Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File:                     nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier:          UgKiAp1oILpnTtQE6pepX6/6tkgIVn/XWFBCQiWk0Yg=
Subject key identifier:   46:8C:FE:F0:95:9B:AC:F2:3D:FA:A8:6F:8B:9C:2A:56:A7:E9:94:7D
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer:       /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial:       01962F7466A47461D8F9E5ACC36E5F51794D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number:          1307
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
                          2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: 9IJ1yfC+lVt8n7IZMGcaHiwv5VX0KAPBdeU1G6MKQ7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:66:a4:74:61:d8:f9:e5:ac:c3:6e:5f:51:79:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=468cfef0959bacf23dfaa86f8b9c2a56a7e9947d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:e1:75:8d:ad:5f:cc:9e:58:28:15:b7:f0:
                    8a:b1:0e:f6:94:cd:6d:fc:05:b6:8e:5f:c8:30:1c:
                    d0:96:20:d7:22:14:dd:74:2f:c5:52:94:5b:11:9f:
                    c4:4a:8a:b4:20:78:80:1c:ad:49:97:70:74:55:bc:
                    a1:98:3f:01:27:32:88:81:e1:d9:13:1d:56:2f:84:
                    a6:0a:04:d0:ee:3b:5e:c7:a7:b4:46:15:91:14:42:
                    39:97:f6:85:d7:55:1c:5a:ee:85:a9:fc:92:73:d3:
                    3e:d7:9c:51:18:87:69:ff:bd:59:5b:43:9b:93:3a:
                    11:c2:11:f9:c0:7c:01:9e:49:f7:fa:5d:ac:06:47:
                    24:e8:16:ed:ab:80:33:db:74:c7:3c:a5:06:81:9d:
                    dc:9f:d6:8b:30:ef:37:41:26:fe:0d:91:7c:a7:0c:
                    b2:d1:8d:41:1c:89:79:53:57:ac:91:83:e3:b4:a1:
                    1c:98:7c:cd:f8:ec:3c:72:fd:33:48:25:18:c1:55:
                    66:20:69:3e:f6:ce:94:63:c8:10:13:d2:a2:f7:3d:
                    d2:fb:0a:9e:2c:32:8d:7f:8b:05:26:44:90:06:83:
                    e6:05:3e:b7:2d:07:d1:3f:fb:97:d1:f3:0c:37:63:
                    e5:8b:86:9a:3a:67:53:32:22:49:ed:9f:3f:e7:51:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8C:FE:F0:95:9B:AC:F2:3D:FA:A8:6F:8B:9C:2A:56:A7:E9:94:7D
            X509v3 Authority Key Identifier:
                keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:63:35:b2:f2:65:20:be:03:39:c2:eb:95:6e:4b:16:94:13:
         39:aa:45:7f:89:aa:a8:87:3c:dd:14:41:86:ba:ef:04:eb:ab:
         16:1d:7a:f8:92:1e:8d:59:02:6a:61:66:48:b0:cb:c5:ed:e4:
         8a:95:9c:ec:93:81:46:fd:7d:19:82:f7:0d:28:80:6b:b3:c8:
         79:71:61:8a:e1:21:ae:48:f2:7c:7c:e6:34:4b:b3:92:1b:e1:
         4d:42:20:dc:15:d8:a9:2c:97:78:3b:c6:ea:a7:d7:64:76:fd:
         8d:84:63:f0:29:f5:1f:87:6c:f8:44:40:49:15:f3:32:d1:c6:
         f8:69:8f:af:3a:4a:3c:16:2e:bf:93:1b:32:e3:b3:90:3b:f5:
         56:ce:a1:ac:d4:59:5b:e5:7a:c7:75:79:da:24:39:3e:17:9f:
         5c:e5:66:40:13:2f:9d:c6:4a:28:00:37:d7:b2:be:41:e2:41:
         5c:6f:35:72:f3:48:78:d9:8b:f1:0d:ea:7e:78:f0:14:2c:25:
         d1:95:da:48:a1:58:d5:2d:54:48:17:36:ee:07:a4:ba:3e:84:
         06:83:35:99:68:66:af:c2:17:18:e4:0f:d1:dc:d2:86:08:8d:
         96:15:89:fe:51:e7:16:d8:58:7e:9a:4b:58:42:8e:a2:42:05:
         de:9e:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----