Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File:                     nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier:          plqQQ5CyrWFZGBzZ99azjhTz4QMex+Fe6F7L1/uW2gE=
Subject key identifier:   6E:EF:93:75:7B:21:59:67:FD:DA:96:46:8A:A4:BF:B7:69:E6:E7:50
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer:       /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial:       01962E99ADABAB06C22D6B3EEAF0AA0CFF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number:          0E60
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
                          2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: tATZmWvkXArfaK6GqDyQkad2+YdZxXELKUEGZformLw=)
                          3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:ab:ab:06:c2:2d:6b:3e:ea:f0:aa:0c:ff:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=6eef93757b215967fdda96468aa4bfb769e6e750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:3a:06:42:1a:33:a7:28:a3:c4:07:3c:c5:
                    37:de:ef:23:73:61:ae:08:76:a1:fe:05:14:32:69:
                    da:b5:bd:5d:d9:25:f9:96:f6:9b:94:be:87:63:67:
                    a8:df:2d:28:ea:55:84:b3:9b:ad:a2:45:7f:4d:ef:
                    75:64:8a:1c:68:16:e7:95:6f:9a:37:ec:fe:9b:49:
                    9b:e2:6d:7b:b6:50:3b:ce:9e:9b:60:4f:c1:18:e3:
                    72:ca:bb:64:26:57:1d:7e:50:2a:c7:fe:c5:7d:cf:
                    33:72:dd:d4:b3:a5:92:44:79:ae:fe:8c:96:c3:b1:
                    bb:21:83:ac:67:c1:0e:e2:2b:15:86:22:01:14:dd:
                    89:44:9c:20:b8:54:7e:b7:82:d9:0c:7e:c9:56:f8:
                    c7:36:d1:1e:56:2a:57:5c:89:d6:fd:ce:7f:4c:a0:
                    d6:a6:12:bb:c2:ca:a4:e2:57:c7:a5:39:b0:2b:7a:
                    ef:2b:b6:7a:56:02:97:f5:c7:bc:83:ad:63:e5:5e:
                    b7:fa:d8:a2:05:84:6a:e9:6e:7c:6a:88:98:f5:ee:
                    1b:c8:64:80:a7:75:32:6f:27:4b:53:02:d0:83:86:
                    e4:f6:dc:73:48:17:70:5d:bd:f0:8a:2f:d5:7f:24:
                    5c:a7:e3:45:37:48:f8:06:b6:af:4f:7f:13:98:41:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:93:75:7B:21:59:67:FD:DA:96:46:8A:A4:BF:B7:69:E6:E7:50
            X509v3 Authority Key Identifier:
                keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:55:c4:1c:91:04:aa:23:ca:f9:9e:05:78:33:c4:19:5b:f6:
         5f:3b:21:53:79:2e:13:f2:93:5e:7e:53:f8:9f:98:46:4b:74:
         b4:70:74:ad:c1:d8:80:de:d1:e3:54:36:5c:0a:e1:43:02:20:
         6b:34:a2:d8:50:74:58:5e:94:59:83:43:f1:bb:12:56:5e:91:
         b0:34:b7:be:2b:53:cd:31:f0:c1:a9:5e:68:31:33:7c:21:21:
         1d:40:48:5a:d7:45:1c:0d:8a:d5:c3:54:95:22:f8:66:cd:e4:
         3a:96:28:4b:38:7f:2e:1d:d2:f5:26:66:c3:3e:54:ef:9f:4d:
         ed:aa:f6:0a:5b:d4:55:97:48:de:98:c8:3b:c1:dc:73:aa:7b:
         e1:98:66:e7:4f:2e:b1:e4:95:a5:09:96:f2:80:57:f6:7d:a8:
         68:9a:0d:3b:df:d5:4c:57:b0:22:bf:60:2f:3a:0f:54:2e:48:
         d4:ed:a7:7b:12:fd:0e:5c:1b:11:e6:3d:32:a0:df:98:5d:05:
         cc:a0:b4:0b:47:a8:d0:96:79:37:8d:e8:ca:68:db:20:03:ac:
         f4:0e:32:51:ea:78:9b:2b:f6:46:6d:28:43:53:08:ec:1e:b9:
         23:1f:88:a7:96:05:51:bb:7b:1e:25:3f:13:18:bf:4f:d8:5e:
         2d:d1:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----