Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File:                     nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier:          J9TN0jLc8bL/wiweP9Ow4fAqL3FzQViKL8sDFh2wIOI=
Subject key identifier:   08:DF:2A:60:D4:7B:5F:D7:40:D1:09:DB:E9:CD:E6:30:71:E9:B2:8C
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer:       /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial:       01962FAB60306066D07603D026EAE42BF1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
                          2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: YeXfw6wMKNWslNcg6CQtwhQkYG6aZig0qCNOI6TCl20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:60:30:60:66:d0:76:03:d0:26:ea:e4:2b:f1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=08df2a60d47b5fd740d109dbe9cde63071e9b28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:1f:03:34:b2:b5:98:7b:ef:3d:b1:16:9f:
                    5b:9b:ae:91:9e:3b:03:10:4c:0f:b8:ac:ae:cb:e0:
                    4e:0d:ca:4a:37:50:50:19:55:ab:a9:82:46:92:ff:
                    6c:86:f8:e5:2b:ac:a3:e7:15:b7:ae:73:8d:7f:9d:
                    8f:8d:c9:65:45:81:d1:18:0c:64:db:6b:2e:e6:8d:
                    b0:36:89:70:65:e4:86:8f:07:b3:48:52:c4:fd:3b:
                    3f:db:9b:8c:3a:61:8b:e8:09:b6:0d:2a:d7:ca:31:
                    92:4a:80:c7:62:0e:20:c4:46:c3:f9:cc:65:e8:41:
                    79:d9:30:6a:f2:27:3a:94:5a:b7:7f:f3:fa:2b:dc:
                    74:ed:0b:0d:08:76:67:8e:f9:78:8b:ae:f0:a6:a6:
                    62:5f:85:14:7a:5e:41:0c:be:4f:d7:9a:36:3d:c1:
                    21:6b:22:44:50:a2:da:0b:74:d5:1d:b5:8b:cc:3a:
                    a9:72:84:d5:f0:4c:24:dd:1f:f1:9b:fb:0e:ec:a4:
                    0c:86:b1:b8:f4:b3:b6:21:4e:a1:ad:54:c0:33:7f:
                    eb:7e:1e:47:1d:12:12:5f:25:4c:32:0c:14:e4:56:
                    1c:8c:72:a3:9a:c5:cb:96:43:d9:3a:04:b2:7a:1a:
                    b2:96:5d:0e:d6:eb:62:09:be:46:c1:70:6f:86:1e:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:2A:60:D4:7B:5F:D7:40:D1:09:DB:E9:CD:E6:30:71:E9:B2:8C
            X509v3 Authority Key Identifier:
                keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:5b:c0:fc:8b:96:d8:64:5e:3c:32:6d:5d:1f:5a:f2:d9:
         ed:5b:a2:67:32:93:e9:76:82:54:0a:bf:69:79:f3:7c:25:a8:
         4e:b1:db:4d:43:55:a8:34:d7:59:d6:3a:ab:74:78:df:e7:21:
         4b:77:f8:19:7a:a8:a5:f3:e6:c9:d1:8d:c8:42:ed:29:e6:e8:
         b7:42:c3:c4:25:7d:db:42:8d:e6:f0:55:c7:02:ba:44:1f:5d:
         27:4e:b1:7c:34:27:3c:11:90:42:67:e1:53:c8:03:df:80:60:
         42:43:26:15:2b:08:d7:64:9a:b1:62:a8:81:fd:c9:00:1c:ea:
         8b:d3:5f:34:85:98:0f:b7:05:db:52:8d:aa:5d:43:59:22:9d:
         52:85:14:95:3a:51:13:71:17:e8:02:f1:2b:5d:00:b5:7d:f1:
         54:71:16:60:4c:51:70:86:31:00:4a:b9:b5:01:35:e8:b0:df:
         d6:af:cf:ac:4c:7a:9c:be:40:a3:ba:b1:13:72:c8:11:99:43:
         b4:b6:77:6b:ff:c2:9d:f1:ba:97:b3:66:a0:33:10:17:14:27:
         89:8c:9e:44:69:24:85:99:ee:b5:24:59:48:91:78:9e:e1:95:
         51:a4:b3:2a:c8:2a:24:9f:3e:a2:e9:7f:ed:d1:d8:a3:fc:be:
         98:8f:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----