Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File:                     nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier:          08krFphGLPgzYRA07WyhqAK+jhZf+dHVM09aBfkjI9c=
Subject key identifier:   6E:95:F4:99:F4:61:E8:7E:75:70:81:7B:BE:73:88:62:2F:EC:5C:32
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer:       /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial:       01962E98B3B61091D4B0135B4F4009DF7161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number:          014E
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: //nOqpWG+64JxbWB+jZvwm60sxnl6YiBRaJQ2NNo5nQ=)
                          2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b3:b6:10:91:d4:b0:13:5b:4f:40:09:df:71:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=6e95f499f461e87e7570817bbe7388622fec5c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:cd:5f:e8:0e:e3:26:8d:6b:11:65:1a:f2:
                    eb:29:49:1a:28:37:6f:09:56:23:be:e1:48:af:92:
                    08:d7:47:e0:65:87:1a:cc:cd:fe:fa:90:33:ef:aa:
                    c1:2a:18:3d:67:2c:34:64:ee:c5:f9:c6:7d:80:72:
                    62:91:1c:da:ac:e7:7a:3a:69:41:2f:46:24:b1:5a:
                    05:6b:5e:bd:69:a0:11:5a:41:d2:d4:52:72:cd:44:
                    28:d9:4b:ab:a1:43:3a:3c:ef:ae:ef:26:3f:e3:77:
                    5a:f5:35:f9:e2:4f:ff:46:62:ab:02:99:f4:c5:60:
                    6f:19:6a:2b:1b:b8:a9:fc:1e:67:fa:c7:82:8e:57:
                    65:84:b1:55:ed:7e:70:2f:35:94:06:dc:c9:ca:48:
                    a4:25:26:5d:39:7e:10:a2:17:04:71:2b:ea:cc:c5:
                    c9:5e:54:dc:ee:ae:8e:15:3c:a0:fc:e8:af:95:c6:
                    9c:52:25:8f:ad:aa:95:16:bb:ca:15:71:51:e6:62:
                    ec:d4:02:5c:60:b9:5f:35:0d:a7:8e:1b:40:9d:51:
                    1c:fd:05:f4:49:6f:e6:08:0c:7c:00:df:f7:d9:3b:
                    6e:d4:a0:fc:b5:fe:87:8c:66:c1:61:f0:d9:df:53:
                    f4:d6:1c:01:1a:86:f4:b2:c9:12:00:35:87:5f:a1:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:F4:99:F4:61:E8:7E:75:70:81:7B:BE:73:88:62:2F:EC:5C:32
            X509v3 Authority Key Identifier:
                keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:d3:ca:04:ca:05:a8:9a:c8:eb:85:8e:75:9c:43:6f:cb:
         0d:eb:02:2f:c6:2b:b0:1d:2b:85:c7:7f:66:17:8c:ad:03:7c:
         8d:38:53:91:a9:ea:9d:2f:69:e1:fc:01:17:ba:43:1f:24:66:
         ac:f2:5a:f6:21:e0:aa:87:e4:b0:99:5f:b1:fd:48:f1:78:50:
         eb:fb:31:88:2d:93:fc:98:25:96:5d:01:bb:6f:5f:dd:37:ad:
         83:2f:a6:e1:7a:14:9c:89:eb:ba:f3:8d:b8:77:a6:b2:e1:a5:
         e2:66:b4:10:f4:7e:4e:a8:07:c2:70:79:d9:a6:f2:3a:fb:16:
         42:3f:ca:3d:6f:42:c6:f0:57:91:42:27:65:09:c5:ea:cd:32:
         5a:25:c5:92:c5:52:cf:31:f1:48:52:cc:42:6b:ac:47:ae:56:
         50:5a:45:4f:07:d8:75:fa:48:20:80:c4:be:20:67:a7:3a:83:
         7f:5f:8a:9e:05:d1:2f:b5:8c:87:83:e9:bf:bc:f7:29:60:79:
         5d:a5:d9:08:62:3f:c8:9b:3a:77:26:4c:7c:e5:40:7c:19:50:
         9b:11:66:b0:9b:55:dd:3b:f8:a1:df:51:9f:2b:a7:1d:85:21:
         f1:c9:8d:f1:b8:cd:c3:c8:24:d5:fd:c5:c4:5c:87:9d:af:60:
         f3:89:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----