Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File:                     nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier:          ahvVlEMacBQ1jxmBX6s1n2wyG8dF9/kQAW6g6Ot24zg=
Subject key identifier:   76:0D:0B:03:D1:2D:CA:8E:D9:C7:4E:CB:75:F0:CE:43:8E:69:9F:4B
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer:       /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial:       01962F064A942F060881B9A7B69998273350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
                          2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: GyB5rHt/aFVWFS9bwphfP+S8prCtYvDogIBiUEj0U1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4a:94:2f:06:08:81:b9:a7:b6:99:98:27:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=760d0b03d12dca8ed9c74ecb75f0ce438e699f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:be:26:91:b4:e5:8b:44:b8:93:e9:6c:33:
                    30:c7:f1:27:2f:bb:bc:10:a3:b4:ed:70:c1:68:20:
                    b0:68:dc:8e:c3:19:2e:f2:54:0e:7a:e6:d1:66:4d:
                    7a:72:77:ac:a0:57:3c:bc:50:94:e1:7b:8a:a8:a2:
                    e9:d9:3b:72:ba:fd:ae:33:10:91:b4:0d:b0:d3:ed:
                    a9:6d:5f:65:80:7a:a5:48:cd:82:4e:41:d9:7d:22:
                    a9:0e:09:1e:a2:20:00:56:8c:e8:21:15:77:4e:19:
                    c2:ff:27:78:2e:9a:76:fd:90:c2:53:f9:d0:6d:d6:
                    42:d5:99:04:b2:ec:e3:03:5e:49:1a:d3:b6:54:4a:
                    f0:3e:47:12:81:f7:7e:01:8c:a2:b6:ff:2c:a5:f2:
                    95:5d:b8:50:40:44:2c:19:0e:28:07:e7:db:de:7f:
                    dd:77:33:a7:bf:89:8a:5f:dc:68:88:0e:fd:1c:09:
                    ea:44:59:8a:d1:e1:0a:4e:d3:e0:81:1e:eb:31:b1:
                    14:b2:86:ad:e9:20:af:bc:e0:59:84:0f:6d:43:17:
                    84:9c:8d:ee:36:88:99:a6:c2:13:dc:7e:35:21:11:
                    93:ab:19:7c:ed:f2:bf:85:07:89:e7:eb:7d:4b:87:
                    3c:9d:06:85:12:66:2b:eb:5e:e5:e0:51:0d:cc:09:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0D:0B:03:D1:2D:CA:8E:D9:C7:4E:CB:75:F0:CE:43:8E:69:9F:4B
            X509v3 Authority Key Identifier:
                keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:4c:32:bd:62:e3:b8:89:db:17:5d:87:86:91:b9:00:5b:
         f4:f5:f3:33:e5:af:bb:c6:0b:09:59:c0:a0:59:55:89:37:37:
         77:ca:6d:fc:b1:08:2d:61:99:9a:3d:26:f4:42:c8:f3:a6:17:
         f5:44:02:fb:f6:f7:d0:45:89:9c:22:90:86:68:45:65:d2:14:
         fd:c2:34:3f:27:52:29:8e:f9:ff:d4:19:72:99:2f:48:dc:27:
         ea:e4:d1:8e:21:c6:c2:ad:38:8f:80:f6:40:15:31:9d:32:31:
         9c:04:89:37:c2:a5:46:65:30:30:ea:c0:b4:da:c7:73:6a:40:
         2b:d5:68:71:98:b0:0a:84:fd:71:9d:bb:d0:1b:28:e7:06:7b:
         52:b6:be:b3:c1:6f:19:f2:f8:22:52:e2:41:53:03:0e:0f:a2:
         fb:6e:cc:e6:62:b0:02:c9:d0:79:9c:14:b5:f8:86:b6:03:ff:
         db:f7:e8:6d:96:80:57:43:3a:5e:7c:ab:ae:35:71:d9:6c:0f:
         3e:37:dd:8f:6c:90:d4:1f:d0:09:ca:1e:4b:45:89:19:8c:e6:
         ef:fd:57:b2:ec:5b:61:4f:27:2b:96:d3:fd:e8:16:cf:8b:38:
         92:22:15:5b:24:25:3b:a1:eb:fa:ed:b9:20:f3:08:d9:91:cc:
         e8:6f:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----