Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File:                     nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier:          TrYOn+MvbuDV5dv88GuWmzPyyowf03qiAj81gTlo/bw=
Subject key identifier:   6F:DC:4E:32:94:87:DC:3F:ED:71:1B:05:5E:8D:21:AE:A8:E2:87:2E
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer:       /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial:       01962DF3F32DAB0F1CE934CB4330FF423427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number:          10D3
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
                          2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: gb5Cnfq6ZvwJ2/IoTDhAYBa72xSpVYvUpKc288jiVVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f3:2d:ab:0f:1c:e9:34:cb:43:30:ff:42:34:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=6fdc4e329487dc3fed711b055e8d21aea8e2872e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:98:19:ca:e0:0e:f5:94:47:e6:6e:b5:5a:
                    f7:08:c3:92:86:83:7d:e6:53:fa:b7:b5:e1:00:70:
                    c7:81:5a:cb:bd:95:1f:63:6f:29:e9:81:da:25:31:
                    2a:30:46:21:6d:2b:61:69:11:c4:ef:a2:1c:8e:48:
                    09:a6:a6:f0:a0:68:bf:49:8c:79:70:3a:c7:b0:86:
                    84:79:0f:03:cc:99:62:bc:0c:ef:d7:5e:2c:6d:59:
                    bf:78:2c:16:5e:06:62:b2:a6:e8:14:39:e9:56:5e:
                    b0:b3:75:d2:f0:32:d3:c1:b7:92:53:4f:7d:70:dd:
                    b2:8c:d0:6a:09:cc:59:92:88:77:39:3b:b1:b2:5d:
                    0d:d2:19:ca:8c:b4:24:fc:c9:87:b8:bd:77:c5:a1:
                    69:06:c8:77:9c:da:9c:7b:a7:c9:1c:9b:9d:99:25:
                    63:a8:3f:56:96:94:86:b3:f1:f3:7d:29:f6:d9:a6:
                    ca:f2:a2:8a:32:52:88:fd:1f:be:97:7f:31:48:84:
                    86:b4:67:5c:c4:67:6b:86:20:64:11:ba:4b:b5:88:
                    41:2d:8f:c3:3f:d6:fb:d0:70:ab:68:68:b5:66:3e:
                    29:67:98:8d:18:18:7b:b3:34:a6:34:3e:42:7d:15:
                    f9:d4:3d:5b:a3:12:d7:e2:54:79:7b:ac:cb:45:34:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:4E:32:94:87:DC:3F:ED:71:1B:05:5E:8D:21:AE:A8:E2:87:2E
            X509v3 Authority Key Identifier:
                keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:db:73:e5:5b:cf:cd:38:36:0a:88:a7:f5:35:47:39:0a:
         6b:63:62:8e:d5:66:5e:1d:69:67:4a:f7:d1:4d:52:10:d2:1b:
         6d:25:a7:74:9f:ec:ee:bb:d2:6f:8a:b7:75:66:f0:14:b5:b3:
         b3:8d:5c:6d:cc:07:72:bb:54:71:ee:e4:92:7e:f1:23:78:e2:
         28:df:21:12:3d:40:a1:84:49:64:f7:f0:e8:54:f5:e7:0d:fa:
         ca:56:39:7e:50:45:12:b8:4d:35:50:2f:ac:ca:56:70:34:79:
         6a:bb:90:be:1a:b5:71:13:74:2f:b3:d6:e8:47:50:12:bc:ed:
         68:11:7e:40:38:18:84:de:42:cb:26:18:60:74:08:93:16:8b:
         51:f0:6e:95:74:b9:79:f5:c1:e3:05:77:28:46:5c:15:14:43:
         f7:e6:76:b2:37:43:ea:10:34:f2:ab:56:27:b8:13:08:f5:02:
         99:77:0f:85:31:b8:43:8b:b3:b5:df:b3:6c:a6:3c:20:f5:dd:
         5e:85:f2:7c:b2:c1:74:82:ae:30:b1:c5:4f:3e:61:72:c6:69:
         b6:fd:ee:62:39:af:6c:44:ea:2e:42:fb:4c:7b:f4:85:1a:b7:
         49:7d:c3:d6:e9:2c:d2:68:f9:db:7b:78:b9:ff:b8:00:13:19:
         0f:4d:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----