Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File:                     nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier:          vBx6lDkZgeWFmN0j8sg0nmc1hdJQwzmqU0fOwcO6T/c=
Subject key identifier:   E7:8E:DE:5A:2A:97:64:52:36:28:7F:B8:7A:7C:F0:EF:D8:80:F8:D2
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer:       /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial:       01962E9923D770D94BA49DB5E4E27292348F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: qJDG2pm6eWu5qeeulK9H1WCyzM0xbCAMOI74rtrKQcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:d7:70:d9:4b:a4:9d:b5:e4:e2:72:92:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=e78ede5a2a97645236287fb87a7cf0efd880f8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:8f:97:7a:c5:73:04:52:1c:a0:6f:b0:ab:
                    76:84:2e:42:55:97:e3:de:74:ad:ef:0c:30:91:df:
                    70:b0:f1:c0:16:ef:51:74:1f:52:85:8b:35:d2:ae:
                    6b:cd:47:b6:03:b6:29:b0:2f:b3:98:3b:0f:45:6d:
                    b0:dd:84:54:83:86:b8:b2:48:f6:06:01:9b:32:1d:
                    89:14:6a:dc:b3:52:f0:14:39:06:5f:8a:d7:7f:54:
                    b8:a4:ab:83:9f:b3:24:56:f7:14:fa:80:32:49:13:
                    2c:67:ef:27:39:c4:9c:bc:4e:1e:cc:3e:44:28:3e:
                    06:ab:7f:4d:22:c2:f9:3c:b1:1a:52:db:5f:de:cb:
                    6e:83:fc:50:70:21:f3:5d:66:1d:f7:a3:3e:9b:7c:
                    51:8d:c1:35:80:39:65:ee:50:e9:17:01:66:ff:84:
                    1c:cd:cc:41:01:2d:7c:83:50:ad:8a:52:f9:3d:da:
                    41:86:d9:48:da:d6:2f:e5:34:b3:71:fb:4d:30:1b:
                    0a:b8:28:df:78:fb:07:72:6f:26:31:4d:06:56:49:
                    1e:88:22:f4:77:ff:89:01:c0:e8:7b:fd:c4:ed:4f:
                    98:de:a8:0c:01:f3:5a:28:ac:63:e6:cf:6e:6a:76:
                    9f:29:84:31:01:0f:ca:a4:39:71:4a:b7:17:a5:b8:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8E:DE:5A:2A:97:64:52:36:28:7F:B8:7A:7C:F0:EF:D8:80:F8:D2
            X509v3 Authority Key Identifier:
                keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:a9:0e:6c:9a:01:3e:b0:e9:9b:df:5e:22:3b:14:46:c0:
         80:b5:2c:65:84:1b:24:0f:23:5d:80:02:17:7d:4c:9f:95:4b:
         0a:d8:a8:ea:cd:d4:27:f0:55:d4:e9:08:6f:65:0a:bd:b0:5f:
         c1:70:74:b9:ed:a2:ef:3b:9b:f8:38:fe:42:f5:45:11:10:f2:
         f6:81:c6:13:0f:b5:7c:ae:fa:e4:fd:86:d3:f0:5f:be:58:22:
         24:c6:3c:42:5b:55:93:10:9e:c6:30:dc:29:92:68:3d:2a:0b:
         66:26:dc:7b:87:c3:44:03:08:93:dd:73:29:5b:38:68:00:95:
         28:47:86:ef:15:f7:79:cf:97:91:bc:54:33:3e:26:1d:57:21:
         fe:5f:39:ac:c4:11:53:3b:14:35:ba:c8:6a:b1:e9:20:9c:bd:
         d2:da:54:c7:76:29:45:ed:58:c4:67:40:33:d8:d9:c8:cb:20:
         ec:3d:05:0e:cd:a3:b2:79:57:4b:fd:b4:6a:ea:07:b8:86:df:
         80:bc:07:bc:f9:91:fa:d8:31:3f:49:5d:02:d5:34:37:0b:c3:
         f7:fb:71:a9:65:12:ec:36:2e:8a:ab:20:15:eb:13:78:6c:8f:
         e9:b1:32:7c:de:55:dd:fa:1b:b2:4a:6d:06:02:4d:07:50:89:
         dd:43:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----