Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File:                     n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier:          nbqvzrjYxVHngYRYvirsItMLW3o1afcH4ABfZXHzNH0=
Subject key identifier:   7C:3A:D7:F7:A9:64:70:65:C9:5D:43:66:9E:FB:DF:6C:63:68:32:00
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer:       /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial:       01962FAB66481D124EE1209630F7C773DA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number:          0D1E
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
                          2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: pGWHhMB5yRDP1tRws03hpriBmpBTNKi8MmroR7w5CQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:48:1d:12:4e:e1:20:96:30:f7:c7:73:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=7c3ad7f7a9647065c95d43669efbdf6c63683200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:9e:10:fe:41:c8:a7:28:ae:26:6c:5c:bf:
                    2e:df:57:5c:32:69:b2:e1:14:7b:79:38:41:10:b2:
                    3a:74:aa:33:74:dc:40:55:48:36:43:68:44:54:99:
                    cb:25:58:31:66:55:07:05:e9:28:44:24:aa:28:33:
                    c7:fd:10:2c:81:6f:38:b1:ed:87:d6:2b:e5:f3:a5:
                    ae:fc:9d:24:c9:08:0b:fc:76:66:cc:32:a9:03:31:
                    57:0d:73:7e:22:ad:48:23:40:e6:9b:98:81:6c:b3:
                    80:b1:2a:4d:6c:f0:d7:d4:3c:5b:1b:82:42:56:89:
                    a7:d8:5f:02:14:1e:c1:8f:e0:4f:86:8b:9e:fd:e0:
                    0a:89:89:e9:78:ba:c3:33:12:bb:9d:0d:ec:dd:64:
                    0e:86:90:3b:50:35:af:7c:9b:6e:5b:2c:f3:70:bc:
                    40:0a:25:a3:72:44:a9:a3:1c:ca:c1:30:a8:6f:e0:
                    26:6d:44:86:3c:2d:85:c6:7d:5d:57:65:0d:84:99:
                    7e:52:f8:ff:29:2d:6c:76:ec:63:3b:9b:b1:3d:36:
                    bf:37:d7:54:d1:25:ec:24:ad:9d:69:85:e5:d2:e6:
                    dc:d7:6f:05:3c:b6:63:8a:6f:4c:58:ef:20:90:ef:
                    3b:33:af:e1:3c:68:30:01:a3:86:bd:2f:f7:9f:ae:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3A:D7:F7:A9:64:70:65:C9:5D:43:66:9E:FB:DF:6C:63:68:32:00
            X509v3 Authority Key Identifier:
                keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:11:cb:63:45:b2:3d:10:d6:0d:d9:a7:24:b3:a9:10:ce:
         cd:41:03:17:18:90:7c:00:7e:00:fb:e3:60:27:e4:97:60:64:
         65:9c:3d:ee:37:9e:1e:31:4f:c4:88:46:03:a4:bd:07:8e:0b:
         17:28:d4:1f:31:64:2c:8b:19:4d:71:87:9c:72:77:7b:77:9e:
         a9:c0:67:cb:13:8c:bc:63:ad:54:96:b6:3a:66:ff:97:a5:db:
         85:ba:34:e8:aa:5a:1a:db:a9:f1:58:fe:71:cf:09:4e:34:40:
         83:9a:23:5f:de:af:ea:d6:ae:da:8d:d5:85:d4:99:b9:8d:6b:
         e1:32:14:c7:5c:95:81:ac:e6:09:12:ea:63:60:c2:1c:40:f3:
         e6:68:88:d7:cc:e3:cf:2d:25:0d:52:ce:32:6d:73:36:3b:25:
         d2:28:10:14:62:c9:d9:1a:72:37:7a:36:b6:a9:1f:f4:31:ad:
         12:e7:c0:f8:74:9f:82:4d:91:21:a9:6c:b9:71:f2:5d:b5:e7:
         9a:3f:b2:58:1c:55:0e:bd:e9:67:f6:e0:18:2d:4c:ff:5b:49:
         50:25:1e:9f:e4:50:1b:13:90:22:2e:50:ef:3a:9e:90:4f:3e:
         0d:df:df:4e:7d:63:5c:cd:84:59:22:fc:6f:0e:e0:18:ac:58:
         be:10:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----