Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File:                     n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier:          qYhOsAYvKJ1jMnwlvkS8eMawisYHqty4wj/T3qrVMT8=
Subject key identifier:   6E:32:90:75:84:4E:F1:AA:70:F9:93:A6:AA:F7:A2:41:55:BF:6B:A7
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer:       /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial:       01962E996E7A25DA70EEE8C12D3A0BAEB5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number:          0928
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
                          2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: pUKvj3tuLc+Na63ie3BfK/fMG/R7ka90lHHvSOr1ooM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6e:7a:25:da:70:ee:e8:c1:2d:3a:0b:ae:b5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=6e329075844ef1aa70f993a6aaf7a24155bf6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:e7:25:41:2d:89:9d:91:1c:21:ec:66:57:
                    5b:bd:ff:e3:f6:a2:7f:78:fe:cb:17:e1:56:e6:cd:
                    36:93:bb:c8:6f:af:31:93:f0:76:7d:44:69:2a:e7:
                    f1:50:f8:6e:48:da:e2:d7:65:df:ac:93:ac:bd:f6:
                    d7:c4:1e:5d:fb:9d:4e:13:9c:5a:3d:dc:a0:36:76:
                    7d:ad:ef:3c:42:db:8e:7d:df:29:c5:9f:e4:e9:29:
                    ec:76:e0:f8:eb:d8:18:61:3a:03:e8:46:11:58:ba:
                    c1:e4:59:d8:5d:62:5f:90:b5:e0:b6:2e:14:3e:16:
                    43:41:7c:a0:e4:12:20:dd:f4:9a:4b:e7:c1:12:9e:
                    3b:9a:82:5b:f6:c8:ce:bf:82:97:1a:92:ae:0f:90:
                    94:fd:bc:81:c0:9e:5e:61:32:40:cc:a3:7b:0c:12:
                    d5:4e:ed:14:e5:b3:ce:84:fa:d0:22:6d:64:4a:58:
                    d0:86:08:05:d7:41:8a:2d:e1:6a:d0:89:ac:d4:ae:
                    37:83:b4:91:e9:62:f6:26:19:83:e1:10:6b:a0:87:
                    ae:6e:7f:d2:6d:ee:dd:77:3b:43:b3:cf:69:9d:69:
                    5f:ed:ff:18:94:86:65:00:54:81:79:49:27:df:3e:
                    5e:80:42:81:5a:d6:0f:3b:33:2f:c5:23:20:18:88:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:32:90:75:84:4E:F1:AA:70:F9:93:A6:AA:F7:A2:41:55:BF:6B:A7
            X509v3 Authority Key Identifier:
                keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:71:0a:e6:7c:f4:9a:07:fe:b7:55:5c:ea:1a:1b:bb:33:
         56:13:60:d3:24:0a:f3:d3:ad:d7:d2:6c:0d:45:48:1e:5d:5f:
         88:54:61:ac:83:b6:3d:07:06:21:c7:e5:84:39:a5:73:23:58:
         12:14:08:95:f2:82:34:c3:e5:ca:78:5c:9c:54:90:c7:43:26:
         be:48:56:ce:45:39:10:66:4d:73:cd:44:53:3a:46:a5:ee:87:
         2e:d7:f9:8e:8c:45:bc:28:5f:92:29:2b:6e:81:be:11:74:86:
         99:da:d8:d4:5b:75:c7:bf:8d:ca:b3:65:c4:f5:c0:fc:6f:33:
         21:85:c4:9b:fd:77:ba:af:77:a4:b9:91:91:e9:3b:50:33:62:
         14:f8:19:44:65:60:a0:ab:ca:f3:7a:10:dc:e6:d9:c7:ce:65:
         58:13:13:53:bf:33:28:be:6f:96:1a:62:62:f5:c5:30:26:10:
         cb:9e:d5:e8:e0:f1:7c:5a:bf:d4:e7:8c:40:7f:01:46:ea:b7:
         45:77:2f:f2:e8:a9:74:df:11:cd:0d:ff:7b:9b:1d:da:c4:27:
         f6:62:81:37:47:3b:4a:44:38:af:89:c7:52:84:dd:cb:c2:d6:
         4f:f8:b4:f1:54:42:f2:d3:2b:21:64:dd:d4:27:64:6e:70:10:
         ba:d7:59:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----