Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          rqvoIVlBbE5T0mG5ChVZe2QYfke5lqyUzMsVKCjIPKY=
Subject key identifier:   55:0D:B3:69:28:67:A5:40:40:61:93:4D:9F:60:22:33:16:BA:EB:33
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       01962F3DF08AFBB4F7CFF47698D5217BA417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          0393
Signing time:             Sun 13 Apr 2025 13:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:50 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: pVcUqs/hFv2aVaZFk0D9IxHjTPA9Jq9buxH1nuNVprU=)
                          2: b7x6ZKsbLCwY_tMdnPo9QIIdiU8.roa (hash: ZFZsgVw2f50KESlxtMB2pklQZAw0SjfBRhWTVivxDpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f0:8a:fb:b4:f7:cf:f4:76:98:d5:21:7b:a4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Apr 13 13:01:50 2025 GMT
            Not After : Apr 14 13:01:50 2025 GMT
        Subject: CN=550db3692867a5404061934d9f60223316baeb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:95:ce:f0:5c:cf:27:03:21:e3:42:2b:fc:
                    fe:11:06:e7:19:05:88:3c:b5:ed:d6:f8:a7:f4:4b:
                    9a:e8:69:be:fd:ca:2b:11:97:18:8d:58:8a:e9:4f:
                    21:2c:2b:81:b8:61:b3:8d:74:af:14:3b:f5:1a:86:
                    ce:34:1e:68:cf:41:3a:2f:89:0e:c4:03:05:b8:9f:
                    92:a6:68:73:7b:b3:00:0d:dd:b3:6b:39:48:b3:06:
                    cd:f6:0e:df:07:7e:33:14:1a:06:e0:1a:04:60:e4:
                    76:c6:c9:d3:75:e2:91:ab:05:c0:0f:c7:47:d7:56:
                    79:6f:98:cf:4f:ce:9d:8c:f3:3e:ed:95:4a:72:78:
                    2f:e5:85:94:b9:8a:da:aa:9a:f0:7d:90:61:2a:47:
                    33:2f:34:cd:53:06:50:5c:4f:d7:8d:32:c7:a4:05:
                    88:0e:22:89:b3:ca:93:1b:1f:a1:28:a5:0b:e8:fa:
                    52:ef:ae:26:50:eb:ee:5a:08:de:e4:11:e9:b3:07:
                    74:c9:12:29:38:c9:a1:48:29:5b:a3:ed:55:b8:75:
                    1d:97:4b:47:3a:04:22:6e:7d:77:a5:78:95:ab:9c:
                    7e:8a:c6:a8:43:3a:df:1e:85:65:c4:38:d4:06:74:
                    93:8c:54:f5:1c:ed:3b:6a:09:5b:85:f7:df:ee:cd:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:B3:69:28:67:A5:40:40:61:93:4D:9F:60:22:33:16:BA:EB:33
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:7f:59:f3:e6:89:77:2b:a2:4f:2f:27:23:47:7d:5f:67:
         75:57:96:72:0a:50:67:a6:cb:11:7d:01:bb:26:fc:ba:d9:a2:
         e2:4b:52:93:90:df:a4:c3:15:f7:2b:61:ff:d2:65:3a:cf:c7:
         64:6b:0c:45:81:2e:66:0f:4b:82:0c:62:df:3c:2b:aa:18:2c:
         05:6d:11:04:cb:21:81:e0:fc:ea:92:48:cb:9d:5a:37:d8:0f:
         15:9b:76:af:78:5e:31:5c:ea:c5:9b:dd:b2:f1:ba:18:3d:63:
         de:d4:6e:a8:e6:1a:da:fb:5e:a3:3b:71:0b:a9:95:5e:c8:48:
         d1:df:ad:66:31:30:2e:93:6c:83:a6:95:5e:3d:1e:34:5a:0f:
         d5:70:76:4a:cd:ca:75:d9:d9:e5:bb:a3:ce:4e:d2:2c:98:a4:
         5d:5d:85:03:7e:ae:41:13:49:b6:6e:14:9f:69:55:c7:29:f8:
         00:62:b8:41:5f:f4:d5:b6:fd:3b:2a:c5:4f:3a:6e:95:85:86:
         b6:4b:58:43:8f:b2:22:d6:f2:20:54:16:9c:a5:eb:92:3f:18:
         50:cf:bc:c4:0e:05:5e:12:9c:43:89:a7:ce:20:5b:51:0d:2f:
         c6:99:14:0f:46:83:a5:ab:16:ae:07:38:77:85:88:d0:dc:0a:
         a3:f9:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----