Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File:                     nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier:          b3gRDJ9QCanent3/39SL1oJ4sKU8azAUkAGF4D4vF3E=
Subject key identifier:   F0:BA:6E:E6:DB:3E:05:BC:62:F5:D2:B1:84:28:0F:19:88:5E:0A:C8
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer:       /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial:       01962E61F711C078972B0637E5F7B7B4BAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number:          0279
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: H1rTCXQc3DFo7pJXkwYiJpwFSv1a3u7mdnSczYhzXD0=)
                          2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:11:c0:78:97:2b:06:37:e5:f7:b7:b4:ba:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=f0ba6ee6db3e05bc62f5d2b184280f19885e0ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:e3:2f:e4:e8:ba:06:c1:61:d5:c6:57:bd:
                    cb:f3:2a:cd:5e:bc:f8:5e:0a:42:7a:67:13:51:09:
                    ea:ee:62:c0:ad:7c:1c:39:c1:52:11:28:a0:df:4c:
                    7c:c3:15:63:e7:48:76:24:cd:be:20:e6:25:1e:fa:
                    15:34:67:3d:b0:dc:28:59:d9:c2:b7:2c:5f:b8:0d:
                    0d:21:a1:1e:af:0a:65:5a:f6:88:e2:d5:88:a6:20:
                    e8:1d:f6:52:55:ff:3a:cf:f6:a1:f2:56:d0:7b:18:
                    f9:4a:ee:76:ec:45:81:66:21:e2:4e:2d:7f:97:eb:
                    1a:02:09:cc:cd:cf:58:11:48:f3:84:eb:53:97:e5:
                    07:fe:8c:07:38:cc:87:d2:16:18:e9:87:39:9a:5f:
                    cd:43:55:9e:21:cc:84:d5:55:51:fe:18:84:68:24:
                    49:34:5c:0d:95:a5:28:6e:d2:58:6f:29:df:60:bd:
                    15:ab:a9:30:41:0f:15:e8:07:3d:36:75:22:d4:5d:
                    64:f4:b3:92:c4:93:17:6f:11:d9:4a:be:43:42:dc:
                    87:2d:19:b2:e2:fe:2c:77:b5:65:84:f0:5e:5c:29:
                    ea:18:ce:3c:eb:1c:5a:08:5d:81:7d:2b:e4:06:34:
                    20:ae:72:3b:82:79:ee:4e:e1:9d:bc:31:35:f5:a4:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:6E:E6:DB:3E:05:BC:62:F5:D2:B1:84:28:0F:19:88:5E:0A:C8
            X509v3 Authority Key Identifier:
                keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cc:e2:95:b3:ae:52:22:ed:3b:ae:69:11:99:08:4f:ac:48:
         73:96:8b:34:57:da:06:83:77:bc:0e:f7:41:19:90:7e:8a:e8:
         e1:e7:a9:c7:e6:ed:79:ce:e2:bf:95:e3:d0:86:57:19:eb:47:
         5e:ab:31:b7:6b:d6:3a:c1:f9:e2:72:6b:a6:a6:13:1d:92:f8:
         20:1c:88:6e:37:44:20:0b:ca:ed:43:ce:ca:2a:b3:85:0b:bf:
         5c:05:b9:ac:e5:bb:17:ca:73:44:54:3a:fa:ec:f1:0a:16:ef:
         46:cc:38:b9:09:52:78:e8:f0:5c:04:55:20:89:05:96:17:4d:
         c9:f7:6c:1f:60:94:86:03:ee:56:fa:5c:57:8e:c7:b0:8d:c1:
         51:af:22:e9:84:32:bb:5d:49:6c:d3:78:82:fa:a6:69:de:c9:
         fd:a2:12:4f:10:fb:3b:0c:78:a9:a2:00:8e:06:ca:ff:80:b6:
         c6:93:bc:d0:fc:30:ea:a4:69:ec:67:ca:25:ec:4a:ed:a0:18:
         ef:3d:d8:dd:7a:03:75:74:f4:a1:bc:b7:dc:b1:d3:dd:02:62:
         1f:19:e9:27:92:45:25:ab:d2:54:f2:d4:4f:f4:e2:41:50:b5:
         6e:f1:d8:fa:0e:ab:47:25:3a:bf:f5:2b:73:14:46:8d:a7:4d:
         6e:f4:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----