Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File:                     nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier:          MzB6s6M//S7m4uiWLj0IgxFwYpqg0kAyOri2ZDe2TBQ=
Subject key identifier:   74:22:18:29:57:B5:F4:4B:F3:43:8A:76:76:6D:38:C0:6F:03:18:72
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer:       /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial:       01962F7433243528B6373EDE1B253E47A5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number:          081D
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
                          2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: Mc4HfbGYA0+WbHj39HklC30BBhJzKoJhNLlV53vxGQw=)
                          3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:33:24:35:28:b6:37:3e:de:1b:25:3e:47:a5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=7422182957b5f44bf3438a76766d38c06f031872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:ed:f0:92:88:a8:bc:d4:1f:45:d6:6f:2e:
                    fe:5a:63:34:b4:43:72:c1:38:80:5f:ed:82:f7:6b:
                    e7:02:bc:f0:7b:8e:cf:3e:5b:f8:f8:cf:0d:83:ae:
                    b8:06:ed:28:8d:06:01:3f:0a:f4:b8:99:c3:66:a5:
                    54:74:53:35:d1:23:23:e7:74:3d:89:38:23:62:f5:
                    06:38:19:f0:f2:f1:23:72:d5:bb:46:04:b0:d8:28:
                    8c:2f:cd:18:9d:33:3e:1c:7a:a0:4e:f6:11:a1:a9:
                    b8:ed:5e:08:20:d2:d3:bc:99:b5:8f:98:c6:16:5d:
                    45:cb:5a:fa:9b:cc:dc:6d:13:77:0a:b6:24:0a:2e:
                    3c:da:75:57:f9:1b:2d:37:38:c3:a6:40:d0:dd:2d:
                    41:26:e4:8b:29:e6:b2:52:75:9e:70:25:d5:d6:5a:
                    66:1d:54:77:39:e5:ec:92:6d:c7:fe:8d:48:e0:86:
                    a9:28:40:51:51:d1:86:32:82:a5:a8:28:88:0a:28:
                    fb:ea:a5:ca:32:12:f4:92:10:77:70:2d:2f:31:ce:
                    4b:b5:ef:31:60:d1:65:b3:d1:17:d8:68:c6:b9:5e:
                    f2:42:67:f2:39:20:7b:36:e7:9c:7d:f9:79:ee:dc:
                    84:31:26:27:42:25:60:75:6f:a3:ac:34:bd:9c:7d:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:18:29:57:B5:F4:4B:F3:43:8A:76:76:6D:38:C0:6F:03:18:72
            X509v3 Authority Key Identifier:
                keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:a0:33:e0:4a:98:46:b7:d8:46:ac:fb:d0:2d:93:cd:bb:
         41:7b:16:7d:e5:27:38:78:4e:0d:39:79:2f:07:f6:6a:76:09:
         88:84:18:70:69:38:68:26:93:09:99:d4:5d:c7:9f:55:c5:47:
         01:1a:f4:f5:64:82:1b:53:c4:f2:da:92:75:e4:56:bd:ae:a0:
         01:d9:1a:cd:24:cf:3c:57:c4:a5:07:7a:24:85:e6:c3:64:25:
         6d:67:4c:ef:82:68:29:6a:0e:6a:54:a8:a5:4c:63:84:d1:a4:
         35:b4:49:2e:d8:e4:b7:3a:91:f2:fd:66:7c:3f:8b:71:24:fa:
         1a:c1:2d:d8:9e:a9:8e:eb:35:78:c8:d9:12:5a:2e:74:c2:a6:
         c6:94:e5:c5:76:e1:1b:00:0b:f3:34:61:6c:1b:cb:ec:ee:3d:
         d7:57:d3:6c:81:ca:4a:28:91:46:5d:ed:51:41:ef:dc:3f:c1:
         30:50:81:17:0c:0f:48:6f:43:86:09:f6:28:47:9a:b2:39:a0:
         1b:25:1d:ab:48:e2:1d:67:47:58:43:f1:dd:cf:89:14:91:4c:
         eb:a6:61:c0:15:69:b6:8f:6d:69:bc:c3:d1:b8:94:51:87:28:
         33:d5:16:f1:da:79:24:f6:cb:8a:01:75:f2:0c:73:7c:d8:6e:
         6d:c7:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----