Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File:                     npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier:          YBnJkKZRdnkjBUdpxIvHa+1i7NjlJ30Oa14JqQ36P/M=
Subject key identifier:   B2:E7:F5:09:DC:B4:58:29:A8:8D:A3:E7:1C:A9:1E:A5:FF:62:19:66
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer:       /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial:       01962ECFB781F698A64C6129465F484CC217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number:          05A8
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
                          2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: 9ibgomoik53CMJ66FsBLXke/fr2wS8azcgDiUVk4yNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:81:f6:98:a6:4c:61:29:46:5f:48:4c:c2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=b2e7f509dcb45829a88da3e71ca91ea5ff621966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:33:66:6a:19:88:60:6e:19:e7:25:9f:76:
                    81:37:e1:0d:3a:55:0e:b9:b3:c9:10:35:00:f8:12:
                    84:39:31:a9:57:df:3d:bf:11:ad:8f:b1:88:40:c3:
                    92:5c:7a:a9:6d:73:d1:bd:9a:2d:a4:43:6d:35:13:
                    36:61:13:b8:1c:ad:10:10:82:87:aa:5e:5d:96:fa:
                    66:9b:ab:db:12:76:06:f9:65:4b:50:26:a7:67:cf:
                    13:25:f3:b5:f9:0b:57:b0:6f:b1:dd:71:2a:a3:e3:
                    3c:fb:bf:80:d8:3e:ea:98:c9:8c:23:f7:6a:7f:d7:
                    32:de:93:36:9e:a7:06:de:02:ee:59:7d:bc:31:a2:
                    d7:81:7c:70:4a:c0:10:fa:1f:ae:90:17:f4:de:f2:
                    74:c3:2d:e8:d8:c4:53:f5:46:7c:63:2b:86:50:92:
                    a1:dd:1e:4b:72:a9:4d:66:42:c4:04:3c:73:0e:cf:
                    57:ee:5c:c9:e0:4f:84:d4:5b:e2:07:5d:da:08:ae:
                    4f:d9:da:33:7c:5a:49:ee:b5:2c:10:ee:f8:47:95:
                    f9:55:cd:1c:59:ce:c5:cc:f5:99:6a:92:87:3c:95:
                    7c:61:90:57:48:0c:66:eb:6e:bc:f4:26:e4:5d:ff:
                    82:a1:5e:8b:4e:57:9a:2b:95:41:98:bb:b5:1b:46:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:F5:09:DC:B4:58:29:A8:8D:A3:E7:1C:A9:1E:A5:FF:62:19:66
            X509v3 Authority Key Identifier:
                keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5b:39:d7:51:94:ba:6b:40:f8:67:01:00:2b:17:2d:5e:01:
         88:6c:3c:29:78:fb:2c:53:45:09:20:f9:d7:4c:af:83:01:5a:
         d7:63:05:35:4e:e7:3c:65:ac:19:87:49:e3:fc:44:cf:fe:f6:
         5c:b6:1a:f6:6f:e1:48:79:3d:b0:a4:fd:0f:f7:ca:4a:fb:b3:
         70:04:82:2a:10:85:cf:27:1b:7a:d5:ca:7d:b7:6e:39:b2:d5:
         08:aa:75:64:1c:ff:d5:21:a0:42:bd:7e:de:15:4e:d7:e5:11:
         c4:d0:13:23:3a:69:11:ea:aa:89:d3:90:3d:b3:23:d3:6d:ec:
         0d:e2:d0:4b:7a:f5:ff:f7:4e:7f:fc:e2:75:b4:a4:72:7b:7b:
         a6:8e:4a:70:23:fb:41:c4:77:ba:75:56:69:bf:fc:21:6f:28:
         00:b8:9a:fa:76:0c:94:55:06:10:83:8e:d6:d1:34:ed:c7:6e:
         3a:be:20:e1:32:b3:ef:b9:1c:94:bf:1c:87:a0:01:76:54:97:
         e8:22:ef:2e:25:29:59:be:20:c1:44:a8:9e:ad:99:62:d9:14:
         03:05:47:4f:d8:02:09:9e:7e:33:f8:f9:85:90:c0:80:45:ab:
         bf:c2:86:10:49:7c:f0:d8:fd:7c:8f:4f:d9:24:01:29:8c:dc:
         3d:3c:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----