Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File:                     ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier:          miIdq20mnY8+WpR2pljj1iDDfdPaIwNZGQWARW1APuM=
Subject key identifier:   07:27:C5:45:5F:CE:1C:88:80:C9:6B:30:E2:42:7A:87:B7:97:C7:6E
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer:       /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial:       01962F0716458B9BD255B561089045FA52B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number:          0E14
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
                          2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
                          3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
                          4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
                          5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
                          6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
                          7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
                          8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
                          9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: s4sLgMwuVlPpffG/Ykg6YyctHRvQk1b6rL+3SftdBqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:45:8b:9b:d2:55:b5:61:08:90:45:fa:52:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=0727c5455fce1c8880c96b30e2427a87b797c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:6f:0d:1b:33:f3:10:d7:f0:f6:14:42:26:
                    11:76:81:7e:50:70:c7:5e:7b:c4:86:90:2b:48:9b:
                    56:e8:d8:42:64:48:c8:39:42:13:42:a3:4b:33:ce:
                    ea:b9:80:84:38:58:92:3a:41:62:67:25:ea:c6:0c:
                    1b:15:55:d6:53:25:50:10:08:d1:83:6c:44:db:d1:
                    b1:a6:08:8b:92:49:c0:d8:b7:03:c7:0e:f6:71:3d:
                    d6:dd:cb:69:1d:7b:b8:e3:8a:dc:89:03:33:f5:96:
                    dd:c6:55:c9:b2:0b:54:dd:1c:a0:6d:d5:27:c2:72:
                    4e:66:e2:d0:da:75:5d:65:0f:1b:a7:42:53:80:7c:
                    c3:aa:dc:fb:78:e0:ba:75:f1:ba:80:0f:80:87:41:
                    ec:8d:57:7f:ca:07:26:82:a0:22:59:dc:d6:4e:50:
                    3a:4f:99:af:9e:68:9a:2b:3e:46:e7:3a:f5:cf:7b:
                    28:e7:cd:0b:51:a0:e4:7c:dc:83:95:34:e3:ce:98:
                    d1:ad:03:b4:0d:ff:0c:c4:76:e3:40:9a:b2:b8:6b:
                    0f:5f:bb:77:93:03:7b:e0:c3:c5:14:fd:67:1a:c4:
                    5e:9a:e8:6c:e5:af:2b:da:dd:6b:db:fa:4e:17:9f:
                    bc:df:58:76:1e:d8:c9:50:95:d8:6a:ca:c7:9b:52:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:27:C5:45:5F:CE:1C:88:80:C9:6B:30:E2:42:7A:87:B7:97:C7:6E
            X509v3 Authority Key Identifier:
                keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:fd:1d:59:36:42:2e:bf:bd:84:b0:ee:92:1e:c3:9c:bd:
         5d:6f:e7:92:bc:43:6b:b8:5c:a6:29:e4:76:69:e2:1b:3b:d6:
         00:d9:03:d5:3b:dd:9a:33:78:f0:53:fb:2d:98:a5:4b:69:2e:
         b6:9b:11:eb:ad:50:6c:17:98:42:2d:1c:be:cc:91:1f:44:3b:
         50:4b:a6:29:aa:f0:0c:0f:ff:d0:f5:6c:ea:d6:b2:8a:c9:79:
         5c:a6:45:9f:4a:ed:53:d2:38:6f:b3:86:4c:b5:c5:3f:38:3f:
         42:b3:f1:fd:0b:11:9c:fe:9c:b0:41:b1:f8:d5:7d:2c:e9:75:
         9d:c7:26:9d:59:67:f5:5c:8d:21:58:6f:81:ed:d6:6a:a7:1d:
         53:83:9c:ba:bb:21:ef:4d:d9:b0:3f:54:12:e9:3f:1a:9a:f9:
         28:9c:f9:4f:73:ec:a9:04:22:35:22:8b:73:64:09:4d:c3:c2:
         78:16:99:e7:45:09:36:a6:22:7e:92:b9:0c:a8:18:ca:de:ce:
         91:e3:c7:70:a2:3e:55:2f:55:d0:d9:67:3b:01:cb:86:04:1e:
         e6:c2:3e:5d:bf:a9:e1:75:04:88:fa:17:5e:1d:78:76:ed:9d:
         06:ba:c4:ca:01:64:f1:ac:9f:87:09:bc:c0:3b:df:8e:f4:71:
         fb:bc:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----