:4e:30:0a:75:2f:ed:ad:dd:f9:af:c4:40:95:88:
         7e:08:cf:02:00:a1:37:79:74:17:99:0f:fa:79:27:aa:f4:af:
         dd:83:9b:35:6e:82:4c:3c:ae:93:9d:ab:f4:1c:37:50:a5:28:
         3e:68:04:a9:11:66:6d:f6:dd:90:8e:d3:d0:8d:03:e4:ba:16:
         73:6b:3a:73:10:24:8c:74:dc:90:73:a0:2e:19:ec:b1:6f:73:
         a8:7b:02:07:72:22:96:0f:75:a6:e6:84:09:ea:30:7d:93:d6:
         17:36:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----