Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File:                     nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier:          mlR087MtQtvwrR6KydL6+mdfX91TcBegR5pj0wt7gSM=
Subject key identifier:   8E:48:F2:87:F4:71:42:41:17:79:66:CB:0E:4B:77:62:FB:72:AB:67
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer:       /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial:       01962F74B45E7921D407D73A01DFFECEB4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
                          2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: byGslNn21PdFKiaxS6gKR9O86adq4U6xrQ6+fwA5WJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:5e:79:21:d4:07:d7:3a:01:df:fe:ce:b4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=8e48f287f4714241177966cb0e4b7762fb72ab67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:6a:50:28:0b:57:02:86:07:da:90:6d:a8:
                    a0:10:2e:14:0e:86:7c:8a:79:53:d6:b2:f3:2f:5a:
                    28:3d:3b:6e:91:c5:0c:3f:ce:b7:e8:c4:ce:ae:33:
                    af:98:9d:17:7c:79:c7:51:ad:da:80:e8:5f:c2:25:
                    ac:49:77:f3:3d:8f:00:bd:aa:20:d7:c9:23:76:60:
                    0b:8f:fe:4d:ea:67:eb:d0:3e:64:cd:fd:61:d4:99:
                    c5:63:61:be:60:49:96:e0:ee:5e:ef:8d:20:28:92:
                    ec:6f:6d:04:04:66:ae:16:f7:a4:20:53:1e:a8:1f:
                    48:11:1c:c4:ea:0f:cf:99:0e:1e:70:b6:82:b0:6d:
                    77:a8:28:f9:03:3c:97:c3:5d:be:4d:13:bd:02:39:
                    c3:67:e1:33:23:ec:d7:42:e3:8e:f1:34:f6:37:e8:
                    de:8c:12:0b:3e:60:45:0c:22:01:f9:d7:6d:c5:61:
                    4d:d5:4c:8f:5a:32:5b:bc:2d:77:25:77:c3:a1:a3:
                    ce:46:8e:ac:2c:4c:0f:c7:a3:3f:58:50:21:cf:dc:
                    84:32:74:5b:f1:88:de:48:4d:ea:54:24:d4:44:61:
                    e9:80:ae:80:8b:2e:ff:6b:d4:15:89:5d:af:6f:4c:
                    69:1f:ba:a5:4f:f5:f6:09:ed:d2:da:94:3a:a4:07:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:48:F2:87:F4:71:42:41:17:79:66:CB:0E:4B:77:62:FB:72:AB:67
            X509v3 Authority Key Identifier:
                keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:6c:3c:f9:38:26:1b:5c:bd:14:b4:f0:70:4d:30:f0:48:
         66:02:58:0a:2b:7f:32:89:57:41:5a:04:76:34:45:0e:20:ff:
         d9:58:31:6a:51:a5:65:9b:39:31:fb:2d:59:ae:f0:56:b4:a9:
         b7:99:32:76:bf:71:5b:02:ec:3b:32:14:32:5c:f0:c7:42:be:
         4d:a9:8f:3d:63:d5:58:4d:46:19:dc:ab:cb:f8:95:11:9d:4b:
         31:9e:53:b8:9d:82:0c:69:06:56:95:54:09:77:99:ab:bc:c3:
         a7:3c:79:c4:09:28:d7:c4:96:65:a2:40:60:b6:0b:c4:19:8a:
         3f:cb:70:d8:7a:8c:d3:4e:cb:b8:bf:fb:39:9c:2f:24:36:1c:
         25:28:12:f7:fe:3f:a3:06:2d:5b:05:b0:72:9a:11:9e:2a:8a:
         c1:5b:bc:fb:cd:45:0e:03:d0:7d:4c:32:70:10:76:7e:02:30:
         5f:b5:78:a0:70:5f:5c:60:5f:98:f5:ff:50:74:f4:c5:69:c3:
         81:a7:fd:01:c7:75:d7:6a:46:35:01:a2:6e:29:0f:13:7c:45:
         2e:47:48:33:47:46:92:de:6d:d3:78:44:7b:98:c1:de:55:91:
         f0:7d:e2:ae:a3:89:63:19:02:aa:dd:a5:dc:65:90:ba:cb:6a:
         f7:f9:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----