Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File:                     nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier:          ITDwCXQLFBu6meypGrsIK/pXv3zf/og9Ewso2Mq0ZSk=
Subject key identifier:   29:D8:A8:94:21:B4:D8:C4:84:A7:C4:09:9C:97:CD:B2:06:65:03:8E
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer:       /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial:       01962DF3D25A72F529EA1AFF3059CD16C8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number:          06B1
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
                          2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: b0FDpEsws/vx7GAMmnSaTeUzc7Huko6XAdiepSmZg4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:5a:72:f5:29:ea:1a:ff:30:59:cd:16:c8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=29d8a89421b4d8c484a7c4099c97cdb20665038e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:fe:ce:ad:d5:0a:3a:a6:9f:d2:93:45:fa:
                    02:9e:48:f6:ea:2d:47:39:bf:02:cb:e7:71:a9:b9:
                    d8:df:49:73:85:94:ec:cf:c5:50:74:c5:92:44:e3:
                    08:46:c6:ee:80:b0:87:77:91:3b:8d:f4:b5:64:3d:
                    06:51:bc:f5:f1:2e:e4:04:2d:6d:f5:b0:9e:6e:43:
                    be:78:61:16:70:d0:29:93:9a:aa:64:c1:c3:b6:ba:
                    fb:16:82:0d:64:6d:ba:52:33:bb:18:76:a0:57:c8:
                    ca:c9:59:ae:6d:48:4c:ba:20:a9:7f:dc:90:be:08:
                    af:0e:f1:66:2c:6b:7b:63:70:41:50:d1:23:ae:cf:
                    23:b1:82:86:f7:b2:a6:27:f0:35:4b:e3:e1:6d:9a:
                    09:d3:ef:61:df:8a:13:88:31:c7:d3:c4:a5:7a:da:
                    71:ba:38:94:fc:d4:be:ea:3a:25:38:e7:62:36:ab:
                    3d:5e:9c:69:40:ab:fb:2c:a2:0d:a7:ee:c3:51:a2:
                    f9:42:98:d9:48:a7:ea:d1:d1:32:be:c4:56:c9:57:
                    67:d4:11:77:5d:17:d9:51:55:92:d4:72:9d:84:46:
                    6a:e9:52:85:af:f0:b5:86:0d:9b:86:1d:69:c3:96:
                    da:36:85:8b:c1:db:89:f7:1a:e6:36:33:a4:ff:d5:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:A8:94:21:B4:D8:C4:84:A7:C4:09:9C:97:CD:B2:06:65:03:8E
            X509v3 Authority Key Identifier:
                keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:6f:10:8d:14:8e:74:89:cd:ee:34:5a:1a:71:30:22:c3:
         49:92:65:de:c1:ef:1f:69:71:05:7f:e8:47:77:f2:89:00:a6:
         d1:d9:ab:c2:8d:b9:d2:78:a8:ba:d1:6e:3b:c1:5f:7c:40:e9:
         53:31:49:17:f6:d3:5c:51:fd:6e:42:62:05:9a:db:9f:15:58:
         2d:6c:2b:bc:5b:70:2e:fb:60:d9:9a:be:66:60:db:15:44:40:
         70:a7:31:d5:57:5e:3d:4a:d3:e1:5a:63:73:c2:fd:4f:45:0b:
         5f:d6:12:1e:76:99:de:98:a8:ec:0a:5c:90:16:76:ad:cb:c6:
         6c:3a:c7:64:d0:b1:d0:65:56:da:2f:ba:d9:5f:bc:93:37:fd:
         97:6c:53:a5:da:b4:13:19:06:9c:cf:a1:5d:55:63:ed:11:24:
         95:af:5f:5a:b2:cf:d2:54:bf:be:c2:82:b9:1d:31:30:5b:b9:
         a5:8c:e9:d2:cb:87:19:a1:5b:46:cc:43:cc:29:06:46:d2:ac:
         7a:5f:da:25:d5:52:f7:ba:e3:89:cb:cf:18:82:3e:87:e7:fd:
         fc:91:b7:92:d7:af:5b:71:79:59:14:92:dd:64:72:45:49:86:
         a2:c7:9e:ff:7e:81:8d:5f:83:f5:43:3d:a4:43:67:85:56:c2:
         69:3d:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----