Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          2xDQa3A2glpnuY82Caj9xz+/RLI0lMI21lo9iGQqqzs=
Subject key identifier:   31:7B:FF:1D:D4:95:10:8F:65:37:DA:BB:6F:5C:74:FB:F3:6E:11:FC
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       01962F066D5325BEE84698AEAA5AFC008ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: G+twJXxyIbU2LMtjP/ErEy4iTrwBUfA0SQaYP9bA6sU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:53:25:be:e8:46:98:ae:aa:5a:fc:00:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=317bff1dd495108f6537dabb6f5c74fbf36e11fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:16:7a:c0:42:0d:0e:02:35:8e:48:7c:8c:
                    f4:f4:ad:7a:42:63:6a:19:fd:26:89:e9:6c:48:77:
                    80:ae:3a:52:0f:e7:eb:ca:ae:06:38:e5:04:0e:3d:
                    8c:d9:ef:8b:33:ed:f9:3d:67:89:38:c4:2b:08:f1:
                    c7:e9:a6:fb:19:de:20:02:ba:e8:39:44:3d:f2:d1:
                    b3:b5:37:2e:f6:77:df:1a:8b:6e:25:c5:9a:d3:51:
                    0e:30:d9:6c:62:07:b7:e5:7e:77:ba:3a:3d:61:15:
                    38:03:d8:dc:94:fe:96:a2:d0:02:d3:ed:e8:5f:f5:
                    8e:1b:2b:c1:fd:39:9c:40:d6:62:a4:12:ed:17:5a:
                    01:19:a9:99:48:43:b8:83:68:1b:4c:75:80:25:12:
                    dc:f5:07:33:3f:eb:c4:a6:d4:f8:9e:14:41:c9:6f:
                    cc:cf:b9:ae:ae:cf:cc:a3:d6:4c:df:61:a0:67:86:
                    38:b6:b5:bd:0b:af:6d:d0:6a:a1:27:7d:bb:31:9d:
                    c0:90:66:71:07:e1:6d:92:af:bc:da:d7:5c:92:e1:
                    b0:16:6a:15:ff:41:5f:45:80:47:1a:ff:4c:61:fa:
                    9f:bc:f2:93:2b:e8:18:fc:f7:bf:02:42:20:a1:dc:
                    1c:96:13:a8:de:6f:a3:b9:21:ab:37:ce:1a:36:95:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:FF:1D:D4:95:10:8F:65:37:DA:BB:6F:5C:74:FB:F3:6E:11:FC
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:43:99:39:19:1f:90:1f:74:44:02:a6:8d:ca:bb:78:c6:c0:
         0e:a2:c9:e7:18:0b:44:02:5d:49:bb:fb:3b:8f:d3:7a:84:e8:
         65:ed:85:f1:ec:00:63:73:0c:68:05:fc:d9:ed:86:b5:80:83:
         73:2b:d1:68:2f:c5:13:8c:f0:41:84:e2:d2:8f:25:8e:e5:f0:
         d1:e5:61:95:55:48:eb:7d:f5:d3:29:8d:5d:cb:c0:cf:49:23:
         be:56:8b:3b:61:59:7a:f2:c1:e8:fc:a5:a4:20:39:33:f7:28:
         90:27:44:3a:05:a4:f7:a7:3f:6e:13:ed:16:27:4d:84:6a:ec:
         fd:21:0d:7d:4e:b9:a1:d4:cc:22:07:3a:3c:c2:e2:2e:7d:d6:
         69:5a:d1:21:b1:e7:f9:57:27:58:73:98:c5:85:e4:e0:91:0e:
         cc:80:e6:47:cc:99:ea:b2:42:89:fb:45:65:10:3e:ba:4c:53:
         86:32:80:22:3f:40:9a:ed:49:3a:61:d4:3c:fc:bf:b4:00:79:
         dd:d3:8a:07:99:ed:5a:6a:6e:68:dc:aa:a2:58:6c:a2:ce:a6:
         00:92:08:fa:c9:86:f3:d8:ab:93:dc:c8:c1:40:3d:f8:7b:94:
         8d:ba:70:1e:48:d4:f7:24:7c:be:ee:37:c4:1f:e7:b1:c9:0c:
         fd:37:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----