Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File:                     nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier:          2Yk4SzWk9/DdWff+Xll0eiaKAWS/5EW768oP+RehXIo=
Subject key identifier:   4B:79:E7:2F:FD:ED:DF:0D:BF:FE:4A:28:D4:63:59:B4:60:B1:C6:EC
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer:       /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial:       01962F06AE2D2B76A3F467985155285F7083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: boN5HOS9p0sBOXejpnKaBne5b2bJsfMKkIaqZoruaKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:2d:2b:76:a3:f4:67:98:51:55:28:5f:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=4b79e72ffdeddf0dbffe4a28d46359b460b1c6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:3b:f7:b0:66:1d:e7:31:87:d6:98:31:b4:
                    1a:37:62:91:c5:52:dc:56:4e:2c:a3:79:0d:44:ef:
                    64:18:62:56:0b:d8:2f:da:f0:ec:4c:32:c8:36:ea:
                    6e:3e:72:71:96:bf:22:fa:44:9f:71:d0:b5:d7:58:
                    f9:c0:42:80:5c:eb:ba:da:39:98:96:39:52:9a:f6:
                    15:66:82:27:da:13:f2:09:56:42:aa:10:67:5e:c4:
                    1b:a5:b9:18:be:18:ab:39:9e:b6:f5:9f:d7:ba:27:
                    a1:9d:93:7d:6e:57:c2:12:88:79:3f:37:73:c5:8c:
                    53:04:41:19:bf:70:13:14:23:fc:e7:f7:65:55:4e:
                    3e:0f:84:0c:df:89:7f:b1:fc:15:6e:e7:99:6b:43:
                    c5:87:49:57:90:c0:9d:39:de:29:d6:83:0d:9f:f1:
                    84:ef:4b:50:b8:ac:0a:31:97:8b:54:9d:23:60:29:
                    ea:da:89:69:88:32:f8:84:9f:fb:15:5e:41:04:69:
                    34:0c:11:b4:b6:df:6f:8d:11:11:58:6f:8f:70:ec:
                    8f:51:b6:79:70:e7:e6:61:60:b9:85:06:e3:da:ac:
                    8e:b6:99:6b:fc:db:ba:d0:1a:8b:ea:03:44:c5:31:
                    4f:28:0b:a2:02:a4:d4:40:21:1a:21:24:e1:f7:6e:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:E7:2F:FD:ED:DF:0D:BF:FE:4A:28:D4:63:59:B4:60:B1:C6:EC
            X509v3 Authority Key Identifier:
                keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:02:08:d2:a3:f1:c0:55:cd:91:fd:5b:ba:08:90:fd:71:
         fb:37:cb:fa:0b:c6:c6:02:d5:fc:8a:87:ae:e8:d9:9a:28:5f:
         a8:5d:d6:b8:de:46:f9:ab:3c:ec:11:3b:da:d2:f7:db:6d:36:
         57:24:1f:39:a7:2a:be:92:e4:f6:36:da:c6:37:42:6d:29:9d:
         e5:f9:68:2d:8a:ae:b4:da:fe:70:ab:11:bb:de:f6:aa:1a:93:
         0e:8a:bd:e2:ef:14:29:8b:28:06:9a:19:69:38:b8:a0:28:e5:
         ab:b1:f1:1f:6e:2b:d1:1c:a6:93:88:29:25:c4:d7:f1:e3:3c:
         ad:b9:5a:bd:19:cf:0d:8c:e8:f9:6b:31:d4:d4:10:76:c3:1c:
         be:a2:30:fb:c5:af:af:bf:a0:cf:a3:d9:72:2b:bf:8f:f4:bf:
         67:3a:56:3a:a3:bd:6d:10:92:82:fc:77:56:44:86:a8:b6:0b:
         dd:3a:4d:06:92:a0:4f:5d:20:a7:f3:50:4c:fb:93:ab:b7:b0:
         69:e0:1a:45:0a:00:ee:88:7e:25:da:b9:72:37:2f:4f:6d:ff:
         90:7d:83:69:2a:ef:e7:d7:c7:40:31:e3:d1:f3:59:7b:de:73:
         64:1f:15:86:38:36:ab:c1:b5:56:d0:a8:01:91:28:f8:70:13:
         0e:92:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----