Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File:                     ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier:          MmjfuSFjfdss00Un2wHHXK8JHaZnc4F6h+bekrk6fX0=
Subject key identifier:   DC:E1:73:4D:16:07:EA:20:19:2A:AE:F5:ED:F1:09:49:14:E6:17:CD
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer:       /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial:       01962DF3D8CB673527134055B47B6637DB3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number:          0A94
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
                          2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: wUe+qpQqz4k3LjGqZsHxO75we4sp44cql8osELFCpNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:cb:67:35:27:13:40:55:b4:7b:66:37:db:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=dce1734d1607ea20192aaef5edf1094914e617cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:b7:ec:e2:c4:45:78:ce:a7:8a:95:72:cf:
                    d5:4d:8e:ca:6c:35:bf:ac:c5:49:16:13:b4:ab:17:
                    12:aa:bd:d9:3c:06:32:53:f6:cb:69:0a:0d:88:38:
                    30:89:b0:46:77:44:b8:f6:22:4e:d3:11:e1:89:cc:
                    2c:26:00:cf:b9:7e:58:1c:bf:be:ab:7a:c0:1d:6f:
                    df:ac:45:d3:ba:4a:d6:bf:ef:d4:01:1e:b7:c7:b1:
                    70:cf:ac:76:54:6e:5b:23:50:c5:0a:a6:df:16:8a:
                    56:83:52:cc:0e:cc:af:c6:50:0f:52:97:9f:51:e5:
                    1e:62:8d:ad:ef:10:27:87:24:e3:71:13:9b:12:0d:
                    40:43:0c:b7:c8:dc:06:b4:45:fc:42:76:35:51:6f:
                    00:00:1a:6e:f8:32:50:8e:f6:6b:47:ac:fa:6b:e2:
                    ed:7b:f8:5d:9b:2c:56:a5:18:b4:a9:3f:59:25:bd:
                    c0:57:9a:15:f3:a2:7b:4c:d4:69:07:d0:13:81:09:
                    60:a9:ef:b1:30:fe:17:29:41:6e:5e:4e:30:3b:29:
                    56:17:02:8a:82:9a:58:af:7b:78:80:3f:8d:95:21:
                    70:f4:11:0f:9a:f4:fe:e3:1c:3f:05:dc:60:b7:19:
                    53:46:29:94:09:da:ce:16:8d:35:03:29:54:35:99:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:73:4D:16:07:EA:20:19:2A:AE:F5:ED:F1:09:49:14:E6:17:CD
            X509v3 Authority Key Identifier:
                keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:46:d3:8d:1c:19:67:5c:a8:64:59:26:de:e0:25:4d:2d:08:
         40:67:4d:22:f4:15:c3:2e:cb:83:4c:00:c9:1d:59:2d:3d:1d:
         28:0e:17:5e:6b:e1:ad:4c:9b:4e:f7:65:79:78:90:01:7d:20:
         93:7a:ce:b1:ba:bc:ff:63:29:e0:5a:70:ff:80:ce:68:9c:e8:
         68:f0:b4:68:ae:e3:0c:4d:be:5c:3d:c5:6b:19:2a:b7:51:5a:
         56:9e:64:10:66:ca:3f:59:7e:be:26:8a:3b:dd:db:2e:94:ce:
         a6:43:c6:00:2b:fd:34:e3:1f:0a:78:37:98:4b:89:83:32:42:
         a4:6d:9c:16:cc:e3:d4:2e:43:16:e7:bc:a7:e6:b2:62:21:03:
         18:83:d7:6d:1d:5b:f7:ad:2d:05:d2:43:69:68:f1:c5:02:e4:
         cc:4d:e9:a2:92:81:b2:8d:25:67:d5:8d:be:cd:1d:73:5f:34:
         c2:ee:0e:6e:60:20:4f:1d:74:6d:3c:0b:74:21:30:e8:51:38:
         f6:b2:fb:23:9c:b4:28:30:bc:5d:a4:ec:cb:2c:d1:42:46:a5:
         1e:a9:ce:47:df:d3:8f:d4:71:a8:3c:45:7b:24:bb:d9:73:b2:
         94:2e:bc:c0:de:3e:a9:c9:91:39:7d:22:25:8b:d0:10:38:ea:
         85:9f:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----