Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File:                     nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier:          rITZoawSMJkyXad7bAXqCSkZNpH2LqtwcAMCVAgISjU=
Subject key identifier:   D9:B8:A5:0E:D7:7E:EB:BB:C2:FC:3F:DB:B2:E8:34:F2:01:9B:B6:D8
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer:       /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial:       01962E2B4B2C740DEC9588E44B970F411FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number:          DC
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
                          2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: a8f6cjgfZDKHkfwt2QyuGguV/rxREfQcc3jqI9wR16I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4b:2c:74:0d:ec:95:88:e4:4b:97:0f:41:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=d9b8a50ed77eebbbc2fc3fdbb2e834f2019bb6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:9f:46:29:17:b2:8a:bb:c0:e9:06:af:99:
                    45:44:1d:85:4f:2a:3e:76:08:c5:3c:cc:c3:f8:37:
                    7c:c0:6c:f8:03:fe:db:17:3c:51:56:c4:ea:da:fd:
                    d6:4f:4a:c8:96:12:71:24:5b:8a:83:89:af:95:ce:
                    36:9c:bb:5c:71:13:6f:1e:c5:7a:98:e2:c5:a3:4d:
                    d8:19:aa:6b:45:cb:87:26:30:03:36:4b:2d:27:10:
                    23:b7:99:0e:21:0f:86:76:3f:55:89:fc:6b:6b:e3:
                    e5:14:7d:1d:50:54:0c:9b:5d:f9:4c:ac:d0:e0:7b:
                    cc:76:2e:24:33:e1:6a:58:42:71:63:3f:61:22:df:
                    b8:3e:ee:d2:27:fe:7e:7b:3d:00:e8:7c:9f:5d:3b:
                    3c:b6:14:63:9d:75:51:b5:1c:06:53:d6:f4:6d:2e:
                    75:14:8a:b7:98:4d:a2:7c:b7:e3:b7:a5:ab:16:f7:
                    a7:fc:16:ea:d4:a8:e5:a2:45:62:e8:df:40:04:05:
                    c6:40:e0:6a:5a:44:58:06:48:07:8f:51:0d:64:16:
                    dd:8f:fc:db:80:8b:a2:8c:46:1e:01:ca:7a:0f:75:
                    d0:28:a3:c3:10:13:68:b4:09:16:16:ea:53:83:7b:
                    4f:6c:e8:39:bf:56:20:f1:22:fc:af:61:0f:5d:09:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B8:A5:0E:D7:7E:EB:BB:C2:FC:3F:DB:B2:E8:34:F2:01:9B:B6:D8
            X509v3 Authority Key Identifier:
                keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:37:e7:5c:fe:fe:cd:d7:95:9a:61:20:16:37:b8:77:8b:a2:
         9a:f5:25:a3:71:8b:33:1a:83:74:40:28:d6:58:f9:86:27:d2:
         0f:d1:40:25:dc:9f:f5:19:e5:08:7f:9e:bf:19:75:ff:ea:d5:
         02:16:a3:9f:1a:e4:88:0d:84:9d:b8:ea:5f:0c:4b:5d:61:d2:
         80:65:b4:c8:eb:2f:96:2a:1c:12:5d:fc:b2:e4:de:65:09:65:
         94:e1:36:ed:ee:32:a1:6f:a0:41:b7:76:3e:81:ee:a6:a3:5a:
         89:20:00:78:66:51:b2:90:0b:d0:91:a2:d4:71:9b:a4:0c:af:
         2b:f4:b8:9b:9f:c2:30:a6:3e:71:e8:54:5e:47:aa:88:47:85:
         85:03:cc:36:5c:e9:fd:7d:61:2d:8f:27:17:e7:f0:6c:4a:92:
         ef:d0:a7:d5:c2:09:76:48:3a:31:65:53:f1:b5:5a:4d:06:b6:
         11:89:36:23:28:fe:6f:d9:68:17:6e:e3:07:98:1a:64:39:ce:
         ef:2f:96:35:18:2e:0f:46:1f:32:2a:15:49:2c:73:96:84:14:
         22:8f:32:d0:be:ab:eb:df:68:1b:44:62:30:f2:d0:d0:04:dd:
         84:5e:8d:14:c4:96:90:70:7f:3d:af:d2:13:3c:7e:d9:e3:dc:
         c2:ce:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----