Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File:                     nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier:          xdA115mM6EyhVR1DlmCIGAspDSIxGHzmypTnpQudX5s=
Subject key identifier:   94:69:D8:AF:8D:7C:70:5D:FF:11:39:34:1B:D8:00:87:51:D5:B1:16
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer:       /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial:       01962FAB6BAAD334888BA724210EDA9ABEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number:          0816
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: FSg2uxLZso8wiccV4y+vhW/yCW6N8kGWnUPNnNbVVxY=)
                          2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6b:aa:d3:34:88:8b:a7:24:21:0e:da:9a:be:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=9469d8af8d7c705dff1139341bd8008751d5b116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:a4:68:4b:fc:dc:29:0c:04:6d:22:79:e9:
                    0d:2a:f7:56:b5:90:90:90:a1:05:6e:ca:56:9d:c3:
                    b3:4c:43:da:49:f9:bb:85:fd:d2:9b:88:36:64:60:
                    79:d8:d4:3d:39:07:62:d9:bd:6a:fc:3d:a1:12:65:
                    42:24:b0:a6:7a:bc:93:de:5d:f2:f0:5f:45:cd:73:
                    89:b3:9a:34:2d:7d:df:4f:56:70:ce:27:51:08:3b:
                    e6:51:47:e9:7e:7c:1a:c7:ea:c5:92:30:89:b7:bb:
                    ee:9c:20:30:b8:25:c4:32:86:20:5c:f3:a7:b8:60:
                    fb:45:ac:7d:09:2d:c8:6c:31:4d:ee:ee:23:c1:d5:
                    bc:30:c9:ff:ee:9c:8c:ff:46:6d:9c:89:2a:7c:dd:
                    d2:a2:00:27:db:5b:f9:4c:f7:a4:d7:6c:8b:07:8c:
                    e8:78:d4:3e:43:b4:39:51:d9:05:ee:96:55:62:09:
                    cb:3d:f8:d2:27:eb:28:4b:70:90:ef:85:1a:2a:ce:
                    3c:80:f6:2b:78:e6:6e:5d:1d:70:3f:b8:1c:24:4a:
                    7f:52:ff:10:8f:bc:ff:34:dd:14:aa:c7:63:cd:33:
                    22:b7:15:0d:22:69:81:31:a9:1e:41:85:f0:b2:3a:
                    3b:6a:fc:f2:fd:36:67:e7:8e:dc:cf:ac:fb:c8:59:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:D8:AF:8D:7C:70:5D:FF:11:39:34:1B:D8:00:87:51:D5:B1:16
            X509v3 Authority Key Identifier:
                keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:75:8d:c3:a6:c3:dd:aa:fc:8f:27:ef:bb:a0:81:e0:63:f0:
         1b:ac:c3:15:7b:9b:b9:2f:80:c9:54:b6:ca:48:f8:e3:96:bd:
         3a:b1:98:e7:f0:70:a5:a3:1f:59:63:d1:0b:29:04:50:d8:f5:
         89:65:24:0b:96:5e:8a:b9:cf:5b:54:87:4d:d1:d0:dc:57:41:
         3c:fb:44:19:8d:e9:3f:b6:3a:dc:3d:e9:47:17:7d:3c:be:bc:
         ed:45:e3:73:f4:72:59:76:d3:0e:41:e2:4b:ef:6e:66:e9:6c:
         2b:9b:66:0c:c2:2f:a3:0c:72:77:4b:7e:b4:50:fb:8b:db:ef:
         5b:9a:0f:47:da:1f:c6:08:88:59:38:6d:5b:cb:ea:24:62:c3:
         97:e8:39:75:be:e4:3f:62:8d:92:31:f1:72:e4:f2:a3:a4:ab:
         41:ac:c9:d8:4b:07:8a:eb:ce:03:5a:5c:ce:b8:21:3d:11:fd:
         11:cb:5a:e9:0b:44:b9:6e:91:46:b2:b6:5f:11:a6:6b:10:5a:
         5e:06:9b:7e:0e:58:a7:32:da:9d:8f:48:ea:26:85:eb:de:ec:
         7c:b1:35:ea:67:6f:35:8a:8d:4f:f7:a3:ba:54:10:7f:e0:fd:
         da:b4:05:c5:1a:25:8c:77:f3:08:df:29:c4:4f:6f:3f:93:69:
         e7:11:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----