Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File:                     nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier:          2oNCxhNqeUeKAgTaDbTsSLwfhkxeM0Cl/0LzXeLjGmQ=
Subject key identifier:   F1:A5:10:C8:88:22:EE:97:F5:03:93:20:F8:EA:86:21:CA:B1:E8:61
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer:       /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial:       01962DF4237F82715A7DE7DF539D591D22F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number:          0513
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: ZvGG7tCdi2sercP9g7oKCPsijfWlcDatHfPun7fYSHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:23:7f:82:71:5a:7d:e7:df:53:9d:59:1d:22:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=f1a510c88822ee97f5039320f8ea8621cab1e861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:fb:4b:84:57:6d:1e:ad:23:e1:2e:50:9f:
                    2c:21:cb:03:20:03:6d:12:87:70:ad:54:1c:52:bb:
                    f6:a1:40:f1:6c:54:92:6c:69:2d:1d:74:7c:8d:b0:
                    44:e7:57:4e:f7:07:0d:a1:35:85:ba:5b:36:5d:f5:
                    3f:52:8e:e6:1c:f6:16:cc:10:71:92:24:31:e6:6c:
                    f0:5f:91:3a:a7:6e:af:d9:06:b4:d8:3b:5a:80:bd:
                    e8:81:cc:7e:ce:33:5a:95:15:b8:a7:3f:43:c2:64:
                    db:7b:fb:cc:9c:0f:c5:c4:1d:f1:a8:6e:69:98:d6:
                    09:60:aa:92:9e:c0:1c:28:5b:8a:a1:dd:cd:22:88:
                    7a:07:73:ba:ea:e6:38:44:ce:b8:16:04:ca:d6:3b:
                    0a:c8:48:00:45:73:c9:ac:30:62:6c:cc:17:e9:c4:
                    2c:71:b2:ee:49:a7:12:28:28:1d:5c:59:b6:72:96:
                    73:93:c7:62:13:38:2b:e4:53:e6:a4:e4:f2:32:22:
                    4a:96:31:00:35:8e:c0:3b:12:f7:14:03:00:7d:f3:
                    a2:96:80:f7:78:e8:91:a2:d0:cd:f2:70:b4:dd:e7:
                    23:9e:96:ab:6b:c8:b1:71:cd:0f:27:21:3d:7d:0f:
                    d3:6f:88:bf:95:92:f6:68:5d:f5:f1:da:fc:3d:e8:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A5:10:C8:88:22:EE:97:F5:03:93:20:F8:EA:86:21:CA:B1:E8:61
            X509v3 Authority Key Identifier:
                keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:55:78:b4:31:66:2b:00:1b:3d:0a:e1:20:a7:3f:dd:b4:80:
         1b:8f:05:64:97:a4:98:94:51:35:1b:53:35:9c:bd:0a:3d:dd:
         40:d7:7c:de:9b:e9:73:85:3d:fc:b0:78:9b:d8:85:1e:e2:22:
         0a:71:cf:1a:79:6f:54:88:50:bd:de:c3:f4:72:7c:c9:29:8a:
         cf:fd:e3:23:f6:11:52:e5:af:8b:94:aa:34:d1:65:08:29:73:
         a8:c2:d6:ca:cb:43:0d:42:5e:49:a2:67:6c:9a:c1:ec:ce:81:
         f7:bc:f3:b3:72:ea:7e:df:7e:f0:c2:8b:43:af:1d:97:4a:ce:
         e4:a6:96:04:76:1d:75:26:82:42:c5:4b:9e:eb:d2:9b:06:f5:
         d8:8a:8e:85:1a:4d:11:6f:db:e1:f3:48:70:20:05:38:94:08:
         50:a6:2f:50:83:af:cf:56:e5:01:86:a3:ef:02:84:7f:9c:b6:
         55:21:5f:f1:4d:e8:6a:8f:47:eb:31:dc:d8:39:5c:eb:6d:10:
         7f:ac:25:7f:43:30:cc:a5:4d:fe:a4:d3:c9:ad:5a:9c:a9:77:
         cf:40:ba:58:2b:81:5e:7b:d7:06:e2:2f:6c:9b:82:df:46:89:
         32:24:6d:33:3b:c7:d1:2f:5e:da:58:74:b6:53:95:cc:41:01:
         75:41:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----