Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
File:                     nSh1M866BkWhSM8QyMJ-qachoJ0.mft (raw, json)
Hash identifier:          BdIVRGR0W48AGX1MejkZgAR8thks4ktVRw1HuNzwsPk=
Subject key identifier:   95:57:13:1E:26:80:08:E8:D4:C3:C1:4E:0B:13:C4:2E:72:F6:73:40
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Certificate issuer:       /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial:       01962F067781549BA2D53290776B4998E9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: MEQtA-51-LVqFHEVZDRMjfjnudY.roa (hash: mP68hXGlyjMnNhpMDZaBlI/pFMVdjYCWoJ7Gpxv9o84=)
                          2: Re1CMq4a8GRTlVAhciRLdjmNzME.roa (hash: e1LlxuTfucQ1ynw/jUhK7unO/vlcuYPu64TBZ3UmBVk=)
                          3: nSh1M866BkWhSM8QyMJ-qachoJ0.crl (hash: bIgvhpW72qrnQ9lSNSCAj3U7l0Cl/9yvzMDyQse3aJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:81:54:9b:a2:d5:32:90:77:6b:49:98:e9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=9557131e268008e8d4c3c14e0b13c42e72f67340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:d6:ec:02:bd:01:0c:af:a2:8b:b2:39:5e:
                    05:60:95:72:82:51:fe:b2:ef:66:47:02:13:a7:e8:
                    cd:7c:89:6c:c8:d1:19:df:59:a3:9a:45:8c:8b:0b:
                    8c:58:e3:f4:3f:5d:c9:7a:ee:b0:cf:5f:7c:aa:59:
                    eb:15:41:bb:48:c7:e8:dd:5d:ae:33:3c:b1:c8:4b:
                    6b:5d:52:58:49:5c:ab:71:9c:82:28:96:e3:3a:c5:
                    1a:83:1f:59:95:91:6d:f9:c2:0b:07:36:7d:e3:9e:
                    fb:ce:04:42:01:e0:c3:01:8d:4a:04:cc:b3:ac:38:
                    15:08:86:f5:ee:9a:21:88:1c:78:44:2f:61:55:15:
                    e8:da:2b:ac:d7:55:df:76:d0:f6:1b:90:7c:b0:a6:
                    ca:62:36:be:97:65:23:03:ef:58:25:27:35:15:0f:
                    59:3a:22:f5:12:ae:f9:34:ff:5d:f0:16:41:d5:23:
                    56:3f:cb:17:c5:94:50:10:76:71:2a:0c:d7:81:00:
                    05:24:92:c2:fc:86:35:68:ed:f8:4b:03:a7:3f:41:
                    19:72:a2:22:d1:8a:26:42:80:9d:b7:65:db:95:f9:
                    d6:34:30:8b:06:5a:3a:4e:79:01:7f:fd:de:87:b9:
                    83:36:3e:1e:0f:1a:1b:a3:ba:89:67:6f:2e:99:13:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:13:1E:26:80:08:E8:D4:C3:C1:4E:0B:13:C4:2E:72:F6:73:40
            X509v3 Authority Key Identifier:
                keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:72:6b:8a:d5:2f:d3:6e:53:21:8f:d7:8f:b0:63:f0:f9:
         1e:40:1a:77:da:f7:b7:e1:30:66:fe:88:12:cd:19:b1:eb:85:
         a7:22:d4:9c:de:bf:70:df:3f:2b:12:be:29:eb:a6:d5:02:70:
         4e:61:4a:c3:86:86:bb:70:a7:04:a3:a6:a9:b7:66:f0:8e:69:
         56:a2:c0:bb:af:83:88:cb:d0:55:0b:aa:bf:10:b7:7b:57:c2:
         1a:20:81:6b:b9:5d:bc:5e:62:61:ca:6a:70:14:86:bc:19:08:
         cf:be:5e:1e:fa:ec:4c:26:55:2d:52:41:67:4a:e5:07:ef:fe:
         a1:1b:bc:b8:19:4e:11:e0:5c:1a:7d:f9:a3:5d:b4:df:40:a1:
         9d:33:0c:ca:97:30:92:fa:5c:6d:d4:6f:39:45:84:3b:06:9d:
         66:c2:77:bc:c8:85:e0:35:08:b8:9e:0b:e1:f3:12:81:7e:86:
         5e:8f:89:63:89:5e:e2:93:20:d3:57:96:ca:46:d0:4a:cc:a6:
         b3:de:e8:ca:9c:cb:c9:7b:8d:92:22:f7:2c:f6:25:06:e4:b7:
         3a:b4:12:92:58:a2:49:00:09:4a:c8:c8:e6:25:e1:3d:4e:04:
         7b:b2:1a:c5:67:1d:17:01:b8:96:30:ca:ad:73:93:b8:7a:53:
         29:1a:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----