Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File:                     nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier:          DwDXrALln//fqsf98DqM8sFyb1iatnTeJPaQTo8aNDk=
Subject key identifier:   E8:31:46:3D:4F:27:9A:0D:51:9A:39:F9:25:45:AF:6C:73:7A:86:5F
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer:       /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial:       01962F3D2C9343FD323AF56326228D1F4257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
                          2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
                          3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: J/lXmv1pWkXfejRoAQYgFl37cB8tG/KFw4xdXeLA9Ss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:93:43:fd:32:3a:f5:63:26:22:8d:1f:42:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=e831463d4f279a0d519a39f92545af6c737a865f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:61:24:a5:02:7f:a4:51:79:78:3a:6a:28:
                    3a:5a:24:52:0d:ab:85:7b:c2:d4:9a:8f:d6:05:e3:
                    b4:5e:12:46:b3:a6:07:6a:5d:51:90:4b:2d:22:e2:
                    70:be:42:d1:6c:0c:a5:5f:af:d2:60:c7:fd:9b:dc:
                    03:26:a8:92:92:ff:69:0e:b9:41:89:0f:de:77:98:
                    47:e9:c1:91:89:92:d6:a3:9d:1d:98:6f:85:21:ce:
                    03:ec:f9:07:7b:bd:51:0c:5d:a1:29:84:f5:4e:d9:
                    38:dc:b2:19:45:6c:5e:45:9d:15:8e:68:6b:5c:91:
                    bb:83:ea:aa:b8:08:16:f7:23:c2:e0:1a:b3:dd:73:
                    42:e3:e7:1a:12:bd:3b:a1:a6:17:e9:0a:7d:df:dc:
                    5b:c5:18:bb:cd:24:03:3b:43:28:89:3b:ba:f5:21:
                    3d:6d:fa:68:61:d7:43:ac:84:7a:4a:e3:44:54:fc:
                    29:dc:94:79:1c:50:38:40:ad:3d:b6:52:af:f9:f4:
                    c8:2e:ae:b8:d3:b2:27:5b:8f:21:de:d9:6a:ee:94:
                    b9:21:a1:7f:2c:3b:35:e1:cb:64:81:32:2b:ea:af:
                    e1:98:6f:3b:73:f7:3d:49:8b:cd:1e:af:29:31:bf:
                    14:31:e6:cc:da:eb:60:f6:6f:5f:93:2a:67:0e:5e:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:46:3D:4F:27:9A:0D:51:9A:39:F9:25:45:AF:6C:73:7A:86:5F
            X509v3 Authority Key Identifier:
                keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:97:2d:91:05:d3:14:84:10:10:85:62:7d:23:95:80:61:62:
         4b:60:f3:0a:a9:27:1e:78:65:05:90:0b:dd:51:2b:de:38:b4:
         76:b6:c6:28:0a:d9:65:cd:92:19:39:8d:a5:f6:e6:88:fd:4e:
         22:af:77:1f:b4:4c:12:73:24:8b:be:2a:cf:88:08:76:9e:8c:
         50:57:01:d3:be:90:47:2e:f2:2a:18:25:a0:d5:c7:04:cb:99:
         f5:9d:e5:36:5c:4d:50:6d:58:cb:46:53:0d:87:54:9b:14:38:
         3b:f7:a7:8f:37:e7:9e:0a:0f:6e:14:44:09:00:7b:75:b4:b3:
         8c:3e:d7:a6:53:91:10:df:9b:ef:11:95:17:21:86:83:ec:9c:
         a2:df:da:bd:e9:6c:0e:96:78:b7:db:50:91:df:86:de:91:4e:
         e0:4b:f0:1a:66:bf:4e:7c:3d:6f:fb:05:88:47:05:22:88:d7:
         4f:48:8d:e5:dc:ca:7d:48:78:43:73:23:dc:af:fc:f4:37:85:
         1c:dc:7f:34:6e:f9:cf:66:94:d9:39:4f:bd:d6:12:17:1b:6a:
         5b:0c:61:29:00:6f:f6:f0:54:7a:54:6c:91:06:78:ab:9d:37:
         48:dd:52:23:f7:65:8b:09:99:24:5c:d7:5b:3e:07:5d:87:68:
         34:fa:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----