Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File:                     nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier:          BwmeIZkxQTRCAhhwXo6BnwwirwirC2m23EbDNE1qCQw=
Subject key identifier:   B3:DF:40:3A:25:97:2A:A8:49:B1:4E:50:59:C2:07:25:20:01:1B:1D
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer:       /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial:       01962F07439B47C058482574BB5DB9364E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number:          03CD
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: Rxmp0Dqh4Zy2Yljd1JH8AN+Ng2U9e7wZCoxQiAycaFk=)
                          2: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
                          3: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:9b:47:c0:58:48:25:74:bb:5d:b9:36:4e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=b3df403a25972aa849b14e5059c2072520011b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:8c:be:1a:1d:dd:96:2c:70:7c:78:c4:28:
                    f6:af:93:b2:1a:04:15:32:2e:4a:96:f4:60:b0:e9:
                    94:2a:5f:00:d4:e5:e9:6e:29:9e:ed:de:a5:e8:7d:
                    6c:1f:a4:5c:af:e7:20:9f:13:af:72:bf:27:17:91:
                    37:9b:90:43:d2:85:bc:8a:e6:3b:d4:64:c9:1d:40:
                    77:85:f2:27:62:b3:1a:e6:95:10:c8:fe:2e:b6:ad:
                    54:2c:b7:a5:1e:93:d2:72:dd:d0:c1:34:ed:eb:20:
                    30:1f:56:57:9f:52:0f:6e:75:95:31:81:90:95:d6:
                    df:48:dd:03:6a:89:41:ed:8b:76:bf:48:34:58:a7:
                    dc:6a:36:0e:68:2d:bc:64:d4:16:ed:95:31:b3:b9:
                    9b:c8:2b:d6:3e:a1:03:a1:ad:be:f8:09:fd:13:b4:
                    a8:60:a1:04:91:ac:68:e3:38:af:7f:97:c2:f6:e4:
                    f0:86:c8:a5:5e:2e:84:41:ad:03:80:e1:6e:63:d0:
                    e5:48:ca:2f:b8:9a:cf:93:ff:f8:0a:20:57:9b:49:
                    e4:a7:6d:dc:5e:0b:a7:39:b5:47:17:1e:84:ec:30:
                    8e:5b:35:e6:13:c1:40:02:19:36:28:a2:21:8a:53:
                    bd:21:d1:e2:68:87:4c:45:70:e0:c5:21:77:bb:dd:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:40:3A:25:97:2A:A8:49:B1:4E:50:59:C2:07:25:20:01:1B:1D
            X509v3 Authority Key Identifier:
                keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:19:0a:e7:e4:87:16:c6:fe:21:76:34:fc:4a:ef:ff:3a:
         63:2b:fa:6b:a0:fd:85:e4:df:60:60:8c:d5:19:14:08:6b:a6:
         cf:be:e5:60:88:b3:51:fa:0c:ad:5e:2b:4b:47:85:74:8f:88:
         75:b0:a8:80:06:88:5d:83:59:07:5c:d8:9d:08:1c:bf:dc:b1:
         63:c1:53:7e:37:27:86:37:6d:f2:50:58:dd:58:d0:23:0c:87:
         65:da:88:22:27:11:7b:9c:b1:a2:fc:65:0c:31:ef:4e:a7:41:
         a6:ef:cb:cf:7e:36:21:43:c8:37:dd:28:0a:8d:e4:a0:28:ac:
         3f:8d:9e:94:43:87:8a:9a:86:e5:85:27:23:1e:52:8c:17:09:
         73:81:16:f7:99:2c:bc:1c:cd:8a:30:66:ca:0f:1c:0f:fc:68:
         a6:7f:0a:44:78:8c:7c:11:18:42:d4:41:33:d8:04:4d:a9:79:
         08:f6:1d:d4:41:7d:03:8f:e5:ae:61:e0:b2:89:b9:08:a3:27:
         b6:b3:49:b4:18:78:4a:06:bf:ea:7c:f4:68:d4:2c:24:53:27:
         4a:1a:58:d1:87:62:66:b0:ba:5b:f3:75:c0:d9:81:70:db:12:
         31:0c:e3:a7:ba:86:bd:86:63:ac:b1:ff:96:99:52:80:e0:d9:
         c1:f1:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----