Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File:                     nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier:          9m7LLpKskj/ADLcEeEQNfGAYhww9om3kAeWjlbYfKRE=
Subject key identifier:   EE:40:BB:98:CA:34:01:C8:A0:C9:7D:F3:06:16:12:62:1B:B8:22:8B
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer:       /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial:       01962E2B34D2907DFAD08D3DE2989DCC0CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number:          13E0
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
                          2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
                          3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: NUvbMqCylxkZ1rP43o4BwlpXYZ5Qh7R5ED4weIavJ8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:d2:90:7d:fa:d0:8d:3d:e2:98:9d:cc:0c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=ee40bb98ca3401c8a0c97df3061612621bb8228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:d3:a3:54:7a:44:38:25:6a:e6:27:da:56:
                    0e:19:ed:c6:1f:1b:3f:4c:6c:84:24:f0:70:7c:30:
                    e4:6c:40:00:97:ef:8b:2f:48:b7:35:c2:d6:d0:c3:
                    ab:b2:b5:5b:54:e2:b7:1c:5e:8c:79:f4:24:59:33:
                    e7:e1:16:45:f0:6e:6d:f8:64:ce:04:56:a6:a0:86:
                    dd:2d:55:46:2f:09:fa:36:e3:8b:35:35:23:00:47:
                    5b:2b:27:84:03:ab:4b:bd:e1:44:6b:53:fc:43:82:
                    23:dd:07:3e:f7:4b:b3:7f:c6:f1:ee:df:73:ea:8e:
                    af:70:c2:93:c4:fd:a8:08:8c:92:ea:f3:ea:0e:a4:
                    e8:1d:a3:1d:0d:6f:4a:89:59:e5:0f:69:19:f0:f3:
                    85:d3:12:e8:54:46:b0:bd:3f:08:35:d9:28:29:1c:
                    66:8d:b9:f7:a2:74:08:c5:2c:87:76:74:b7:e9:ab:
                    9f:d6:3c:fd:9d:e6:20:c6:5f:6f:e6:47:81:00:e9:
                    c8:a4:45:cf:01:d2:20:95:f0:54:9d:79:c8:2e:45:
                    dc:05:d5:1a:e0:ce:55:9a:fb:6b:8f:26:61:f9:23:
                    d2:b2:a2:91:e6:92:7c:f3:0a:b3:09:1c:9e:78:29:
                    2e:6b:d7:64:2d:ee:ec:98:27:8f:80:82:88:59:14:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:40:BB:98:CA:34:01:C8:A0:C9:7D:F3:06:16:12:62:1B:B8:22:8B
            X509v3 Authority Key Identifier:
                keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:8c:6c:59:61:4f:a6:a9:34:14:6f:5a:01:bd:1d:d8:84:
         8a:5e:68:7a:cc:ac:0c:6c:c9:3a:33:7a:1c:a9:38:96:63:cc:
         7b:56:2e:8c:7a:80:6c:34:0f:c0:7c:db:7e:7b:c1:e4:e8:51:
         fd:51:83:ef:3f:60:3c:3d:b6:72:9c:85:c9:1d:68:f2:c0:8d:
         17:1a:32:ac:e6:d8:92:33:81:82:17:de:a5:c1:62:48:a6:13:
         0e:2a:44:c0:f4:05:05:6d:5f:e7:49:54:35:0d:da:6a:4d:de:
         17:cd:bc:35:c3:e6:e7:28:78:35:cc:1c:23:23:73:eb:0c:c4:
         e0:ed:2e:92:70:04:5e:19:f6:29:89:ba:da:b4:4a:0e:02:43:
         6c:fb:ef:ae:0b:95:aa:08:c6:5d:8f:8d:3d:e1:71:5c:8b:5b:
         2c:25:b7:bc:cb:3c:41:ea:a5:3c:dd:1e:6a:bb:d8:41:86:7f:
         ec:d7:82:5a:c6:06:29:39:1c:6c:84:8d:1d:f4:48:9f:00:b5:
         03:86:d0:84:75:fa:98:a4:e8:ee:eb:0e:8e:0f:d5:6d:08:06:
         e9:c2:6d:cf:d6:9e:20:dd:f5:77:d8:b3:c9:29:8c:34:05:f2:
         b7:03:63:f4:5e:80:f9:30:1d:26:bb:76:7b:e6:e3:a5:8c:71:
         c5:84:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----