Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File:                     nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier:          T9s6h4FVnTPL+ELauk2FunjJ4+mxewzz3/M8jH8hjIQ=
Subject key identifier:   06:C9:0A:58:9F:97:B5:FC:14:DD:A8:99:1F:AB:D0:42:53:91:8B:3C
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       01962F3D5C337E671C4E181420E2A78C64CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: KE2uZW/9b1YxxIvUvuJW5TOrTzSK8AFNk+HAqyVEWmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:33:7e:67:1c:4e:18:14:20:e2:a7:8c:64:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=06c90a589f97b5fc14dda8991fabd04253918b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:da:af:1d:e7:ad:6e:ed:15:cc:29:e7:0b:
                    29:f8:6e:45:4c:07:7e:64:ce:d9:8a:88:47:34:d3:
                    d0:4f:c9:b2:8d:ee:10:c0:0d:0b:67:d0:4c:8c:f2:
                    12:f0:68:c5:be:71:38:cc:32:7f:7a:a5:98:9d:57:
                    47:c4:3b:12:1f:d0:4a:c7:5d:da:0d:98:57:17:da:
                    6a:99:ee:b6:40:fa:1c:15:42:8e:82:d2:38:87:d3:
                    6e:d8:4b:5f:dd:8b:27:a9:dd:d2:f3:46:e2:fc:c3:
                    ab:95:d1:ef:02:38:bf:fe:70:0e:1e:f3:04:d7:80:
                    d7:1b:06:a1:eb:be:bf:44:45:d0:bf:06:e3:37:55:
                    42:9c:2f:af:37:23:c8:68:76:5a:62:53:cb:f7:91:
                    cb:26:a4:af:99:a2:b3:f8:02:43:5c:3e:1a:b7:0e:
                    2d:c6:4a:15:fe:67:81:59:fe:88:3e:61:c1:9b:39:
                    cf:b9:f6:2c:2c:be:a1:dc:e6:a8:96:64:b5:e6:f2:
                    c5:fb:95:c8:b5:6c:a4:0e:b9:3a:a0:7c:0c:0e:c8:
                    dd:05:7f:33:c9:c2:a2:76:21:c0:ba:cb:85:0e:99:
                    42:28:58:0b:16:44:1e:77:b6:79:d2:7a:93:be:17:
                    59:2d:09:a5:17:d5:fc:26:8f:7c:95:37:6f:1c:43:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C9:0A:58:9F:97:B5:FC:14:DD:A8:99:1F:AB:D0:42:53:91:8B:3C
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:25:6f:cb:ce:5b:80:25:82:ef:07:7e:ce:18:b7:93:6c:
         f8:81:85:59:5c:14:c7:84:98:86:05:e1:05:de:af:ee:e8:f6:
         e4:17:4e:08:b7:60:0b:75:95:63:60:1e:67:55:a1:cb:3c:50:
         77:72:34:e6:b1:9f:6a:2f:82:2b:92:fd:13:2d:4c:67:7d:c4:
         67:0a:0d:88:83:bf:e9:c0:24:46:bd:11:0b:b4:5d:87:03:b8:
         0f:81:ff:2a:35:37:22:71:51:e1:3e:ad:20:b0:bc:6d:56:37:
         af:c2:12:c2:59:28:a6:c7:31:59:8d:f7:fe:e6:80:8c:05:f5:
         85:ee:2d:e6:1f:b3:e5:1b:ce:b9:07:e7:57:bd:6e:89:70:4b:
         88:c4:39:65:a5:10:81:6f:ca:92:1d:59:00:af:51:df:31:12:
         b0:f5:f8:17:b7:dc:44:8d:f0:4a:fb:50:ce:47:53:b2:77:0f:
         dd:c7:64:d7:7f:d2:0d:c0:00:ce:13:2b:83:53:20:0e:df:22:
         98:2f:7f:81:0a:6f:06:76:37:17:d5:b5:97:b6:ef:73:9b:f0:
         26:65:31:4b:8e:e0:05:1f:2e:17:8b:7e:e8:db:c6:c6:90:2f:
         5b:b9:6b:a2:1f:a4:8b:c9:fe:9c:cd:dc:54:c0:5b:6d:8a:7e:
         24:fe:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----