Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
File:                     nBzRs8h3KVb6hVNahGS0yhlmOt4.mft (raw, json)
Hash identifier:          qrnk0LcznJyFEBWq/c89U+JZY919zhgVj823JRJk0UM=
Subject key identifier:   3C:6C:4C:2A:1E:AD:99:4D:60:93:DA:42:BC:04:77:0E:4F:DC:0B:DA
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Certificate issuer:       /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial:       01962ECF5D4AF9C8546510BCEE744F316CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: JeBncY6ChKBRQOUTYTSFHZE1uH8.roa (hash: xgTh9uFZcGgpjhz25blPwKqXY1Nn7zce/RhA70u2mJQ=)
                          2: XOwu2ebvUDQPT_bMtirnTz4DXtY.roa (hash: +WWsZzcafcQYxozcv0fQHPsnMiE94A7luCuf63M9dXs=)
                          3: nBzRs8h3KVb6hVNahGS0yhlmOt4.crl (hash: TKjWDY/wDRrE915pnZNMM++LT7dX6KbHXfCdAAPvcs4=)
                          4: o2jbAYhRTuQBmdDMbACuxNgCDog.roa (hash: l9P4NF0hkDAdmr9McK92Zf+I3x80Yj+ORPskROTVaoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5d:4a:f9:c8:54:65:10:bc:ee:74:4f:31:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=3c6c4c2a1ead994d6093da42bc04770e4fdc0bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:63:f9:ea:67:4c:0c:53:c2:cb:5d:90:02:
                    2c:11:1e:47:8b:6d:ea:aa:f7:97:d3:3a:df:72:6c:
                    8a:da:33:ba:0f:2a:1d:52:ec:b9:a2:f1:03:e1:e6:
                    af:96:41:c8:d5:80:92:15:a4:df:e4:3b:af:f8:1b:
                    76:6c:ed:4e:42:00:19:f7:4f:b0:4a:c8:e4:ef:4f:
                    4a:a0:9e:15:3b:8b:cd:27:3d:6d:40:91:8a:20:6e:
                    93:26:43:e1:70:86:44:58:fd:72:ce:4f:87:a9:60:
                    dd:3d:9f:92:b9:6d:59:12:90:b4:c0:ae:c4:46:75:
                    19:c3:52:29:af:10:98:d4:bb:cb:f5:35:86:bd:b6:
                    55:19:7a:64:c8:c1:a4:68:29:01:68:f7:f1:df:39:
                    cb:20:aa:e3:15:b2:60:1c:20:3b:80:ed:c2:a3:b3:
                    20:b5:59:8d:68:2f:da:45:6f:87:fd:d0:dd:8f:dc:
                    5e:80:77:23:89:3b:f2:b8:c4:51:05:83:1a:0c:df:
                    51:d3:ff:f4:07:f9:cd:9d:77:49:c3:fd:c5:80:aa:
                    d0:71:ab:dc:aa:c4:63:e6:ab:4a:8e:3a:34:97:15:
                    73:d4:0c:35:d0:ce:39:e3:bf:79:1f:74:9d:7b:2c:
                    bc:e3:02:2b:e5:98:02:9d:41:50:58:26:6d:a7:b7:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6C:4C:2A:1E:AD:99:4D:60:93:DA:42:BC:04:77:0E:4F:DC:0B:DA
            X509v3 Authority Key Identifier:
                keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:c2:ca:80:61:64:92:4f:69:fd:08:15:bf:1d:d5:f2:f9:
         d8:fd:81:f9:a1:ae:a5:a6:de:d7:1a:29:13:ae:84:55:dd:86:
         78:92:da:7a:d4:76:3b:1b:be:92:e5:98:34:22:76:fa:9b:eb:
         0a:1b:75:9a:97:e8:aa:4c:84:90:37:f2:11:86:83:70:9b:b6:
         19:b1:06:a0:1e:84:17:75:2c:c9:0f:b8:51:2e:01:f5:5e:47:
         8c:84:32:6d:7c:29:3a:d7:1c:ab:4a:09:e6:65:e0:37:7c:58:
         dc:5e:cb:93:47:9d:da:78:fe:07:2e:f1:8c:51:fa:50:33:12:
         22:21:19:72:75:70:25:70:71:78:05:38:dc:e7:ac:ef:8b:b9:
         b0:d1:f9:98:56:3b:15:a0:44:9a:19:35:a6:78:3a:72:88:ba:
         e2:35:70:f8:85:65:9f:64:5e:b0:cd:c5:bc:01:e8:51:7d:a8:
         d9:ec:11:c9:82:ae:be:50:b3:69:28:6b:68:1c:d8:9f:f8:c4:
         d4:03:74:3e:88:1d:d6:ce:0a:e4:9e:89:12:72:e1:61:39:97:
         ce:6b:16:1d:ec:18:fa:d5:70:f9:0a:86:0f:42:c6:0c:d2:33:
         11:06:11:6e:37:c9:d1:4a:1d:1d:ab:8d:ac:d8:a4:35:2d:37:
         31:18:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----