Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File:                     1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier:          Lf814hd8jFBH4b33lrnIzd6hdDoZvdR0fCdxwioBbGc=
Subject key identifier:   D2:5B:AA:5A:01:E7:A6:A9:E5:5F:E5:CC:A2:AE:7B:83:4F:1A:5F:2E
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer:       /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial:       01962F3D7CEA10DDF11D9F89FC524FC1EE81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number:          0242
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: P+9mEzVq0ilp88l9tJckayVI4wvv/E+fpSNlSPOFQQg=)
                          2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
                          3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:ea:10:dd:f1:1d:9f:89:fc:52:4f:c1:ee:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=d25baa5a01e7a6a9e55fe5cca2ae7b834f1a5f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:37:ae:dd:95:00:bc:20:c9:c8:8b:74:80:
                    e6:93:3b:51:46:1b:16:24:60:4b:88:14:81:42:64:
                    d3:16:e3:03:b9:c2:b8:c5:db:29:f0:99:bd:e7:9f:
                    95:34:53:fe:f1:17:22:af:66:89:44:22:4f:1a:ef:
                    5b:e4:52:29:fa:28:22:e1:4e:6a:4b:8e:29:fe:f1:
                    64:20:b7:56:23:8b:a0:61:0a:34:bf:ae:01:81:83:
                    09:73:a1:38:9f:ae:da:c7:8d:bc:4b:28:ae:7f:69:
                    90:90:48:a0:cd:dd:b6:c3:de:c7:7c:f6:5b:4f:f7:
                    92:87:60:b8:ac:28:4b:8c:13:9c:fd:cd:1c:ba:56:
                    d4:6a:0c:28:0f:ce:e0:6a:02:bc:1b:2a:18:e4:cd:
                    b2:97:2a:1c:b8:14:75:70:87:5b:cf:62:35:84:00:
                    b7:56:5f:d8:80:c1:e9:52:ec:7d:a3:cf:c7:1e:73:
                    d3:42:a9:99:21:8d:d7:49:d0:36:47:53:9d:a7:0c:
                    29:f1:33:f7:f6:86:d8:3d:55:62:d5:51:54:01:1f:
                    88:18:bb:a5:6a:37:84:21:7f:9b:d0:29:3e:f9:60:
                    d0:d2:ff:7b:16:39:44:e5:1b:d4:cd:c8:3b:4c:d1:
                    c7:96:3f:ee:93:89:92:14:d8:ed:56:61:61:d9:56:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:AA:5A:01:E7:A6:A9:E5:5F:E5:CC:A2:AE:7B:83:4F:1A:5F:2E
            X509v3 Authority Key Identifier:
                keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:cb:6a:e4:9b:3a:b9:eb:ce:b7:aa:03:8f:ef:f5:46:ba:
         f2:77:ff:4e:33:4f:4c:06:49:85:6f:8d:06:16:df:70:60:a6:
         3b:5c:e1:6e:8e:f8:44:c4:8a:83:e2:59:d0:49:24:02:2a:ab:
         25:0e:3c:2b:73:b6:6a:32:f8:39:e6:25:fb:fb:e6:b3:d4:a5:
         cc:f5:68:34:df:fb:e1:00:1a:7a:f6:3c:12:1a:9b:d4:82:c3:
         5b:ea:7c:db:c2:f0:a4:fc:9d:09:4b:4e:4f:bf:e6:33:38:84:
         99:3f:a6:33:23:0d:11:ea:3e:f3:5b:4c:1b:3b:f8:8d:bc:66:
         9b:6b:c1:4f:c4:bc:1c:af:99:d2:48:78:74:11:1f:0e:f0:06:
         dd:2e:fc:ff:69:e1:fd:60:f6:a7:a2:34:ea:6a:b6:6d:15:01:
         48:80:e2:c2:c8:91:f8:f0:61:56:10:da:5f:3b:0b:d2:af:d8:
         c5:f2:e8:f2:0f:41:33:d5:64:0a:ff:4c:ad:c1:41:89:37:d9:
         02:b7:86:87:1f:fd:8d:e7:9d:ef:fe:c9:8f:39:63:40:00:68:
         a8:9c:cd:16:0e:a3:ec:fd:26:7e:69:8a:8a:b3:6e:d1:7c:2b:
         75:f7:1b:55:ce:a0:03:1a:db:e9:1b:c3:72:03:3a:38:9c:10:
         2c:8e:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----