Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File:                     m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier:          aCU9kcs383qxrs9P1Y/fniHhh1w8YEYjBBi0W7fN4SY=
Subject key identifier:   E2:9E:3C:3B:4A:8F:4B:68:29:78:B9:D5:A3:17:BE:99:EF:4B:B4:26
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer:       /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial:       01962F06673AA1FEDC96CCE56380A7EC49F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (hash: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=)
                          2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: y/8Jth2dXujkiljhhhAL4GnHd/EIPH5kdB7COH47GZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:3a:a1:fe:dc:96:cc:e5:63:80:a7:ec:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=e29e3c3b4a8f4b682978b9d5a317be99ef4bb426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:63:3f:1e:12:0f:87:70:59:1f:20:e8:16:
                    08:20:ad:88:07:2f:43:22:b8:eb:a4:8e:1e:18:f9:
                    a8:26:b9:e9:a4:97:70:7a:35:8a:62:09:c7:e0:b9:
                    d3:c0:54:c8:6f:c7:47:15:15:cb:fe:6c:65:07:c3:
                    73:31:41:f0:21:7e:c6:c3:5d:4a:7c:d4:29:79:ca:
                    dd:af:77:df:81:d3:0e:74:5f:67:a9:06:29:27:8a:
                    d0:f2:70:9f:6d:e2:06:8a:c4:5f:91:e4:e6:fd:7b:
                    41:49:e5:e8:09:10:47:91:36:f5:8f:69:c7:28:09:
                    8e:c4:47:02:84:52:ef:83:2f:c4:8d:a4:76:8c:dc:
                    01:18:e4:80:94:2e:43:5a:63:13:f4:38:ec:f8:ee:
                    00:c5:e0:ed:68:2c:57:33:59:43:06:83:b2:37:49:
                    b4:48:06:27:1d:b0:e3:51:7f:a5:5f:fa:be:8b:f4:
                    b7:8c:62:fa:f9:e2:34:c2:1e:5a:67:a2:f9:63:64:
                    17:ea:df:93:af:86:04:a2:9d:a3:99:f6:61:69:e2:
                    b9:3a:36:7c:da:d9:08:f3:38:87:ed:75:0d:d7:b8:
                    06:b0:7b:c4:c8:94:af:5b:2c:ea:5b:80:bd:90:f0:
                    50:4e:31:67:a0:f7:2b:9a:a5:aa:7d:85:d5:be:eb:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:3C:3B:4A:8F:4B:68:29:78:B9:D5:A3:17:BE:99:EF:4B:B4:26
            X509v3 Authority Key Identifier:
                keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:4d:c7:89:af:d7:d4:cf:79:ba:37:52:5d:98:a2:53:39:
         56:fe:37:bb:00:25:e9:ee:cd:d7:20:d1:f0:94:80:c6:d0:2c:
         a0:4c:51:88:fb:bc:0b:0f:86:38:6d:e2:26:87:9d:8c:f0:4d:
         43:57:cb:ba:6f:ee:53:21:8e:e5:a7:a0:0d:5c:07:1d:92:fb:
         d7:96:cb:62:09:f1:56:3c:77:65:d3:96:a6:31:9e:13:08:19:
         7d:e7:04:a1:6f:86:f5:1e:e9:70:65:ba:ae:42:65:92:5e:7f:
         27:61:f6:5f:b6:e7:f2:0a:be:38:8c:69:3e:6b:a0:fa:c3:54:
         86:95:d2:76:f5:1a:94:67:ce:b5:b1:b5:77:e7:bd:ae:9b:1a:
         34:60:96:33:3a:f6:7e:21:23:2a:89:d9:fe:e0:00:4b:c1:de:
         91:be:8b:52:c7:0c:e6:59:17:8e:df:6b:60:83:8d:1f:ab:81:
         16:86:09:37:e2:84:00:3c:19:3e:82:00:71:ff:58:84:4f:be:
         96:12:05:b3:d4:06:37:39:73:b8:37:dd:28:de:ee:a7:b0:c7:
         c7:f6:07:ed:48:ea:d6:6f:7e:40:84:d8:76:9a:3d:48:13:83:
         5f:49:96:27:d2:5d:a1:78:93:99:ad:be:59:8e:15:5a:72:83:
         65:a9:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----