Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File:                     mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier:          jcpHsBbGltopWdafSmIqlJqzkr0oU1/hGknGCDiNGQI=
Subject key identifier:   0B:85:FF:D8:B9:D4:15:3B:77:56:F6:61:CB:B8:FF:DB:21:30:88:8B
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer:       /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial:       01962F0671469F9876B78A2DFF4720701847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: YcxYXfNxQFqLv5YIu17csqhTAn1wkZSxgtlLGF6Jflk=)
                          2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:46:9f:98:76:b7:8a:2d:ff:47:20:70:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=0b85ffd8b9d4153b7756f661cbb8ffdb2130888b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fc:3e:f2:fe:19:b7:1e:ce:17:0c:1e:08:48:
                    5b:06:d4:9a:02:77:65:ee:98:0f:fe:e1:da:db:ee:
                    1a:9e:fb:29:6a:67:b7:8a:a2:00:1f:90:7f:5f:f8:
                    55:81:98:a1:c0:0c:d7:32:cd:2d:8f:b3:a0:32:e0:
                    76:3b:dd:65:d6:8c:65:f5:65:ea:c4:9d:87:b0:df:
                    e8:c4:1b:ea:7d:96:5b:62:64:cd:95:db:5f:ab:f5:
                    1a:d1:eb:c4:c0:22:74:0c:35:ab:a8:f1:f1:27:95:
                    56:09:96:f2:2f:7e:fe:c7:03:6a:53:e3:b0:88:95:
                    de:c0:08:e0:fc:92:67:5b:a1:62:e8:94:e4:97:58:
                    35:55:72:21:25:61:7b:a7:40:29:76:6b:2b:ed:f0:
                    84:48:b3:09:b5:45:18:61:4f:5a:0c:31:f0:26:69:
                    6c:b4:14:51:58:71:89:d7:43:38:b5:cb:55:18:a2:
                    f0:8a:14:bf:64:70:57:c9:62:bc:24:28:24:34:9c:
                    a4:6b:41:8a:8d:8f:f3:8e:70:5a:98:48:1f:8e:5f:
                    c0:51:66:43:b6:60:19:f7:b6:0f:02:82:7d:6b:25:
                    79:1f:e6:71:b3:5e:aa:79:47:22:bf:c2:47:89:40:
                    8a:c9:92:cf:ad:18:bb:19:83:a9:45:f4:e1:9f:d7:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:FF:D8:B9:D4:15:3B:77:56:F6:61:CB:B8:FF:DB:21:30:88:8B
            X509v3 Authority Key Identifier:
                keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:5c:d6:78:6d:4c:fa:71:b8:cd:b3:79:33:57:72:8f:94:
         a4:51:4f:c7:8b:b7:57:38:ab:7f:ae:23:33:db:ec:70:f2:1c:
         d5:44:6f:d8:43:21:a8:59:e0:92:08:8d:2c:0a:ac:2f:c6:ac:
         d3:15:2a:1b:34:fb:b5:3c:de:f4:53:87:e9:71:01:04:41:19:
         90:8c:19:75:84:1a:23:8d:ed:09:c5:2b:29:83:f7:a7:48:6c:
         34:d9:b9:b3:9a:52:00:b7:51:57:97:7d:ec:49:3b:93:ff:05:
         89:e4:97:f2:49:97:81:a2:c7:26:a0:e4:ea:a2:9e:70:d4:80:
         03:6a:df:3b:ea:e3:08:cc:66:6a:74:52:ab:59:c2:d3:8d:61:
         2a:6f:7c:b0:e3:ce:b4:9e:e5:3c:98:79:ae:41:9f:0d:d9:d0:
         c0:69:40:4d:90:64:55:b4:7c:93:b9:00:b6:63:54:bd:97:78:
         b3:22:8a:fd:98:51:c0:5b:b4:28:9a:58:66:1c:4f:1f:c9:5b:
         3f:de:5a:28:b4:c2:02:d1:4b:2f:2e:43:01:97:be:fa:90:14:
         d2:41:ad:ce:68:77:b4:2b:71:cc:5b:40:73:19:38:6e:25:79:
         22:6e:4c:6a:f9:43:d1:11:b6:e7:96:94:c2:43:2d:03:2b:55:
         41:c1:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----