Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File:                     njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier:          BCqBZ5lLt5yT8CTpc9HbZeMtuGAveEVLvuQTE9roezA=
Subject key identifier:   4A:76:57:C3:E7:8C:5F:9B:F4:77:EB:F0:F8:FE:15:54:B8:76:E2:6D
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer:       /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial:       01962FAB76C6327AC4504CCA8D17B0F78C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number:          1219
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
                          2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: 6Qmrt02zZ23KUffzSsZQkI1lpFhbv3LYfnnqSofGnBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:c6:32:7a:c4:50:4c:ca:8d:17:b0:f7:8c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=4a7657c3e78c5f9bf477ebf0f8fe1554b876e26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:8a:23:b9:24:d8:eb:17:ed:73:ec:6e:a9:
                    68:55:65:2c:80:74:6b:bc:f0:8a:35:6d:ea:02:f5:
                    f2:94:dd:a2:23:e4:3d:38:0c:4a:e0:bf:6f:19:8f:
                    7d:72:12:27:61:d8:b5:07:62:d2:2c:90:18:57:e5:
                    3b:8c:4f:27:94:06:d2:0c:00:cc:fd:4c:bb:2f:e9:
                    49:db:d8:7b:dd:de:62:a8:5e:0b:dd:38:cc:b0:65:
                    7e:85:17:78:bd:b4:a7:3f:b3:6d:92:c4:ee:f8:1f:
                    fb:3f:24:2e:0a:e9:71:2d:8c:d9:be:d8:cc:8f:d4:
                    ac:5c:77:93:31:c2:53:5e:28:73:3a:7b:cc:f6:5e:
                    5f:ea:45:62:17:18:fa:6f:e9:d0:5a:4d:40:a4:14:
                    8a:d4:a3:d8:b8:89:5b:07:f9:c9:6e:c9:0f:59:57:
                    f5:0c:45:43:08:c6:2b:46:da:d8:b7:a8:b3:6e:0a:
                    d9:c9:52:d0:4b:6b:31:1c:d5:e4:78:f0:6c:df:a8:
                    f1:e1:22:78:b3:a0:ca:0f:d2:66:54:77:a7:3c:9e:
                    1a:5a:81:ca:4d:27:5c:70:d9:8b:ee:62:76:e5:f6:
                    15:bb:b9:cb:88:45:71:63:30:ec:27:92:9f:41:ec:
                    f2:95:81:c1:cc:79:07:94:1c:78:9a:29:6c:35:97:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:57:C3:E7:8C:5F:9B:F4:77:EB:F0:F8:FE:15:54:B8:76:E2:6D
            X509v3 Authority Key Identifier:
                keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:81:1b:80:89:0c:6f:ab:ed:da:31:21:0a:b3:83:52:c9:
         1b:ae:4e:a7:5f:ba:9f:db:07:d5:6d:61:91:9b:74:22:7b:62:
         01:40:ae:00:37:ea:fd:9f:ae:8c:06:3c:88:ef:f1:8e:5e:f0:
         b3:94:2f:55:93:91:3c:20:20:de:68:92:79:01:95:54:fe:43:
         dc:9a:3a:68:0e:63:36:ba:82:22:9f:d1:ec:ee:f0:38:a7:eb:
         b9:c0:6e:cf:37:6d:e0:fe:65:ef:0b:9a:0b:e0:4e:2b:de:86:
         af:28:6b:b2:b5:87:d1:72:09:3c:34:1c:0a:72:2d:16:08:5b:
         26:ba:b2:d4:2c:fd:90:06:1e:54:f4:bf:0f:35:a2:1b:c7:e3:
         8d:93:eb:41:23:07:e7:82:6f:21:74:d6:6d:82:c7:25:28:16:
         63:2a:32:a5:23:ca:76:5c:19:80:eb:fe:00:69:cd:97:29:a1:
         d8:95:9a:3c:50:3a:bd:0a:bd:fa:7a:6f:70:6b:1c:d1:2c:64:
         4f:3c:2e:8e:6f:24:7a:e1:21:0d:35:63:94:da:2d:96:24:c3:
         5b:ea:3c:3d:f9:6f:bb:89:51:c7:ef:19:87:72:c3:e6:50:df:
         0a:aa:77:25:00:3b:7b:30:95:94:43:42:7b:50:cd:ef:fa:92:
         1f:10:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----