Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File:                     nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier:          qEBAdm7raGpx+pYuRepPhlbYnetsWbK1BRVvqxc8Yzk=
Subject key identifier:   A8:E0:A1:8A:3E:FB:E0:F4:C6:ED:22:0C:ED:5D:E8:C7:8B:64:DE:2A
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer:       /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial:       01962F749176822316BD2D7AE319C4C0F000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number:          0E10
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: 9u6CusxW6gvRNLPswj54KLm/qvvOkrNXnX8o7UEOSto=)
                          2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:76:82:23:16:bd:2d:7a:e3:19:c4:c0:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=a8e0a18a3efbe0f4c6ed220ced5de8c78b64de2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:33:c2:6c:f4:0c:1f:89:1b:39:b7:b0:46:
                    22:57:10:10:7d:65:ae:c3:ac:92:44:25:3c:05:b0:
                    1b:27:49:ac:20:d2:57:12:86:d8:97:1e:d5:e4:2b:
                    b8:6a:23:d2:58:d6:37:9e:58:93:ac:f2:3f:b6:b0:
                    92:ef:5c:22:06:43:ea:ad:f4:35:65:d4:f4:a2:e4:
                    e6:e3:70:72:6e:6e:5d:56:b7:5c:a8:0b:6b:e2:bc:
                    6c:4f:d8:db:e6:da:55:91:88:de:7f:ac:6f:6b:29:
                    36:8b:2e:ea:45:86:5c:9e:dc:17:18:48:35:85:6c:
                    c4:18:ba:40:dc:5b:d7:6f:51:e1:37:e4:8c:b7:2c:
                    8f:2a:8f:81:90:61:4a:42:4c:1c:5b:3d:68:73:83:
                    85:13:13:7a:9d:cd:ed:d5:27:fd:b8:6d:9b:ac:93:
                    5a:6f:17:70:cd:2d:6f:ff:ef:c2:a8:6b:ed:09:8f:
                    28:38:fb:67:c5:fc:2d:e0:69:e3:ec:41:ba:24:1e:
                    a4:e9:fc:3b:2c:f5:1c:5f:73:3b:3f:f6:63:ac:32:
                    63:b0:f4:59:95:73:55:e7:40:f3:fa:b3:b1:4a:65:
                    91:bb:f4:e0:72:77:d9:10:a7:32:d1:ee:bb:f3:47:
                    43:7a:13:c1:89:0e:db:3c:15:8b:b8:02:28:f9:73:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E0:A1:8A:3E:FB:E0:F4:C6:ED:22:0C:ED:5D:E8:C7:8B:64:DE:2A
            X509v3 Authority Key Identifier:
                keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:0b:14:cb:0e:2d:91:a5:3c:3f:ab:aa:b9:1c:45:25:49:
         37:e1:ad:00:22:2a:b2:d6:45:74:1f:92:af:8c:42:ce:f5:46:
         98:a1:22:eb:8b:2e:b8:47:ef:b2:2f:f4:37:43:2c:11:2c:96:
         65:00:94:4c:19:7a:71:d8:38:39:00:d6:8b:8c:dd:f5:f3:b9:
         70:ea:43:2a:3c:63:36:4e:73:ee:8e:c6:08:10:69:59:4b:a0:
         c5:28:9d:a0:61:62:64:c0:73:3a:b9:00:a2:12:67:4e:d6:fa:
         83:e7:44:06:01:0b:bb:c8:63:24:43:88:a0:d0:84:fa:99:e8:
         94:0a:d2:f2:9e:29:6d:15:91:7f:6d:f9:1e:17:4d:c7:85:93:
         9d:9c:0e:f8:49:62:a9:ec:51:0c:45:0f:9d:9b:30:97:e2:f2:
         56:a4:fc:a4:b2:07:7e:8d:96:32:7f:a1:a2:89:fb:e5:84:66:
         12:5e:e5:cc:73:00:24:5c:7e:8b:cd:c9:63:ec:34:83:fc:78:
         b5:97:92:68:1c:dd:a3:4e:58:67:85:01:42:91:1c:ec:71:fa:
         75:83:7e:f4:4f:75:8d:db:68:38:b0:2f:93:dd:4b:90:3c:e8:
         3d:5f:40:d7:e6:1c:60:9f:6e:fa:57:a7:fb:7f:10:e7:76:22:
         08:b0:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----