Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File:                     nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier:          Y3UrEOGMQWYiLgNlbLDgDkWoGjCE9Mxm1pQ85Yv4/J8=
Subject key identifier:   0F:72:8B:30:EF:52:B6:5A:48:55:EF:1D:42:56:1A:F3:A0:E4:2D:06
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer:       /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial:       01962FAB188CAD044F356CDF69600DAA9947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
                          2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: jXBrUeUEyR+BjSWpT8XISU96Jh9J7d/ugZSO1vrpNMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:8c:ad:04:4f:35:6c:df:69:60:0d:aa:99:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=0f728b30ef52b65a4855ef1d42561af3a0e42d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:a0:ce:0d:b5:e4:98:87:cf:d8:e7:77:e2:
                    66:5a:4f:92:6d:2a:38:ca:dd:ae:9b:08:e7:c1:b1:
                    49:e8:36:c2:d2:29:11:a7:d2:86:e6:53:fd:3a:8f:
                    37:bd:a1:a5:2c:27:a2:6d:81:78:a7:0e:9e:97:17:
                    b8:86:64:26:bd:ea:90:25:74:fe:57:c2:22:0e:5a:
                    c5:48:93:e1:d9:79:83:65:02:e7:96:45:8d:cc:c4:
                    d6:77:9a:1d:8b:79:0f:e1:96:1b:4a:9a:b4:13:69:
                    b6:ab:77:d1:fd:37:9d:c7:04:ba:19:1b:ab:50:6d:
                    2b:d1:f8:da:18:8f:ef:a2:28:a8:3b:11:99:16:cb:
                    18:ad:cb:9d:bf:ca:39:1a:02:9b:9f:9c:a1:15:51:
                    7b:b1:22:c2:0f:0f:60:61:75:a9:12:9a:ab:42:9a:
                    ca:07:96:29:32:16:ee:cf:07:e7:15:75:5f:e0:4b:
                    5e:75:85:19:71:ec:6f:0a:74:4f:11:e1:e6:c9:c4:
                    8e:f7:fa:f2:41:00:59:c0:fb:0f:2c:16:44:ca:3a:
                    2a:38:d3:5b:24:b9:5c:31:93:ad:07:bd:1b:38:13:
                    1d:79:b3:a3:7f:ec:3f:86:2b:bc:68:46:d9:f5:e2:
                    7f:fd:aa:38:1b:8a:85:aa:6a:19:c2:66:55:ef:2e:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:8B:30:EF:52:B6:5A:48:55:EF:1D:42:56:1A:F3:A0:E4:2D:06
            X509v3 Authority Key Identifier:
                keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:60:7e:f1:1d:59:9e:53:9f:66:32:c2:86:b5:31:94:ec:
         b9:75:72:19:12:9a:60:8a:ce:e7:e0:ef:44:6b:be:a6:a2:a6:
         34:42:f4:42:42:c7:38:74:e0:6f:9b:de:42:05:9c:d0:0a:1c:
         41:a4:70:f1:10:d9:54:bd:bf:31:95:d9:40:f1:a3:48:c2:e8:
         27:4f:07:16:d4:c2:d1:73:61:7f:ec:e2:03:be:88:a6:92:26:
         7c:b8:6e:1f:d8:9c:69:34:7a:0b:89:45:24:32:bc:58:06:b2:
         44:8c:5a:48:c6:25:e0:83:a5:8f:2b:61:15:68:90:0c:64:5f:
         60:f6:31:35:eb:6d:34:42:92:d1:a0:43:e9:e2:35:5e:67:72:
         2d:0b:7c:46:59:3e:8e:f4:2f:e7:6e:42:91:a3:ae:2f:02:c0:
         2b:bd:d0:a4:97:8a:5a:de:00:e5:07:ed:71:99:f1:d9:91:ca:
         29:9e:eb:5f:40:3b:9d:89:6e:53:9f:b6:63:8b:07:4b:1a:c0:
         d1:c4:9b:db:c9:09:34:bc:f9:c3:91:69:c1:7c:0d:61:4e:5e:
         63:fb:78:bc:a5:71:b7:db:07:8e:b3:3e:74:91:ed:a4:9a:ce:
         ac:4f:1c:cd:be:46:73:ed:cc:88:67:46:18:17:32:ab:4c:fe:
         de:e2:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----