Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File:                     nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier:          Lphp7CKkscItC7Wla2l8TW64hfAL5MgtQUJiVPGJG/8=
Subject key identifier:   36:3B:3B:8B:07:D5:F1:14:46:07:66:CD:33:E8:E5:B6:2D:7C:ED:E7
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       01962ECF8D3764ED486740093FAD7FCD5F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=)
                          2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=)
                          3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=)
                          4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=)
                          5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=)
                          6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=)
                          7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=)
                          8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=)
                          9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: Wdi+3DdNGe2DONhyXIAh8rUb3qItdDqw4afu+nTXroQ=)
                          10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=)
                          11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8d:37:64:ed:48:67:40:09:3f:ad:7f:cd:5f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=363b3b8b07d5f114460766cd33e8e5b62d7cede7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:e5:40:55:68:7f:31:15:4e:ea:1d:a9:21:
                    72:28:32:03:fb:45:ca:62:6c:6f:57:73:79:90:13:
                    00:7c:47:ae:f7:39:e9:1e:3a:ee:ee:3d:7b:a8:1a:
                    0d:6a:7a:34:68:6f:96:56:ac:be:46:b9:40:d5:27:
                    a5:e4:2d:bf:62:c7:89:83:9c:3a:29:de:8a:c1:d7:
                    1b:48:91:cd:a9:b8:3e:ce:2c:88:37:8a:b7:27:5e:
                    6b:8a:3e:48:84:31:d6:66:2b:82:5a:b9:0e:35:75:
                    3d:e3:1b:3d:51:52:f5:c4:a6:04:64:50:2a:41:91:
                    84:38:92:af:d8:8b:9e:b0:d9:5e:27:f9:33:c5:b5:
                    8e:d3:52:97:ff:b8:0f:fe:80:00:cf:4b:3c:e6:1c:
                    b0:9e:04:74:17:69:c1:96:61:2d:f6:4e:64:0f:d7:
                    92:e9:98:0c:25:5a:91:b7:e2:a0:84:62:db:7a:c2:
                    5f:1b:06:1f:7e:60:61:15:7d:5e:19:a5:c3:49:99:
                    5b:fa:60:8e:4c:95:ba:76:3e:f3:a9:06:7a:0f:81:
                    e8:8b:98:d7:ed:a5:7f:3c:1a:28:29:7c:2c:6f:18:
                    6c:57:64:fe:60:5c:14:9c:20:23:23:8c:85:2e:07:
                    38:1f:56:b8:12:ef:bb:68:38:7b:40:98:ca:4b:ca:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3B:3B:8B:07:D5:F1:14:46:07:66:CD:33:E8:E5:B6:2D:7C:ED:E7
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:a5:5e:d7:8f:1d:ed:73:2c:8f:ee:52:e7:82:ae:1e:1d:
         bd:6c:78:f3:60:89:43:17:60:2a:44:43:88:9c:9c:97:18:18:
         ac:24:98:b0:b5:f4:b0:77:80:7e:6a:27:07:37:c8:9e:de:97:
         f9:f6:1e:f3:e8:2f:01:85:ef:10:3d:f6:5f:f2:24:36:80:3b:
         a7:2d:8c:42:ab:22:ee:78:1d:2e:e9:51:34:f9:c6:80:87:ab:
         f7:84:c0:89:7a:4e:1a:ef:eb:a6:7a:65:64:2a:6d:36:57:7b:
         4f:ef:5b:6e:c3:15:33:f6:af:ce:42:01:a7:9e:be:e9:62:f0:
         e4:3f:a9:1a:b1:e2:49:df:84:17:69:85:a0:26:f8:2e:eb:30:
         86:e1:0e:bc:c7:25:69:fc:4b:a5:b9:7f:5e:69:7a:c5:f2:5c:
         23:8d:90:3b:e2:9f:aa:90:3b:24:d8:41:8a:0a:2d:8e:d6:b0:
         97:01:d3:95:c5:97:fd:8a:0a:61:c4:90:20:6d:78:7f:ac:2a:
         cb:a0:84:9e:d3:24:aa:d5:f5:2b:67:28:b9:c5:a8:16:1e:7d:
         db:c0:c3:58:53:57:d2:4c:b8:da:c7:8b:4b:42:62:b5:0b:51:
         9e:70:24:c7:18:41:37:20:03:b4:de:4b:6b:b1:8f:7d:6b:7e:
         0d:fc:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----