Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File:                     nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier:          kyYFUyy6Gpw/wwKWa/PlPE+c+YfNgBofERKh8eFQtSQ=
Subject key identifier:   95:55:A9:94:33:95:20:FB:7C:C3:34:97:64:44:A0:87:65:71:0F:9F
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       01962E2AC35EB7B8F693BFEC643B9DDCEED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
                          2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
                          3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
                          4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
                          5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
                          6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
                          7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
                          8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: KJWCbBn9zojNpwYk1Op+EyUOLXWOlCsgTBqBMNG/8C0=)
                          9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:5e:b7:b8:f6:93:bf:ec:64:3b:9d:dc:ee:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=9555a994339520fb7cc334976444a08765710f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:ff:68:2e:79:8d:0c:8a:46:b1:b5:80:b0:
                    03:69:ae:04:41:39:de:66:43:cd:6f:e8:38:91:98:
                    c6:a2:48:cb:7b:34:5b:91:06:21:b1:cf:a0:10:fd:
                    ae:62:7c:b4:eb:7f:9b:4d:45:84:ff:e6:08:90:e2:
                    e8:12:86:dd:e2:7e:5a:f9:4c:68:fe:dd:ce:7d:0f:
                    fd:81:5f:7d:56:10:88:e6:92:a6:c9:0a:5a:23:93:
                    0c:bc:7a:d7:cf:ba:2f:5f:20:92:ec:c0:11:6a:5e:
                    ce:15:e2:71:73:63:62:aa:65:ee:6a:9f:2d:50:49:
                    7d:a8:48:f1:64:82:9d:fb:41:46:77:33:4b:fa:1e:
                    fe:e6:75:c9:27:a4:25:4d:87:b5:c7:7b:77:98:e0:
                    c8:a4:73:0a:29:c7:49:9d:6c:06:6b:a7:db:a5:ae:
                    bb:28:a9:de:00:81:35:f9:1c:07:27:b3:f1:a1:d7:
                    cf:7b:a1:c6:03:ab:55:43:18:8c:fc:c3:19:c9:56:
                    e4:5c:63:6e:3b:fc:ac:9a:af:23:13:f5:be:f9:4f:
                    37:78:a0:3c:09:71:66:04:a3:4e:15:c1:2b:96:58:
                    76:e1:89:fa:a2:c8:3e:b0:8d:12:b9:7e:91:86:c6:
                    48:ac:00:92:fb:68:08:1c:0a:5a:e9:53:b0:d9:da:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:A9:94:33:95:20:FB:7C:C3:34:97:64:44:A0:87:65:71:0F:9F
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:9b:c7:cc:7d:a6:66:18:9a:12:74:60:d4:08:6c:21:dc:
         ba:f9:6d:fd:0f:ce:58:aa:08:06:bb:d6:04:09:46:78:77:6d:
         1c:4e:f2:06:6f:0b:88:37:4c:63:6e:49:ac:f6:15:35:76:94:
         47:bc:22:eb:a1:56:75:ef:75:2d:11:56:1e:79:94:e1:7b:04:
         dc:a7:83:d8:cf:74:e7:ad:78:41:57:14:f2:81:83:0c:c2:a4:
         5a:52:e7:b0:eb:5e:56:45:83:48:84:67:5d:c8:dc:bf:e9:71:
         e0:a5:d0:a3:98:c7:5e:8c:67:5d:04:36:99:69:a0:d0:01:ce:
         56:8f:34:1b:97:ed:ec:d6:22:d8:7c:79:be:08:5f:1c:ce:7f:
         d7:71:fb:e0:43:21:1c:9f:9a:28:31:e7:22:c3:09:a4:81:a3:
         ca:d3:5b:28:3d:0e:bd:ab:b6:30:64:90:d6:d1:9f:fa:88:71:
         4a:40:28:99:37:e1:b9:f2:51:82:57:c3:7e:f5:35:48:c5:65:
         fe:47:09:f9:a2:03:d9:82:be:72:e8:e9:0f:62:aa:fd:3f:b3:
         6f:35:14:83:1e:23:4d:92:99:2e:48:4f:0a:02:5c:9a:d9:68:
         27:f1:78:d4:35:17:da:6c:f7:9a:f0:fb:c7:01:f9:cf:ae:a3:
         5a:a6:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----