Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File:                     nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier:          I9eVn/RJd0tnAcF+EO2XJFE4hlDLqZ9U8ZJzsziGbQI=
Subject key identifier:   15:84:D0:1F:70:36:6C:0B:4D:D6:41:24:17:33:9B:1D:A1:99:DC:CE
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer:       /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial:       01962E61CCC4DC720D17BA1DBDD3E55E90C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
                          2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: tnYi2VVgjzyCf6LkvdmEX8z2HVNYxrE6Yn8CVFq7+Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:c4:dc:72:0d:17:ba:1d:bd:d3:e5:5e:90:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=1584d01f70366c0b4dd6412417339b1da199dcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:2a:8f:75:d3:ea:97:8c:cc:8c:7b:a2:07:
                    89:1d:35:05:1c:cf:c0:e4:7f:8d:00:05:58:52:ee:
                    09:0a:29:73:da:50:d2:de:c1:7a:d3:8a:94:ac:92:
                    f4:68:59:fe:66:be:b4:03:02:8b:9e:ce:34:03:5c:
                    f5:ca:79:d3:d9:b8:de:63:9e:60:7d:51:de:8d:13:
                    c6:21:46:13:a1:9f:31:ca:21:6c:37:e4:26:04:c3:
                    7c:47:4c:64:4a:8d:a8:c1:49:04:6f:08:81:cb:7f:
                    df:3e:ca:93:20:c0:51:ba:9d:41:c2:a5:d6:b3:d4:
                    40:ad:d6:00:66:d5:c1:85:15:6c:b2:6d:f2:b1:e2:
                    95:44:53:66:4c:60:fc:da:f5:8e:76:73:20:7f:19:
                    cb:69:ce:93:aa:a8:f0:a1:76:fd:ce:0c:08:47:a9:
                    71:c9:39:8d:92:f8:6a:b7:db:22:68:3d:45:fd:c8:
                    89:a4:03:06:87:d4:10:be:22:47:15:b7:56:12:55:
                    70:07:87:4b:60:9a:0a:72:5a:d6:7c:df:90:ee:af:
                    ec:68:83:1f:2a:64:4a:94:c1:4d:81:ae:40:e8:1a:
                    bf:cf:cd:6c:84:29:b3:d2:6f:e3:f4:63:c5:c1:90:
                    07:e1:54:b0:3c:e9:cb:85:c1:d4:8d:31:8e:bd:e2:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:D0:1F:70:36:6C:0B:4D:D6:41:24:17:33:9B:1D:A1:99:DC:CE
            X509v3 Authority Key Identifier:
                keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:ab:5f:69:e1:fe:2f:9a:76:88:17:a7:f7:14:d7:63:88:
         b3:88:7e:03:6f:56:14:2b:e5:8f:92:d0:7d:9d:9c:e7:6d:40:
         ec:62:69:b1:33:8d:a6:59:24:76:d1:3c:6c:16:62:fd:fc:61:
         37:55:b4:87:13:cb:fe:a4:d1:0a:f1:f2:d2:fc:c8:22:87:21:
         55:d2:bf:fb:91:79:43:fe:a8:4c:5d:c9:bb:82:a7:b8:b2:26:
         8d:3a:fd:ca:52:f7:37:00:20:ce:c4:5d:9e:3b:15:a5:93:b8:
         99:8b:11:d4:e8:a4:9c:8c:cd:46:ba:f6:c5:f6:fe:08:79:da:
         27:37:d4:46:d1:63:32:79:4f:69:21:94:a5:df:10:11:7e:a6:
         03:e3:39:ec:b3:9b:71:16:da:50:d0:66:71:cf:f5:6b:1c:dc:
         7a:b3:d5:7a:f3:d5:11:f8:18:bc:e0:87:61:c6:97:91:ce:90:
         ef:8c:12:57:0e:e8:5b:d2:07:fb:b9:fb:b5:27:df:3b:f8:36:
         e9:44:36:ee:6b:9e:6f:0f:1b:1d:7f:a9:c9:d0:20:ea:c3:ec:
         8e:51:17:d2:20:72:3d:b3:9f:47:82:f8:bf:d9:39:72:a8:6c:
         2f:6f:67:4a:87:38:a2:ab:46:ef:89:59:7d:da:fd:6e:33:be:
         41:d0:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----