Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          Q4VVKaZw5jBk9FAbMHyHidsy8uAmJibSEkGCh2iiYCY=
Subject key identifier:   D0:F2:96:69:C5:B3:E2:E0:F1:CE:7B:7F:7A:5D:F4:2B:58:45:59:63
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       01962ECF60C32C8A627596743C889F18FAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          1019
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
                          2: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
                          3: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
                          4: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
                          5: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
                          6: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: Pwp8eJYWKE5eqxaH/QEkaMPN/WdPVWi2jbUMSejeJA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:60:c3:2c:8a:62:75:96:74:3c:88:9f:18:fa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=d0f29669c5b3e2e0f1ce7b7f7a5df42b58455963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:f1:46:b7:52:b3:57:a0:8f:e0:8b:43:c5:
                    79:7a:4a:5b:5c:6b:e1:e1:b6:3b:1c:6b:b4:0c:ee:
                    05:97:77:d9:63:ae:75:fe:73:1f:42:01:0f:3d:45:
                    af:5a:df:ce:e0:cf:0d:ef:2b:b7:82:e0:ab:11:40:
                    2d:46:ff:7d:89:75:07:a9:4c:75:16:46:ee:df:d4:
                    d7:01:ca:9b:8d:e4:c9:52:5b:9e:dd:90:bb:70:00:
                    8a:57:c6:27:38:8f:b2:1e:bd:5c:dc:10:71:b6:36:
                    ba:68:a2:2b:1d:7c:82:48:71:76:47:a9:5f:88:fa:
                    e7:a7:f6:f1:f7:60:7d:45:ea:db:37:31:43:e3:3d:
                    e8:ef:01:12:7d:ec:48:23:0f:84:c5:d0:df:56:98:
                    4f:42:b9:b8:d5:ea:2e:be:63:bc:ba:88:74:db:0e:
                    cf:f3:02:bc:d5:bf:19:44:c1:dc:5e:8e:2e:bb:0b:
                    b2:41:5c:a1:11:bf:ad:45:00:b8:cd:3b:81:98:19:
                    c5:d9:c8:0c:a4:c1:b3:9c:e7:de:74:5d:4f:f2:70:
                    c9:3e:4f:ff:32:03:03:e8:17:65:ab:02:f8:94:fe:
                    88:96:39:ea:af:4a:8f:ce:95:64:16:f4:34:9a:13:
                    f8:8d:48:8a:15:06:05:0d:f9:20:64:a8:f0:8b:c5:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F2:96:69:C5:B3:E2:E0:F1:CE:7B:7F:7A:5D:F4:2B:58:45:59:63
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:19:66:9b:06:63:87:02:fa:78:82:5e:65:51:ac:ac:eb:
         87:ff:09:1c:ad:04:53:33:99:f9:99:fc:29:bc:01:4b:4c:20:
         c4:7c:3e:cd:d9:e4:9a:fb:72:62:08:15:63:25:8f:e4:e9:84:
         d6:9f:af:9e:55:c7:2c:6d:57:f0:f3:9a:69:a8:30:4d:f5:d9:
         e4:7e:96:f6:44:8a:91:f6:b0:12:96:55:46:16:5a:eb:57:b5:
         6d:7e:3e:bb:1c:5e:c2:b8:b6:61:5d:f4:34:20:db:99:06:fa:
         10:70:47:92:53:d5:86:63:e8:5a:ce:1a:74:a6:8b:16:f5:19:
         46:5f:d2:e0:16:3a:f8:57:40:66:52:2d:c7:a1:9f:e3:ac:2d:
         ab:1e:78:ae:e5:b0:56:e4:47:66:ac:70:05:69:c6:7f:13:76:
         a4:75:ba:6e:27:1b:55:d5:32:d6:bd:f6:31:2b:cc:a7:7e:1a:
         2b:af:82:12:10:88:11:01:88:95:92:ee:bb:b4:ac:db:35:4b:
         55:20:f5:41:10:e2:c5:00:10:7e:db:a7:07:22:52:9e:d1:08:
         69:2a:51:32:a4:ca:98:23:fe:40:b0:4d:f9:98:13:d3:10:db:
         2b:fe:15:7a:81:2c:22:6b:27:64:c9:fd:a9:a5:b9:67:e5:30:
         a2:7c:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----