Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File:                     nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier:          SBP79Zl6ppbqqauy20rVKhK/C5An5oqDTFjE0KmWTXY=
Subject key identifier:   05:A7:4A:5D:4A:39:33:B3:22:A2:91:81:64:E5:2D:40:55:75:3B:BA
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer:       /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial:       01962F06679D01C33D1FD99B8B178EEF3853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number:          0806
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: HYojN+wih5k9NC/CA9QNNrNiW1ls3KYDgwZ01r2OOKo=)
                          2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:9d:01:c3:3d:1f:d9:9b:8b:17:8e:ef:38:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=05a74a5d4a3933b322a2918164e52d4055753bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:fe:31:f3:10:59:08:cd:de:9a:db:32:21:
                    fb:72:db:be:cc:44:1d:96:72:7f:5f:a0:b3:54:dc:
                    cc:6a:98:45:f7:1f:57:44:21:70:6e:7e:14:3e:8d:
                    5a:4e:bf:ed:64:eb:b2:d7:49:64:95:ac:9b:a3:8d:
                    0f:17:ea:c2:c2:27:0b:30:c5:27:e1:03:1c:72:14:
                    0f:e1:60:a9:2f:b9:b1:03:5c:80:6b:51:42:08:a4:
                    fe:88:3d:ea:b8:59:24:d7:89:60:a6:fc:27:3f:46:
                    55:6c:b0:85:ee:59:e7:f3:3b:53:8a:af:ef:22:9e:
                    33:81:d9:03:0b:1b:52:16:cd:61:8c:d3:cf:a3:40:
                    fc:66:5a:dd:87:41:41:44:5a:ba:b2:e5:60:64:53:
                    e4:ad:c8:95:45:21:f8:5b:ee:3d:9f:99:93:42:fe:
                    f9:c1:3a:5f:16:4b:c4:40:0d:bf:99:11:b3:62:93:
                    e6:1c:be:fa:19:0c:e9:c7:0d:7c:0b:5c:11:07:72:
                    6b:2e:f8:3b:61:61:7c:95:ef:23:05:f5:a2:a4:6a:
                    5b:dd:c2:c1:8b:e3:d6:db:09:60:e8:1d:4b:14:3d:
                    70:4f:c4:ba:27:53:db:fd:fd:11:cb:f5:81:fa:54:
                    6f:db:ec:97:8d:75:be:fa:d2:d8:08:1e:17:e1:df:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A7:4A:5D:4A:39:33:B3:22:A2:91:81:64:E5:2D:40:55:75:3B:BA
            X509v3 Authority Key Identifier:
                keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:a1:dd:9e:65:94:c3:8b:c4:e7:5c:23:d7:a2:90:fd:36:
         0a:97:78:8d:09:17:96:ae:30:d1:1f:9a:cd:e6:da:27:1e:60:
         73:59:41:0a:bd:d3:65:49:66:cd:14:68:7f:11:4d:b3:d8:05:
         83:00:77:bb:52:9d:e3:cd:9e:aa:36:3b:93:e8:b6:33:f3:0b:
         fa:0a:4a:08:7e:9f:6d:c5:92:c3:21:a0:c2:08:6e:62:7a:3e:
         ec:5e:5c:fc:98:d9:7b:7a:62:6c:2f:6d:11:ed:92:d0:52:ec:
         ef:bf:0e:5f:b4:36:7b:7e:4e:e0:e7:4c:89:92:e2:fd:4a:48:
         a6:0f:3a:9b:69:90:aa:b7:c6:16:bd:15:0a:18:aa:05:4d:db:
         01:db:b5:28:13:df:a5:47:1f:2f:1d:f1:48:99:0e:d2:5f:60:
         0c:f9:de:07:be:5c:f9:eb:5f:a7:35:01:93:12:48:0d:7d:07:
         35:2d:07:2b:48:be:25:f9:b8:ea:b6:8c:2f:f1:7c:32:39:08:
         06:2a:1f:33:48:6d:c4:df:e3:35:46:22:29:5b:8a:af:e0:c7:
         20:e4:5c:f7:1c:c3:9e:60:86:87:bd:9d:f1:89:b9:87:46:4e:
         9c:2c:05:d0:d7:b2:6f:01:a4:ef:03:e9:92:a1:84:fa:90:a3:
         a1:db:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----