Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File:                     nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier:          /jz5Ks9lm2E8ZUvIuAJyDlpYymlvtBWtAnzjRCsbNms=
Subject key identifier:   52:63:8C:BA:14:95:63:AD:9D:96:D9:B9:E5:14:A3:2A:01:D3:20:38
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer:       /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial:       01962FAB9A10CAD1C93A7FBC96482D6B9BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=)
                          2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: UMtH7ZzbdoBV7D6ztN4sKvvrBUWP95zYzELElNdgdFE=)
                          3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9a:10:ca:d1:c9:3a:7f:bc:96:48:2d:6b:9b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=52638cba149563ad9d96d9b9e514a32a01d32038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:9d:6b:1d:84:ff:f5:4b:db:fd:7f:c3:2f:
                    1e:68:93:08:f5:44:79:9f:8d:73:5e:2a:01:a2:c2:
                    82:1f:a9:c6:74:64:c7:7e:ff:93:a8:cf:5b:b8:c3:
                    bf:05:c0:cc:ae:7f:26:f8:6e:18:1d:ac:be:30:20:
                    2b:c4:01:ab:68:1d:ee:7f:be:ae:15:29:f2:17:c9:
                    ba:17:5a:1b:ae:89:c5:e2:a6:ab:3b:dd:98:9f:d6:
                    eb:33:b4:3a:3a:86:0d:3e:b0:07:d8:0c:ad:18:b5:
                    85:16:b4:4a:45:64:b1:3b:46:a0:b2:9c:7e:be:83:
                    64:55:25:b8:ea:3e:bd:18:8f:8f:3a:aa:ee:e0:f2:
                    d6:c8:f2:65:7b:6d:cb:aa:3d:f9:1e:96:ad:a5:8e:
                    d7:c5:ef:47:bc:e8:07:6c:31:4e:e5:b5:86:3c:ff:
                    8c:66:0a:e4:36:00:98:63:6f:e2:ab:aa:45:83:64:
                    80:68:84:2e:1b:4a:74:52:5a:56:6d:83:9f:e7:08:
                    84:07:3a:19:a4:a4:a9:8a:21:4d:49:06:73:f0:11:
                    bf:3f:2b:ad:95:c8:34:90:e1:7e:e9:1e:5c:3e:0f:
                    a0:2c:9d:8c:df:57:d8:24:6d:8c:35:6f:f8:3e:ab:
                    97:29:59:da:84:e9:f2:a5:36:cc:64:5a:78:de:dc:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:8C:BA:14:95:63:AD:9D:96:D9:B9:E5:14:A3:2A:01:D3:20:38
            X509v3 Authority Key Identifier:
                keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:bc:04:dc:52:c1:e3:c3:ab:f1:86:f9:2c:b8:71:04:0f:
         e9:71:86:aa:d9:76:d9:58:14:39:b9:ac:c6:16:96:6e:a6:be:
         67:58:d8:4b:2b:69:6f:83:46:dc:ab:3d:cb:a8:2a:2f:bf:70:
         a0:49:9c:ef:24:15:4d:04:c5:03:7e:5c:2e:dc:cd:1c:ff:a8:
         e1:8e:d1:c1:2c:d3:29:d9:10:14:27:56:24:f8:14:22:2c:c7:
         b9:f1:d7:cf:52:1c:24:3a:17:60:ae:d6:c2:3e:ce:3f:08:ac:
         56:74:64:6d:9f:8a:57:f1:33:4b:d6:55:e6:f4:ea:0f:41:18:
         aa:bc:c8:c6:60:50:15:b1:11:93:98:17:8f:86:64:e9:25:c4:
         bf:63:fd:f6:f5:d3:b7:3f:29:8e:29:34:58:c3:4d:55:22:26:
         f9:bf:8e:6e:f8:a0:34:4b:32:66:f7:f9:62:db:4b:22:7c:8b:
         87:d1:db:e4:79:b1:08:29:53:5a:1d:1c:8b:09:1f:d9:37:19:
         ec:9e:d6:92:0e:bd:f1:18:ad:01:a6:ed:7e:60:5a:26:c7:e8:
         35:f1:32:f2:5c:0b:0d:af:30:9b:2b:52:92:3b:6c:19:c1:61:
         d0:49:a4:36:21:6f:40:85:8c:5e:bd:67:7a:e4:96:af:e7:00:
         bd:b3:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----