Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          0ZdAd8P7CYTdNG27ovQRq5uyFTKXgGYgdcBCXZEFLFE=
Subject key identifier:   71:DA:53:10:73:03:EB:79:67:4A:79:90:E7:D5:63:8B:EF:B4:76:D6
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       01962E9874754884BC3804AF3225A711922B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          0E25
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
                          2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
                          3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: reYHFQyNu9cwwq7426o7oK/hMLlixp4PHnSLXKJ8Sns=)
                          4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:74:75:48:84:bc:38:04:af:32:25:a7:11:92:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=71da53107303eb79674a7990e7d5638befb476d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d4:a6:40:1c:c1:30:d4:10:4a:37:e5:f2:3e:
                    16:7b:08:07:74:96:8f:ab:54:25:85:55:ad:4f:28:
                    0d:c4:a8:2e:c3:61:b7:15:b1:8c:9f:2b:c4:62:c6:
                    a3:6c:37:3f:a4:dd:4c:d9:eb:2d:aa:7f:59:ff:86:
                    28:ae:54:35:7b:e6:97:00:b6:1c:74:5d:51:41:a9:
                    60:d5:47:8c:aa:39:15:e8:54:bc:bd:f3:5f:f2:31:
                    cd:b4:df:33:8b:08:11:62:f5:11:d6:e2:f7:82:fa:
                    13:78:87:f8:f6:63:e4:0a:da:34:07:53:48:9c:69:
                    dc:4a:d4:60:80:b5:54:90:38:2b:67:89:26:e4:94:
                    9f:a5:42:aa:7e:14:73:91:47:57:7c:f7:f1:93:9b:
                    ab:0f:06:91:fb:a8:bf:b7:48:61:85:45:26:77:b7:
                    00:37:79:7a:f1:99:d7:1e:36:01:b5:3c:d4:9f:ab:
                    35:95:b4:84:58:b0:34:34:cc:c5:fd:1f:1a:da:8d:
                    45:39:a1:6b:ef:b7:aa:f6:b2:77:e4:c9:5f:34:c5:
                    e1:11:2b:56:9f:f6:1b:64:32:c2:fe:2c:c1:e6:64:
                    7b:51:48:8b:95:27:9b:0e:62:e4:6f:d5:8a:9a:97:
                    d6:99:b0:ce:21:4f:c0:ea:97:9d:44:32:a2:dc:de:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:53:10:73:03:EB:79:67:4A:79:90:E7:D5:63:8B:EF:B4:76:D6
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:83:de:f1:8e:40:54:e4:39:d8:04:49:0c:3c:34:71:2b:
         a6:51:5c:e6:4b:ea:75:b6:51:5e:81:74:f4:58:80:a8:9f:e9:
         9c:79:c3:cb:13:04:ce:72:85:e0:49:14:21:00:b4:17:d2:f3:
         e4:ff:30:41:14:67:fe:8a:ee:dd:20:ca:5d:76:bb:68:85:4f:
         fb:4f:95:e6:6e:86:b1:ab:0b:b5:de:f4:ea:c6:fb:0c:d6:c8:
         6f:62:d4:67:a4:21:6f:5e:38:8f:67:f6:e5:c0:f4:f8:40:95:
         53:ab:bb:63:8b:7a:37:82:91:71:39:9a:49:13:10:8c:bd:00:
         b6:b0:80:e8:7d:c6:1b:93:b0:3e:94:73:be:4a:eb:e6:15:e5:
         c0:27:e8:43:50:7d:ce:01:ef:d6:c8:e5:85:26:6a:64:ba:b8:
         39:4a:9d:89:89:bd:ea:9c:46:0a:fe:5d:e7:1a:1c:cc:f2:71:
         60:28:8c:9b:5a:d6:fb:33:3c:96:87:8c:e8:cf:f4:78:fd:b2:
         f7:79:2e:f6:af:21:fa:33:7e:4a:18:00:16:86:1f:c2:e8:8b:
         74:a1:82:1d:98:3b:4e:f0:53:11:9d:44:ea:04:b5:b3:de:50:
         9d:85:99:0c:b7:3c:10:17:01:00:ef:0b:7c:ef:a2:2d:99:2d:
         d0:b2:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----