Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File:                     nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier:          0ig50TVjVGmuTXMIoGaqa1YV6in2p5Nw6/J4Z/GgyEU=
Subject key identifier:   58:7A:B6:A3:2A:18:49:39:B0:38:54:0F:85:7E:9E:01:27:A1:13:56
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer:       /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial:       01962DF3DBC26F78121ABAA75D48155A408A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number:          0F8B
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
                          2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: pLM/t31o2J2Z0mlHFr9vl1b2xEEgplzu06f1LAjYL2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:db:c2:6f:78:12:1a:ba:a7:5d:48:15:5a:40:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=587ab6a32a184939b038540f857e9e0127a11356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:4a:13:40:68:6b:e4:d2:07:cf:02:8c:c3:
                    25:c0:98:12:26:1b:3b:9e:a0:2a:eb:4a:60:f2:d5:
                    62:ab:8c:81:72:d2:98:33:6c:a5:32:49:04:5c:c6:
                    ca:5a:d6:f9:f3:33:7b:a6:35:79:ee:0f:c6:67:d2:
                    5f:08:62:47:eb:77:05:f7:77:34:5c:de:12:54:4d:
                    7b:9c:40:fa:fc:2d:9c:1d:04:6f:4e:d2:55:7d:a1:
                    78:69:df:e5:bd:71:33:8a:80:f4:27:d6:bc:1c:57:
                    23:b2:0c:7c:6e:07:6a:35:d7:ed:ed:e9:25:3c:98:
                    c6:23:0b:02:45:22:fa:c4:2c:9c:b7:a3:23:7f:16:
                    0c:34:0d:5c:91:45:84:c6:3a:49:c3:ca:68:2f:03:
                    c0:a8:a0:e0:95:e4:b6:fd:03:f3:c3:7d:3e:1f:39:
                    15:f9:84:43:7d:7b:5c:1a:a2:49:99:70:07:97:ae:
                    56:94:6a:37:05:d3:fd:df:92:11:3b:8e:f5:04:41:
                    b8:0c:7d:c2:a8:60:22:0d:a0:66:32:59:d1:a2:91:
                    0d:ea:7c:9c:2f:28:66:02:4c:b5:ad:15:78:93:e1:
                    1e:8e:d6:81:95:f3:be:a0:08:03:3a:7b:7c:5d:5f:
                    18:7d:71:58:8c:d0:a7:99:fe:aa:5f:ea:a5:3f:35:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:B6:A3:2A:18:49:39:B0:38:54:0F:85:7E:9E:01:27:A1:13:56
            X509v3 Authority Key Identifier:
                keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:d4:32:b3:82:4f:b2:88:60:b3:b6:b0:35:6d:06:03:9f:
         d0:e6:2e:2f:ff:e9:90:be:9b:51:f1:27:ff:aa:3a:ba:67:ef:
         cb:67:6d:eb:13:2e:c2:70:b4:e1:6f:8e:26:6e:6e:56:a2:c7:
         4d:95:00:58:ee:fe:2a:4d:a2:4e:8f:02:62:32:2b:37:12:62:
         66:71:bd:a7:44:87:15:4a:5d:11:df:91:41:2c:e6:85:e4:d2:
         b2:9d:98:18:73:56:cc:1b:ce:35:c0:67:9d:76:78:20:98:ea:
         ba:d5:00:d9:8e:8d:a8:f2:be:23:f9:3b:b9:74:db:32:6a:3a:
         70:ad:99:25:7e:0e:22:a3:eb:2e:8d:b5:9a:6b:a6:fa:6b:c5:
         c0:97:7f:49:bd:f9:32:ac:6e:ba:03:aa:cd:bc:cc:d4:cb:79:
         27:5a:0a:8b:e6:4e:7a:2f:38:70:96:8c:66:e6:66:f8:5f:d8:
         af:80:ba:fb:1f:c2:ea:c0:d5:fc:84:62:39:96:86:a9:ed:bd:
         d9:f7:7c:e0:9e:9f:ac:02:95:90:c7:1c:72:7a:ee:26:1b:29:
         27:81:64:f4:41:e8:7e:ad:da:e7:53:2a:0c:07:e8:9f:11:97:
         0f:61:c7:3c:c6:0a:b2:d8:34:1c:72:2d:36:aa:23:5e:4d:b0:
         34:8a:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----