Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          JGDJWnEgRzeDBvSp49ptwLdN40pQQsnebDqxm4kOP/4=
Subject key identifier:   6D:0E:D7:5F:05:53:04:2F:08:D5:70:3B:4F:88:BD:FE:00:E5:D0:29
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       01962F06D455FE7AF0A8FA0D8E5D184656B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
                          2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: W+2MujGQXqL1rmzsfq6umLpwrPke3HIRX7Fg2uGxZZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:55:fe:7a:f0:a8:fa:0d:8e:5d:18:46:56:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=6d0ed75f0553042f08d5703b4f88bdfe00e5d029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b7:d6:d1:8e:5b:ca:53:6e:34:39:43:45:3d:
                    c9:e2:1c:16:d4:5b:31:8a:fb:7a:18:14:e7:7f:0c:
                    a0:e1:68:3a:0e:b7:43:48:1d:75:bc:37:e4:25:b8:
                    78:87:93:28:f4:75:9a:e3:b7:90:d9:74:25:56:9f:
                    37:24:90:ee:d3:ce:73:8d:e0:b1:f0:3c:bf:da:97:
                    fa:52:4a:58:d9:db:0d:7b:e3:7f:5a:52:09:e5:c2:
                    71:00:49:ab:d6:af:4c:fa:df:92:c9:8c:33:22:a5:
                    c2:f7:4a:b7:dc:b2:df:fb:87:44:a1:9f:c6:0d:8b:
                    87:b9:c3:1f:a3:a5:1b:b8:83:c3:cf:7d:40:e4:31:
                    8e:bd:d7:28:15:67:76:d2:2b:61:d8:67:1a:0c:25:
                    f8:92:f6:83:01:75:b6:29:7f:ce:15:2e:71:3d:86:
                    8e:3e:2c:4d:df:b0:d4:1a:a2:75:83:78:f6:1a:1b:
                    00:59:36:9a:ca:30:3f:87:c4:c8:e0:7d:ff:70:9f:
                    37:24:0a:65:ac:03:00:c9:31:19:0f:db:9b:80:b9:
                    a0:60:a2:7c:a8:ec:6e:ee:de:00:f3:3e:c4:6e:42:
                    7f:7a:ea:a5:7d:c6:de:ad:38:a8:42:4f:52:9a:f6:
                    01:10:3a:28:67:0d:f9:f7:ee:b0:81:d2:8f:8c:e3:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:D7:5F:05:53:04:2F:08:D5:70:3B:4F:88:BD:FE:00:E5:D0:29
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0e:5c:bf:0b:00:6b:99:42:1f:c1:50:d9:a5:21:6a:65:e1:
         9f:40:5e:f8:b2:a9:41:88:de:d3:8b:82:54:f0:82:42:14:43:
         ca:7d:ba:63:07:f1:94:45:1d:19:ae:22:91:5a:eb:f1:08:5c:
         00:48:8b:c5:27:98:07:96:f9:b6:83:39:28:56:d9:92:1d:d4:
         80:a7:c6:d0:11:59:d0:0d:02:10:08:32:b4:9f:8f:b2:36:e1:
         08:3d:10:0e:4d:72:24:f2:93:94:01:c9:95:81:d3:f4:c2:97:
         a7:1a:c6:5b:e2:1d:09:af:3b:61:7a:92:7a:b4:76:33:aa:2d:
         90:7e:0b:68:21:e6:57:74:ff:64:5a:4d:d9:09:30:de:5b:a4:
         e9:1d:ff:77:2d:34:97:29:26:a0:11:1b:13:96:90:1f:21:61:
         6a:b6:20:56:88:d0:e7:cf:2c:da:b9:40:0b:79:3a:c0:27:59:
         31:1e:ba:77:98:a0:31:07:5b:8c:9f:95:69:11:f3:3a:81:61:
         23:7a:72:2b:8f:27:53:a5:f1:44:f9:df:4f:a2:71:6c:ea:e2:
         da:21:df:f6:38:e1:00:ce:66:ac:04:f1:58:93:f3:98:c9:60:
         20:a8:4c:57:82:b7:89:a4:93:fd:49:67:57:f8:e0:68:4c:d2:
         c5:3d:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----