Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File:                     nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier:          M5Q6nGFeMva8ccaSJJed0JKqn3Uim9O/IV6Hpx1TIyY=
Subject key identifier:   EE:ED:16:A9:F3:B6:54:E4:87:97:99:0B:85:97:7C:4E:49:05:51:7A
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer:       /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial:       01962E9994BDDEA9F90BE4F6482E0140F87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number:          0DEE
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
                          2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: oMOlgPQdU5ZYUf7PoyoI23J1cvoWEkQ8Vte8OnG5Q/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:bd:de:a9:f9:0b:e4:f6:48:2e:01:40:f8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=eeed16a9f3b654e48797990b85977c4e4905517a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:bd:74:63:5c:3d:30:01:e3:63:61:52:2f:
                    e4:84:24:f1:48:03:21:b7:60:1b:31:ba:a0:72:ec:
                    9d:24:f9:38:3e:4e:dd:2f:70:4a:1f:31:a3:a0:61:
                    30:25:b7:c0:e0:32:4f:7a:41:f0:18:68:59:81:fd:
                    ed:69:2d:53:c2:84:ff:85:7b:05:83:97:ea:98:43:
                    b1:2b:fc:aa:a3:86:58:e7:dd:a2:ee:50:4b:96:4e:
                    1f:99:97:fb:2d:d3:34:37:62:04:63:28:39:3c:ee:
                    63:82:9a:30:cc:92:4c:34:d6:0c:52:6f:da:28:91:
                    21:9b:69:76:ff:59:5d:b4:fe:5b:01:e4:64:4b:77:
                    f9:9c:3e:65:51:d3:b8:d1:2c:a8:a7:62:36:db:3b:
                    c7:f5:f2:89:d1:77:cd:e0:7e:0a:f2:ed:98:e7:37:
                    f7:f7:86:56:4a:9d:9b:3c:07:56:4e:db:48:e5:ed:
                    95:db:ed:50:dc:4a:fd:75:d7:96:76:68:eb:3c:24:
                    a1:d2:c3:08:e8:9e:9d:01:e7:c8:79:d1:c7:12:93:
                    63:32:fc:ab:59:04:e3:cf:7c:70:32:bb:89:a0:8a:
                    37:88:a5:14:fd:cf:eb:29:2d:e5:cb:f4:3f:1c:13:
                    c6:52:1f:ee:70:7c:68:2c:63:a8:d9:dd:25:34:f7:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:16:A9:F3:B6:54:E4:87:97:99:0B:85:97:7C:4E:49:05:51:7A
            X509v3 Authority Key Identifier:
                keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:83:c0:ff:ea:14:1e:88:a5:c4:ef:91:72:5a:25:71:e1:
         c9:45:e8:53:6a:c5:bf:e9:13:d4:2a:af:26:b4:23:21:11:4c:
         4e:02:f9:8d:38:4a:7c:80:99:3e:83:58:06:ec:0c:0a:e6:6f:
         85:44:0d:19:31:dd:cb:71:e4:1b:68:fa:aa:c2:8d:5c:85:21:
         9c:f8:c4:1b:35:cd:5c:a6:c2:c9:d2:ff:e1:a8:2f:fe:73:a7:
         b0:ae:d4:62:aa:b4:c6:52:0d:8d:e3:c4:4d:79:20:b4:b8:d7:
         73:e3:76:b3:2c:a7:ba:aa:9a:d0:d4:12:e6:24:0b:de:3a:92:
         4e:4e:c0:54:a7:f5:a5:cc:2b:0b:7b:c3:83:1d:54:4f:4e:c4:
         80:88:ba:98:7a:48:c7:81:52:e4:43:93:06:5f:f2:dd:bc:f5:
         b9:df:7b:ce:c0:b3:71:73:ba:ca:25:3f:39:15:cf:a3:d6:d6:
         69:bc:31:91:4c:1f:19:95:05:5c:df:fc:e0:d4:85:5c:c3:93:
         27:b6:b9:86:0d:02:8d:8b:b4:43:2e:83:8d:41:f2:26:a9:1b:
         ed:9c:b7:5c:34:21:f1:b5:6d:a5:57:74:0c:0d:dd:56:43:53:
         b4:17:d8:11:49:6b:fb:0f:20:e4:0b:92:92:05:c0:e7:29:ef:
         bf:46:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----