Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          o9wJm1TMQm2xIm3FSqT9rY42enCm9F/hofBuhhiYQeE=
Subject key identifier:   63:8F:84:FE:A8:F8:0C:B6:70:A5:BE:1D:4B:D8:41:F6:33:10:CA:86
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       01962F06E51DB7C3FC0EDCBA520042CF986B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          0FE5
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
                          2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
                          3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
                          4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
                          5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
                          6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: 5LEHYFTlGrm4D0yjwJD2JOcTOsfT28J9G2GHRyZAXZM=)
                          7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:1d:b7:c3:fc:0e:dc:ba:52:00:42:cf:98:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=638f84fea8f80cb670a5be1d4bd841f63310ca86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:7f:8d:56:ca:73:20:60:16:8a:93:1c:bf:
                    21:94:28:af:96:6d:1c:dd:7c:d7:c2:37:17:26:0f:
                    38:f4:a0:22:4f:09:75:38:53:56:5a:79:35:61:66:
                    96:1b:b2:4d:4c:8e:3f:fc:e0:a4:b6:8b:41:73:32:
                    f8:ce:51:a7:5f:32:ee:78:b8:f2:35:f1:33:d8:bc:
                    c2:57:b7:7f:ea:b3:a0:ac:71:2f:9f:53:89:31:22:
                    52:ab:a2:99:d7:e0:c4:9f:90:bd:eb:f7:4b:30:4d:
                    89:7a:ad:e0:a2:9b:0a:72:c1:21:91:9d:33:31:50:
                    c7:3a:be:b8:16:64:03:4a:56:6a:dc:39:1f:7a:bd:
                    37:61:7a:9a:ae:1a:43:ca:0e:2b:e0:ef:ca:2a:5a:
                    68:0e:6c:ed:58:df:5d:02:f5:e4:38:7a:b6:12:9e:
                    15:f4:88:75:2b:2e:64:2f:24:9a:5c:b7:0c:62:dd:
                    b7:ce:0e:5b:de:60:79:29:8c:0d:a1:23:2b:cf:57:
                    95:32:27:39:cb:b9:80:1a:ee:52:df:a5:7a:33:b2:
                    44:7d:61:e3:ec:bf:cc:0a:1d:0c:20:b5:21:7c:51:
                    4d:a6:8d:55:5d:ee:c1:5c:84:13:73:bb:05:0e:d3:
                    4b:8f:9f:b9:1c:f4:b9:ca:b9:50:11:87:f5:ee:67:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:84:FE:A8:F8:0C:B6:70:A5:BE:1D:4B:D8:41:F6:33:10:CA:86
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:bd:66:77:15:6c:09:3d:b3:07:a9:cc:bd:b1:76:e3:e4:
         7f:82:57:1d:14:fb:5c:a9:d8:16:c9:ef:da:fa:c3:27:0c:06:
         10:93:2d:32:47:18:10:06:f9:f2:6e:02:12:1b:0f:be:30:ef:
         ee:fa:58:e9:1b:c9:bf:0f:e3:22:02:0d:33:6c:23:0a:3e:1c:
         f1:2c:f7:18:12:ac:13:1c:28:2f:67:0a:f8:81:0e:3d:72:f1:
         63:8d:4b:46:61:1f:d9:98:f5:68:4c:2a:50:ad:b8:df:54:51:
         a4:6f:2d:dd:ac:ab:89:42:a9:3f:63:a9:64:7f:31:26:ab:4a:
         81:72:c8:a1:75:6c:fe:c2:99:8b:bf:02:09:ba:16:aa:1c:89:
         37:6a:d2:1a:e1:8a:f2:a0:eb:52:67:d5:d6:9c:fd:ab:8b:ec:
         37:17:d6:c4:7f:40:98:19:53:92:1b:28:4e:f3:02:23:83:92:
         72:e2:ae:22:a9:50:ce:3f:a5:e4:b5:b2:1f:d1:90:d3:64:24:
         bf:e7:28:2c:6b:bb:0f:97:74:64:90:18:4a:bf:4f:f8:87:96:
         1b:96:5e:88:bb:61:4a:46:9e:d1:a4:f8:91:ef:bc:3b:07:b3:
         72:53:7b:66:c1:9c:98:85:20:02:9a:fa:f2:f8:2a:3b:51:0b:
         18:37:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----