Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File:                     nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier:          0Li/NQ2OfmrqIrj+2Rb5zvEjPYqb0ee7gBhBTXxGdjk=
Subject key identifier:   1C:9D:BD:8A:F8:1B:9D:EB:65:79:04:93:EB:24:D3:84:85:F6:20:76
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer:       /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial:       01962F0704841EEB64947E7B4B3ED0D3D8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number:          01F2
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
                          2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: v28v8xV/FNMSiMRUo2tnCnjhqiq1R5a301COt6k5r/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:84:1e:eb:64:94:7e:7b:4b:3e:d0:d3:d8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=1c9dbd8af81b9deb65790493eb24d38485f62076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:ec:94:51:ce:51:f6:88:da:e9:bb:4b:6d:
                    3e:66:38:0f:45:2e:8b:85:a1:9c:65:70:1c:6e:4e:
                    5c:fb:67:05:6f:81:67:9d:54:35:c2:1a:de:f4:4e:
                    52:cb:4a:23:b6:7f:60:fe:05:2e:19:6d:29:f6:a3:
                    08:7e:31:62:41:60:0d:52:71:58:71:3b:55:1f:10:
                    a0:47:ca:53:72:ff:d4:ee:df:df:10:33:a7:89:1e:
                    af:1d:51:d7:94:7b:7e:44:84:df:40:64:49:8b:8e:
                    81:04:77:aa:3d:4e:2b:57:0d:f0:49:c8:9f:e7:52:
                    40:c5:f1:c7:fe:b5:d8:97:0b:2c:70:78:6b:0e:98:
                    7a:2b:36:7f:02:15:6f:46:cf:d1:50:b6:d6:43:aa:
                    cf:f3:55:d1:06:d4:38:db:ce:26:f5:79:b2:9a:4d:
                    0a:8f:89:26:6b:11:2e:ae:21:ed:bd:29:8d:75:4a:
                    c3:dc:ee:14:f4:c8:be:ed:97:58:dc:b2:f5:ce:55:
                    9b:59:38:05:4f:d6:73:74:39:f3:7b:46:bd:e1:2d:
                    58:c1:97:8a:30:0a:40:9d:2c:0c:72:e4:f5:ff:b5:
                    52:89:aa:a9:a5:df:f9:2c:1f:1e:8d:59:f3:93:38:
                    19:12:48:e3:18:01:04:fe:07:b5:b3:65:ec:6d:5f:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9D:BD:8A:F8:1B:9D:EB:65:79:04:93:EB:24:D3:84:85:F6:20:76
            X509v3 Authority Key Identifier:
                keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:68:fa:64:9a:16:fd:91:6f:48:d4:3f:10:17:da:ac:77:
         fc:70:c6:09:90:78:22:46:ff:63:66:7b:94:64:e1:4c:21:76:
         56:e8:5d:03:5c:36:65:7d:d4:c2:8a:1a:2f:0d:5d:40:2f:f2:
         e1:08:90:c9:db:b0:9b:9e:f9:1a:52:3f:d3:87:d9:15:c8:bf:
         ea:a2:d3:2e:f4:d2:a2:cf:79:99:3a:66:4a:89:ed:9b:60:05:
         e2:7d:23:aa:d6:b9:15:14:53:73:1b:20:eb:59:30:b0:33:b1:
         a9:2b:6f:c0:02:0d:3e:d3:dd:62:c0:eb:da:f4:03:81:c1:9b:
         ce:b1:13:6c:9e:91:44:54:85:26:60:07:3f:46:f9:d2:0b:47:
         3c:ab:e6:c7:92:53:0d:ea:fb:15:3b:35:d3:d3:cd:9f:43:4b:
         44:60:e3:4b:8c:12:8a:59:71:07:80:f8:8f:b9:0b:7a:2f:b1:
         3e:07:f8:3c:d3:8f:86:0b:70:92:44:1c:54:d7:33:6c:07:fc:
         17:37:6c:d0:9d:31:83:24:b8:34:a0:46:3a:f4:be:4b:f9:45:
         f6:10:b8:99:68:7a:31:5e:0c:68:92:ab:f2:e5:71:f4:f3:55:
         56:2b:9b:b0:5b:c0:ff:fa:00:7b:56:bb:52:b0:fc:4f:56:e2:
         73:3d:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----