Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File:                     nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier:          9UmXrtRARHp2nTizLr6W0bjqP5glpvjhdtDrWO7ohsI=
Subject key identifier:   F6:C7:05:26:22:C0:8E:E5:4C:5C:B8:29:35:92:2E:26:A9:BA:DE:F2
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer:       /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial:       01962F06C82453B8E873C84A749E73167063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
                          2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: OksDkYjQilXpwBaongZg9AsmdKF1k17Ax1yBpvhkh5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:24:53:b8:e8:73:c8:4a:74:9e:73:16:70:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=f6c7052622c08ee54c5cb82935922e26a9badef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:24:53:99:d5:c0:ab:9b:34:b2:ec:d0:e6:
                    a3:6d:13:43:26:38:f3:38:34:3b:1b:63:a2:c1:5a:
                    e6:d3:dd:8e:54:10:02:44:b1:90:16:40:c8:ce:6d:
                    1a:85:e5:0d:75:a0:82:94:65:21:40:6a:6d:fa:ba:
                    7a:07:65:6b:81:2e:98:c2:64:bc:a7:12:72:72:f4:
                    87:e1:17:7c:ba:7e:46:ae:9c:fc:00:ac:d0:8a:35:
                    c4:57:ce:93:2d:14:8c:2b:69:5f:f7:72:e6:b1:38:
                    54:2a:67:bc:ff:ae:46:b7:f4:d6:9e:6c:24:42:0a:
                    bf:24:34:75:26:46:64:f4:bc:85:12:35:e0:74:ac:
                    45:2b:2c:6e:f4:67:4a:97:ab:6b:70:27:3a:dc:48:
                    47:e0:b6:75:7a:40:35:c4:88:68:17:4c:d6:5b:42:
                    a3:74:5c:ae:bc:74:6a:b1:cc:fc:ff:12:3a:36:3a:
                    d1:9a:bb:bc:9f:d6:a6:f0:ce:22:85:58:0f:1f:2b:
                    e7:74:a5:9b:53:34:8a:57:50:26:f7:28:f1:97:12:
                    42:db:f7:4a:27:03:b6:d9:ea:ad:a8:63:19:1c:57:
                    d2:d6:fb:00:bf:8f:06:f6:da:b7:b5:72:39:33:ed:
                    7a:e9:93:fb:56:68:dd:7a:8f:49:21:c2:4b:00:4d:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:05:26:22:C0:8E:E5:4C:5C:B8:29:35:92:2E:26:A9:BA:DE:F2
            X509v3 Authority Key Identifier:
                keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:db:2f:77:5a:07:97:32:83:03:06:b5:29:ea:2b:45:ca:
         b4:8b:a8:29:c8:ee:39:c0:c1:ed:ea:2f:d2:56:e9:64:53:bb:
         67:09:73:7a:09:48:ce:65:f0:6d:34:0b:1c:7a:ba:be:df:2e:
         d2:10:81:dc:bc:d9:25:b0:fc:36:aa:7a:b4:15:8c:b9:88:65:
         38:e0:aa:58:96:09:6e:d8:3b:f7:14:91:6b:32:93:3c:08:74:
         e0:14:4c:04:43:f9:6e:65:2c:9b:1e:04:d3:6f:a4:43:6c:69:
         50:60:50:2b:26:5d:dd:a5:df:35:ca:2f:b8:51:48:65:de:18:
         b7:ed:0b:ce:91:a2:8e:3f:8a:4d:60:c4:b4:69:8e:1e:57:4c:
         73:67:3c:d4:2f:39:fa:3a:77:51:c7:57:12:0f:56:ac:db:86:
         2f:93:9e:6f:88:fa:d6:ad:bc:d6:42:ec:05:30:49:8a:a0:53:
         50:5d:45:a0:af:bc:bf:48:7c:cf:db:d5:08:42:87:cb:39:3d:
         aa:7b:25:cf:4d:cb:9a:3f:22:e1:a6:88:dc:bc:df:fd:fe:5c:
         72:ec:2b:23:71:83:78:70:85:59:28:6d:a9:01:5a:88:91:65:
         90:a4:ea:77:ef:80:45:2c:d6:a0:79:c5:f6:e4:30:c1:a1:ae:
         8d:88:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----