Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File:                     nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier:          RVSCH3JqeTIZZzOET+SFYBEEz4dQScpMBbegNI2hd6M=
Subject key identifier:   1C:92:07:CD:22:D7:BE:31:11:71:18:2A:6C:3B:96:4E:74:20:4D:2B
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer:       /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial:       01962E994C0B8F6783B02B73A55BB8DA01A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number:          10A8
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
                          2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: 9Xus8JipPJFDJruxpjTaUhDV1LMXj1F9k9zK2NZHOBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4c:0b:8f:67:83:b0:2b:73:a5:5b:b8:da:01:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=1c9207cd22d7be311171182a6c3b964e74204d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:70:79:bf:f6:51:f6:d2:11:81:f1:34:d5:
                    9f:f9:eb:d9:d5:af:0e:8e:7a:80:55:84:62:fc:72:
                    04:35:89:db:8d:ef:14:4a:82:4c:f2:9d:f9:3d:19:
                    4b:18:39:51:28:16:a3:ce:f9:14:58:cd:fb:48:b8:
                    3b:31:de:ed:19:70:f6:a9:77:3a:1e:81:86:0a:a3:
                    d6:31:b8:a2:86:8c:3f:37:fb:f1:22:05:d4:cf:28:
                    88:04:62:fc:c0:27:c1:2f:35:ec:71:c2:f4:df:a4:
                    87:59:84:7a:db:1b:a8:9f:e9:6f:80:9c:06:c7:70:
                    38:50:b5:e6:96:de:51:78:1c:76:0c:e9:76:d1:bf:
                    d8:4b:5c:0e:a1:96:f5:c8:27:af:a2:0f:cb:75:5a:
                    3c:7c:59:7b:e9:77:2d:13:4e:70:4c:c1:24:c3:48:
                    a3:a8:03:b9:d8:89:c8:cc:72:7b:5e:da:0c:88:4e:
                    41:17:25:9d:af:77:bc:7a:62:1f:14:a4:bb:b5:89:
                    46:68:bb:16:d7:81:f1:21:4a:e8:85:ea:c6:da:4f:
                    7c:78:71:5c:53:64:6e:a0:11:99:60:d4:67:91:7e:
                    fd:6e:1c:5c:1f:c3:dc:b6:fb:53:50:a6:23:88:e5:
                    bb:7d:3c:df:61:eb:41:63:57:86:80:8e:4c:bd:c1:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:92:07:CD:22:D7:BE:31:11:71:18:2A:6C:3B:96:4E:74:20:4D:2B
            X509v3 Authority Key Identifier:
                keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:93:19:ee:bf:6b:7d:06:24:aa:be:18:b1:7c:74:3c:d9:
         b5:b2:04:bc:10:7f:78:c4:b2:37:93:35:6d:af:f3:c0:ba:94:
         a6:5b:b2:17:01:28:58:8f:e5:7b:72:c5:f5:a2:a5:e0:d1:80:
         6e:f5:69:17:a1:0e:e3:db:29:d8:a0:de:90:c7:f1:d8:2b:4e:
         72:ad:0f:f7:08:34:3a:09:bd:e6:da:d9:6c:9d:74:ea:50:ba:
         69:a1:0c:2f:59:e8:e9:cf:6b:3d:7b:32:30:b7:da:21:86:c4:
         c1:c5:cf:95:c9:75:da:5e:22:c7:d7:ac:29:e3:07:e5:9e:e7:
         47:8c:c0:f8:64:c7:ce:df:00:67:f2:f6:0a:23:ef:8b:3a:e3:
         58:ff:ab:d6:73:d7:79:a5:b6:2f:eb:0a:02:cc:1c:ee:e0:f8:
         8d:fd:13:dc:0b:86:3b:e3:db:bd:c1:23:07:30:06:05:51:db:
         28:dc:05:1e:45:b1:5f:33:f8:3d:47:1a:1b:09:33:14:c5:ec:
         e6:4c:18:e3:43:23:ef:15:b2:4e:b1:68:85:73:a2:43:cd:75:
         d2:a8:4f:1f:a6:af:b9:be:12:cb:87:a3:d0:c8:d8:30:af:84:
         7b:4e:38:39:14:1f:c9:20:6c:91:eb:02:26:47:d7:cc:7e:d9:
         d7:44:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----