Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File:                     nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier:          mdgTg0nCYCaDbQ1J+F8zB1qWuQGD3GMb+xzld6XZziY=
Subject key identifier:   F6:8C:3B:63:43:D9:AB:0D:69:96:71:D0:8A:4F:9A:E8:16:0C:C0:8C
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer:       /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial:       01962E99E076B1092166D908B33C1A1D6E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:38 +0000
Files and hashes:         1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: i/k/N04LB4pasQHI02iu4y00hE6xknU9YfD5hXLg9xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e0:76:b1:09:21:66:d9:08:b3:3c:1a:1d:6e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
        Validity
            Not Before: Apr 13 10:02:38 2025 GMT
            Not After : Apr 14 10:02:38 2025 GMT
        Subject: CN=f68c3b6343d9ab0d699671d08a4f9ae8160cc08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f7:66:a2:6b:c1:b0:ce:84:cc:97:4d:a5:62:
                    27:8b:ea:c2:e2:b0:85:3e:95:8b:48:7e:d9:32:d5:
                    33:0b:93:80:45:2e:dc:f6:35:1f:f6:b9:d7:91:6a:
                    41:7c:af:24:f3:e0:65:b7:f9:9d:04:f1:34:02:97:
                    f1:4e:61:aa:0a:61:2a:47:e4:06:9d:10:9a:d8:5d:
                    c9:af:f1:74:bc:7c:a2:f5:a9:1d:ad:0b:1b:db:d0:
                    6f:bf:ce:0c:5a:c6:03:1b:e3:fe:30:f1:f3:08:93:
                    f0:11:c3:9e:6d:be:ee:33:67:b8:14:e1:a8:4d:a2:
                    a0:9a:cf:e6:ed:cb:87:f5:82:ad:cd:f4:af:71:5a:
                    b8:fe:7a:78:80:05:97:31:85:4b:51:22:a5:a3:10:
                    31:eb:c5:82:6b:c0:fe:27:21:ae:03:ef:7b:06:2f:
                    ac:9f:b6:f2:40:2d:25:43:48:b7:20:95:80:36:e0:
                    24:7f:15:99:27:a5:b6:d9:38:60:0b:27:81:1b:78:
                    39:ba:b1:76:1c:3a:a8:a4:d0:b3:a4:c9:b8:af:15:
                    91:2a:ca:aa:23:6c:69:42:89:ca:76:15:f5:17:9f:
                    d8:26:aa:5d:28:86:bf:b3:2a:20:16:2e:8e:f8:d7:
                    48:73:61:63:09:13:e5:b4:69:31:76:37:b3:79:ad:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:3B:63:43:D9:AB:0D:69:96:71:D0:8A:4F:9A:E8:16:0C:C0:8C
            X509v3 Authority Key Identifier:
                keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:22:64:34:38:28:8e:45:d4:ec:af:c7:fb:42:6d:4e:b2:8d:
         98:3e:08:7f:6a:04:5e:68:c2:a5:04:cc:92:2b:99:fe:28:e2:
         c8:9d:ca:5e:2d:c4:23:88:cf:12:83:83:cc:ab:0c:f2:c1:4e:
         98:fa:8f:d9:4f:c0:14:36:16:a8:98:70:e2:e6:b0:3f:b0:91:
         58:74:30:cb:ee:3c:cb:15:c5:10:25:f0:da:74:cd:10:b9:32:
         eb:1f:95:ca:fd:45:97:37:74:ba:d9:df:e5:74:9f:9f:73:05:
         1c:b7:f9:ba:2a:7c:1c:5b:f1:b6:4a:93:9b:69:7e:13:fd:28:
         ea:01:fa:50:37:3a:bf:17:16:1a:a9:44:9d:d4:ee:35:19:d5:
         00:0d:d2:24:9b:ae:15:14:99:09:fa:67:90:2b:a4:4f:67:7d:
         46:bf:0d:f1:76:4e:11:31:4b:e5:a6:3d:91:11:53:b5:81:b4:
         19:d5:03:04:f5:59:07:3c:d8:42:86:3c:7c:91:a6:bb:96:d1:
         2a:87:82:a4:57:03:23:5b:e8:d6:4a:87:fa:fc:4c:8e:c4:6d:
         fb:0e:91:b9:b0:2e:d2:5c:c0:bf:4a:bb:e1:3b:16:76:17:56:
         41:15:b2:51:ac:f9:af:c3:5b:7b:08:82:7f:b7:f0:5b:0a:78:
         cf:03:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----