Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File:                     nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier:          NVnVP1GhsOq9aZLz+goIMnha6ww/YLV73OeKB8LbpqA=
Subject key identifier:   D3:E8:DF:F2:D0:9F:A9:44:D5:62:2F:15:1F:DB:6E:3B:5B:FB:03:49
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer:       /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial:       01962E61BCA4B303A18C8D614148B5A9DAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number:          05B0
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: mfNO5UT5u80mvIehoNGOSBTMgTbu3Fu9gw3IxgW4FKY=)
                          2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:a4:b3:03:a1:8c:8d:61:41:48:b5:a9:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=d3e8dff2d09fa944d5622f151fdb6e3b5bfb0349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:d2:57:d9:f9:bb:5c:27:25:7b:cd:47:4c:
                    5a:a8:62:ff:07:dc:3a:b9:4d:57:34:74:09:1c:22:
                    1a:a4:5f:0e:8b:67:d3:17:7e:18:ea:55:b2:be:a2:
                    f0:f7:ba:9b:c1:7c:9d:20:d4:cf:94:17:93:4b:b5:
                    5e:b1:c1:da:ce:16:c1:cd:48:e0:1e:6e:42:9b:ed:
                    d0:88:4c:10:a7:f6:08:7f:a3:45:dd:b5:1d:f9:65:
                    66:50:1b:39:a4:bb:b1:ec:8e:7e:9c:40:57:12:da:
                    38:13:44:fb:eb:ac:c6:00:29:af:6f:15:f1:e2:09:
                    d4:a9:c5:f4:bc:5e:6e:66:5f:44:c3:12:b4:f6:26:
                    91:f3:73:51:73:ab:82:5b:93:0e:60:fe:8e:44:ec:
                    82:ef:5a:8d:e3:3a:8e:1c:68:f7:ec:36:28:cf:25:
                    78:fb:c6:03:56:33:b9:55:a9:7c:62:b9:1a:83:97:
                    ea:9b:38:7b:46:7a:64:50:c9:95:e3:3e:27:3c:dd:
                    b1:89:4d:5d:82:51:45:99:a2:b0:9a:52:3a:c1:01:
                    b9:6a:4c:ec:97:8f:d0:c6:30:b6:70:c1:38:e5:9f:
                    9d:71:4e:39:48:e0:b4:04:2c:db:81:c6:9d:d7:33:
                    39:7e:e0:2b:67:1e:65:35:ab:c6:1f:07:1b:1c:72:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:DF:F2:D0:9F:A9:44:D5:62:2F:15:1F:DB:6E:3B:5B:FB:03:49
            X509v3 Authority Key Identifier:
                keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:77:22:89:6d:d2:e0:c0:6a:23:99:70:21:75:1d:ba:cd:
         ab:3d:ac:d9:4e:20:22:e4:9a:47:4a:f7:8d:a6:8f:3c:7e:ba:
         9c:62:1b:82:10:82:ce:23:3f:06:d4:44:30:5b:d1:8f:ac:89:
         86:92:4e:c7:04:e7:6f:42:85:5f:99:4e:10:92:64:93:a4:ac:
         21:2e:aa:72:11:48:61:dd:cb:ea:c2:1d:61:ed:30:10:0e:52:
         f0:b6:5c:94:52:05:37:a7:56:25:5f:75:f3:0c:66:03:6c:3e:
         b7:fc:08:55:8a:07:a3:d5:bb:b7:bc:c5:c4:c6:1a:35:69:db:
         6b:6f:68:42:d3:92:7d:e8:47:54:69:cb:35:7e:29:20:4e:f6:
         61:db:23:02:97:82:b7:0f:17:13:8d:95:f8:55:bf:97:2d:b3:
         19:16:45:13:43:1c:5c:26:b8:0b:12:8a:f9:5c:b7:82:66:79:
         c7:48:2e:69:48:90:70:38:78:70:0f:a5:ce:8e:9f:20:1b:68:
         06:83:47:f2:17:06:b7:fb:d8:f2:b9:a9:7f:32:0f:1f:c4:67:
         11:d5:87:34:3e:db:cc:9f:05:81:18:c7:bf:40:96:c3:0a:22:
         51:3f:0e:83:bb:e1:3c:3e:f6:a3:6d:e3:4b:4c:8d:4b:fb:60:
         99:06:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----