Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File:                     nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier:          U/L4kCnO3V3wMsVemQFcal8IuuVjThzRZ+OQvk32cx8=
Subject key identifier:   92:27:93:6E:D2:01:98:FA:78:B8:AE:02:9C:53:F4:E8:63:F5:D4:F8
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer:       /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial:       01962E99A1F036205D8E11A8E82C4585ACA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number:          0C61
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
                          2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: 3NDAt2EJGb0aTO3vlSJ8mrFVa2D9u/ZNUTegXNu9LzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:f0:36:20:5d:8e:11:a8:e8:2c:45:85:ac:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=9227936ed20198fa78b8ae029c53f4e863f5d4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:06:bf:b6:5e:78:e2:d7:1a:72:b5:4d:34:
                    d5:f1:69:4d:fa:e0:22:99:06:c3:21:fc:69:e6:1f:
                    25:89:1d:71:b7:c9:84:a1:b3:4d:1d:b0:ff:0a:8a:
                    bc:75:94:71:ba:b2:71:41:63:1c:a2:b0:a2:09:ad:
                    0e:21:49:03:fc:f8:ac:57:b5:ba:c8:a0:9c:01:1b:
                    a8:5f:cf:3f:5b:59:00:93:63:60:25:e6:6f:86:d1:
                    56:8d:bf:10:69:f0:f9:10:6f:69:dc:88:45:eb:32:
                    86:e6:81:89:cf:15:5c:d0:fa:1c:be:77:32:b3:a0:
                    2a:ee:a1:24:bb:f2:5a:29:0f:07:5c:f7:fc:c8:3b:
                    95:b4:17:30:28:80:4f:5d:94:0a:5f:36:56:e1:4a:
                    20:55:4f:de:3c:d8:17:6e:1d:65:bf:82:e1:ae:a2:
                    06:4d:5f:87:82:d3:81:ad:47:54:dd:b8:21:68:de:
                    59:28:ca:d5:a9:56:29:7c:25:49:cf:e8:d8:ba:4c:
                    d5:53:42:91:2d:c3:92:2e:aa:79:f3:98:33:20:81:
                    3b:b1:ad:7f:da:f7:d7:d9:86:e9:24:7d:c1:53:0a:
                    77:fc:2a:e1:ad:96:ef:ac:eb:ea:83:a7:dc:a3:7c:
                    e2:a6:91:b5:db:86:a6:bc:48:fa:d0:f8:2a:a6:dc:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:93:6E:D2:01:98:FA:78:B8:AE:02:9C:53:F4:E8:63:F5:D4:F8
            X509v3 Authority Key Identifier:
                keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:2b:b3:9a:ae:6f:e3:7c:57:b8:a2:62:f8:d0:7d:43:01:
         d1:1b:98:4f:93:8d:56:70:4b:35:2b:c4:65:62:c6:7e:9b:18:
         82:f8:0c:96:0d:bd:f4:cc:5f:06:00:74:64:58:6c:ed:28:72:
         6a:ce:c3:bb:5f:64:8d:21:7f:c4:1f:52:09:87:15:07:18:99:
         ce:99:ef:71:c8:29:cf:0c:04:a8:9d:56:f4:58:79:26:72:71:
         7c:cf:c5:53:c7:dc:27:c9:33:0e:a0:99:63:42:55:fd:77:5e:
         69:16:2f:e4:f4:fa:7c:ad:4c:32:5b:66:03:76:f0:5c:c5:7e:
         5e:a6:6d:53:05:c7:47:0c:8e:5b:78:31:1d:27:8a:e1:a2:d8:
         47:b1:04:57:fb:12:68:f2:65:fb:cb:48:e9:3b:1d:c1:4e:09:
         ba:96:bd:8b:a2:ca:08:eb:45:d7:70:9e:3c:b6:0e:2e:f0:bb:
         92:72:5f:ed:8e:4f:18:38:d1:2f:81:d6:97:6c:ff:30:14:41:
         fa:43:d5:08:6d:c7:7c:9d:e1:22:fa:b1:66:f2:e6:98:02:0b:
         41:e4:1c:01:f9:f0:40:2f:d9:be:2c:df:20:bd:34:9a:54:66:
         a4:03:a8:be:84:87:d7:aa:4a:d1:16:8f:32:24:08:62:25:0e:
         8a:f3:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----