Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File:                     nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier:          V95Jx3s0gNpYEpN7vpjRwJiYzbGuTjD2LhPNSPcd8WE=
Subject key identifier:   18:D3:A3:97:4B:A1:FB:92:36:1A:F8:F3:A2:28:0D:2F:1F:A2:65:46
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer:       /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial:       01962E2B1C5AF86A9FDE38FC44E287C2DCBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number:          0EC6
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
                          2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: RidME4f37VL2Y0Pkuzq8LP3ybAuiWHyoW7iCJ8oYY5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1c:5a:f8:6a:9f:de:38:fc:44:e2:87:c2:dc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=18d3a3974ba1fb92361af8f3a2280d2f1fa26546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:d1:2e:04:3a:2b:b0:12:0a:15:a2:c6:18:
                    42:46:8c:41:31:2d:22:0c:7c:e3:18:b0:38:a0:16:
                    9d:2b:ab:07:92:90:96:0f:09:11:1e:7e:1d:17:c0:
                    6c:65:bf:b4:e9:25:9a:21:11:9a:34:65:21:c4:e1:
                    b4:00:75:19:f4:14:2c:92:a4:0b:33:26:fd:05:f4:
                    2d:72:4d:ef:55:2b:fd:a3:eb:80:91:c2:77:9f:f2:
                    cc:04:79:aa:7e:52:7c:15:ed:84:a7:6c:9a:d7:3f:
                    1d:4e:17:37:c8:98:71:3d:c4:64:26:be:30:d1:46:
                    73:33:29:05:43:c8:1c:2d:6c:04:3a:9b:55:05:29:
                    d6:91:99:1a:c5:31:bf:eb:46:a7:db:28:5e:a4:b8:
                    37:76:51:16:12:80:f6:b7:3d:6c:dc:ff:68:6b:ab:
                    42:06:c4:28:9d:7c:9b:2c:f9:3d:95:1b:a1:5d:dd:
                    e5:d7:d3:12:a6:a7:bc:53:e3:48:2f:4d:4c:f3:91:
                    1a:f8:38:39:80:46:ca:10:14:a5:b3:56:2a:ac:a5:
                    f9:71:44:8f:6a:a0:e9:de:eb:40:88:f6:fe:6a:d0:
                    5a:e5:bf:77:c7:95:af:8f:66:c5:e4:1b:40:65:31:
                    df:7d:48:35:62:e3:b6:e0:1d:85:0a:09:83:14:66:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D3:A3:97:4B:A1:FB:92:36:1A:F8:F3:A2:28:0D:2F:1F:A2:65:46
            X509v3 Authority Key Identifier:
                keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:7c:b2:dc:11:bf:dc:0f:68:eb:8a:ce:95:0e:04:5e:bb:
         e7:63:d2:99:55:e1:4c:53:74:33:c3:19:24:25:7f:ee:f3:30:
         83:34:76:9f:3a:60:45:8f:cd:fe:dc:65:e1:4f:50:7e:07:ac:
         ca:39:f1:56:29:d6:20:93:15:b5:5c:c5:74:ae:b8:2b:ee:f3:
         07:1b:79:9c:e4:de:11:85:93:cc:71:42:53:a0:cd:bd:ba:76:
         a5:ad:06:fa:1b:82:e7:47:98:ef:ee:15:17:4e:9f:60:21:ab:
         89:a6:f9:12:18:39:d9:87:98:f5:fa:dc:70:db:37:4b:48:d9:
         f9:cd:cf:cf:3c:4d:e0:76:8d:82:d2:17:a7:5b:f9:26:fc:41:
         b2:cd:08:bd:fc:db:67:bd:51:54:c6:fb:8f:a9:55:26:7f:c9:
         75:cb:93:22:34:f2:88:cc:53:ac:fc:40:8a:93:fd:83:b3:22:
         4a:2f:94:bb:11:e2:17:8a:f0:c2:2f:24:f4:1b:97:8e:25:4b:
         3d:59:40:ad:ca:8a:b1:8a:e2:0b:da:9d:6c:c7:5d:1a:74:f7:
         5c:b6:46:c2:fd:af:f1:f2:dd:a1:26:1a:86:b9:d7:1d:15:95:
         84:7c:de:82:51:dd:16:4b:e3:2b:5f:f9:aa:e4:e6:9e:d1:2a:
         96:31:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----