Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File:                     niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier:          PEnpaFtBWloRSlG/Z37EsVEjnW2drlF2vkv0WZE5UxE=
Subject key identifier:   76:E7:5B:12:C2:0F:D3:8E:0E:E7:BF:02:4C:6D:4F:46:41:E3:07:5B
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer:       /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial:       01962DF3EF6138032856B8E6586C08BADABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number:          0CF0
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
                          2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: 8FoA/eYx5Rbiju4eRjvUVrGSS1A5JY0n3SDyeuJOvQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ef:61:38:03:28:56:b8:e6:58:6c:08:ba:da:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=76e75b12c20fd38e0ee7bf024c6d4f4641e3075b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:13:be:0c:f7:cc:9e:49:71:7a:ab:ef:53:
                    12:45:77:0a:37:92:a7:d0:2a:ac:2e:fa:3f:fb:23:
                    dd:32:d1:62:17:0f:be:b4:25:53:9c:b9:8f:e7:92:
                    6c:7f:04:1c:52:cf:ca:03:5d:1b:a9:09:f2:84:ac:
                    c6:b5:a4:cc:d3:0f:4f:99:82:aa:0e:e1:f2:18:12:
                    a4:78:45:62:d4:03:9a:f2:8d:a7:40:c4:f3:06:94:
                    da:d7:80:00:4b:8d:65:26:01:a4:7f:3b:b0:6e:52:
                    41:30:78:fa:1c:dc:a5:99:30:07:56:5a:66:c9:51:
                    db:b9:a5:40:73:09:61:36:f7:c9:54:bf:c2:d2:f7:
                    a5:b2:da:03:1a:a5:b6:68:73:59:83:83:7c:ae:c9:
                    27:57:e1:05:4d:db:52:c0:63:b4:d4:d2:54:b7:41:
                    fc:d0:74:0c:0e:14:f0:24:05:92:98:8a:86:7d:c2:
                    66:0c:71:b0:3c:a4:2a:4d:e1:98:cb:4e:2d:41:ee:
                    c2:5a:1f:ed:df:d7:a8:70:8b:6e:4c:52:10:05:cd:
                    49:84:86:72:9f:6b:23:34:5e:dc:02:77:2a:ef:76:
                    8c:c9:c5:01:02:12:59:ed:cf:4f:5d:d1:d2:be:64:
                    d9:2d:8c:3d:58:ac:be:10:4f:50:d2:e8:75:ff:95:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:5B:12:C2:0F:D3:8E:0E:E7:BF:02:4C:6D:4F:46:41:E3:07:5B
            X509v3 Authority Key Identifier:
                keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:44:71:29:94:2d:0a:fd:48:c0:1c:48:df:0a:6d:84:b4:
         21:36:47:64:d6:46:7e:cc:1c:8f:d7:ae:b1:c6:f8:ee:1a:e3:
         b7:63:65:39:97:50:b3:9a:75:51:cb:7c:57:87:5b:97:bb:0c:
         ee:a5:07:b4:b7:80:8d:07:8f:d3:a9:f5:d6:a6:f4:33:a3:85:
         3e:2a:60:46:39:28:cf:b3:78:12:a2:11:7b:7d:24:d7:20:0d:
         1a:76:03:d3:e2:82:38:f5:52:3f:7f:5d:c4:6d:ce:72:47:1c:
         83:b0:42:5f:35:f2:02:f5:5a:53:a5:1f:23:8d:e4:07:79:b2:
         41:d7:cb:a6:29:c4:df:20:19:49:53:26:1b:f9:70:10:d3:26:
         0c:f2:9f:13:b1:d0:d9:2d:c5:35:b1:70:ee:06:15:18:ad:da:
         1f:19:94:98:4f:fc:3b:2a:71:76:b6:1d:7e:9f:00:2d:c7:f5:
         67:32:7d:24:12:25:ff:0a:f3:24:b0:5d:51:da:18:33:bc:40:
         0d:bf:96:65:fc:a7:38:7b:3d:a5:56:7a:6b:2f:04:91:ae:c1:
         0c:60:98:da:e5:d1:bf:e1:09:b5:03:36:61:47:14:0b:0d:16:
         c1:6d:65:64:e4:22:ac:8f:68:81:08:f5:cc:23:5a:80:c5:b2:
         16:22:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----