Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          aWszSw9WqCb43qMlxMrof/k93/vFiD1SFqNSIo5S9fw=
Subject key identifier:   C5:7D:E9:71:D0:81:42:FF:88:4B:DB:5C:C3:A2:8D:A7:5B:13:0E:ED
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       01962F073E19C51D24D07AB987E670979B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          0A9F
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=)
                          2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=)
                          3: OfxRKdN2bPZI0fvyGrpUm_OCPQs.roa (hash: lVQukuR8pvFzQlCkS5KRF6YO+By1WT+Hs0uHk5OATm0=)
                          4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=)
                          5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=)
                          6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: 0YvBtutvGYkqHWIMpEfTcLxQeCJrxFLhUVslEc4LLlQ=)
                          7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:19:c5:1d:24:d0:7a:b9:87:e6:70:97:9b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=c57de971d08142ff884bdb5cc3a28da75b130eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:34:75:a1:2d:aa:47:f9:68:d8:de:93:44:
                    81:09:57:05:6e:ef:8b:31:bb:d4:90:af:be:8f:18:
                    8a:9d:be:f9:44:8d:e1:8b:8f:f9:88:d3:3e:bf:5f:
                    48:34:58:08:41:96:37:29:82:3e:4a:04:6b:90:50:
                    c9:16:3a:82:c2:d7:e3:af:06:27:16:a0:22:0e:74:
                    36:86:e4:ad:43:21:ee:6f:70:4b:de:62:6c:24:93:
                    86:76:38:b6:c9:6c:0c:f6:a4:42:5d:eb:78:01:15:
                    33:ad:66:5b:82:5a:e9:43:3f:37:a2:a3:b0:cc:25:
                    d8:f9:c1:14:0f:ff:18:b3:0e:f7:77:9f:4d:3b:be:
                    a2:c5:c9:55:d6:ff:7e:03:53:72:fb:28:1d:54:2a:
                    53:4b:bd:67:06:cf:a9:e8:a7:f7:33:db:b8:6f:19:
                    05:90:ba:a4:4d:6e:eb:5a:3d:44:87:3d:6a:84:da:
                    99:9e:09:7c:08:c7:45:5a:76:05:df:8c:ac:29:27:
                    71:2b:50:a4:b4:36:09:b6:9c:d0:07:6b:5e:67:76:
                    68:d6:cb:3c:75:6d:2e:76:b1:26:b5:cf:f6:50:19:
                    3c:ad:12:32:7a:e5:9f:a0:0f:64:f8:d1:3a:3b:85:
                    9e:f2:2e:39:69:aa:4b:f4:ce:0d:cd:99:41:37:a2:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7D:E9:71:D0:81:42:FF:88:4B:DB:5C:C3:A2:8D:A7:5B:13:0E:ED
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:89:17:13:44:12:b5:71:72:ef:03:d6:29:93:14:f3:cf:
         c5:36:68:29:6e:00:22:8a:b1:ff:01:f6:6e:72:59:38:1d:a9:
         85:e3:7d:54:93:a2:91:41:b9:7a:73:f8:33:67:8e:1d:d1:75:
         b7:e2:f0:ea:01:1c:15:7c:ee:6d:db:6c:36:23:f2:34:5b:ff:
         3d:71:e7:88:e2:3c:39:98:52:e6:e2:14:2f:3a:00:e8:10:2d:
         11:a5:af:54:8c:2a:95:ec:a7:c6:2c:50:94:8f:f4:02:96:21:
         a2:a4:7d:fb:2c:bf:c7:d1:df:59:e3:03:a0:5e:50:65:73:d2:
         7f:f0:74:9b:0d:35:85:0d:af:1d:c7:a0:c3:b5:63:8b:86:f3:
         d2:d8:3e:2c:af:c1:fd:78:dd:93:66:62:da:41:2b:70:d1:04:
         8a:cb:97:e2:73:76:35:0c:ea:96:e4:5c:0b:9f:0f:29:5a:d7:
         e6:5f:32:6f:f1:63:53:a7:c2:7d:57:7c:20:da:ab:3f:05:ca:
         61:34:4e:2b:51:d5:65:7e:8b:ff:80:d6:1b:40:03:e6:ae:da:
         df:3d:1f:cc:d5:77:3d:14:df:a4:3f:5b:ab:66:60:f0:80:a0:
         19:a2:ae:46:e2:b2:a5:30:62:99:d0:99:c4:b0:d9:93:09:68:
         8d:f4:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----