Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File:                     nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier:          reMTlt9gVubWkLpadRwPmZKLFJ1a19TUwWS/MA/pt58=
Subject key identifier:   97:BA:CB:C6:9A:93:9E:A2:EE:1A:EF:47:A6:D0:A4:C5:6A:8C:11:E8
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer:       /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial:       01962F072B33A5EB0C0F50C9CD357E648739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: 7VCPJBL/2CjR3MlWQn0z9ntzYGGRs6BIychE46hgUSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:33:a5:eb:0c:0f:50:c9:cd:35:7e:64:87:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=97bacbc69a939ea2ee1aef47a6d0a4c56a8c11e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:84:22:de:40:a7:3e:45:3b:72:02:30:b0:
                    0f:19:7a:83:5e:14:db:f5:3f:49:30:0a:bb:5b:8e:
                    b6:0e:64:a6:11:15:ca:91:21:40:2a:fe:a2:9d:79:
                    3a:5c:46:a1:c3:48:17:4f:d3:aa:d1:f5:5d:b3:60:
                    28:ef:0a:a8:f2:2f:84:70:f3:0e:73:3d:16:28:fd:
                    d1:5f:5d:6a:be:b5:c4:90:f5:24:95:86:70:dc:30:
                    27:55:e8:4b:87:ae:43:d1:47:de:8e:62:bb:cb:da:
                    9c:10:89:43:64:95:ba:9b:c6:3b:77:4f:57:2d:14:
                    fb:fc:98:18:c2:e3:b3:55:f0:01:92:df:96:90:a8:
                    76:a7:3f:a2:5d:f2:e8:5e:ca:25:dc:8b:81:42:a3:
                    98:e2:ec:2e:19:b2:60:32:8e:13:2e:2c:22:83:4e:
                    72:77:a5:b4:cb:d1:13:c3:fb:5f:be:28:39:81:59:
                    5d:69:32:5c:da:14:c0:0e:e5:2d:a3:28:e4:1e:0d:
                    b3:f8:73:9c:b4:22:ad:9a:22:24:89:ac:0e:18:94:
                    1a:2a:63:f1:d0:ba:65:16:7c:d2:bc:54:1e:03:52:
                    e7:61:57:24:86:06:09:40:6b:d8:ce:6f:cc:31:76:
                    5b:95:9f:b7:b7:3c:eb:c0:fe:70:56:a1:ae:ae:28:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BA:CB:C6:9A:93:9E:A2:EE:1A:EF:47:A6:D0:A4:C5:6A:8C:11:E8
            X509v3 Authority Key Identifier:
                keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:86:50:25:44:c4:00:ca:1f:7a:52:bf:bc:22:ad:e7:24:
         94:f2:14:47:d3:0f:91:0d:94:f1:26:f5:cf:c1:d6:d5:67:f8:
         10:98:b8:89:3f:13:ff:52:31:b7:16:c9:e8:ed:0d:ed:a7:65:
         93:f6:3d:2c:5c:65:26:6b:93:8c:82:59:3e:2c:17:5a:1e:3f:
         10:4f:10:e4:db:b9:88:e1:6e:40:24:57:33:f1:2f:8d:56:ee:
         b6:57:e9:50:7a:40:8b:72:08:1e:cb:4c:0c:da:30:0f:34:06:
         45:b3:b8:96:83:9f:98:16:2e:95:69:df:09:81:31:7c:e6:44:
         d9:0a:b3:82:2b:ce:35:a3:92:0a:3b:e1:eb:e4:2d:db:65:19:
         bd:ff:dd:53:f2:68:45:46:47:48:7a:db:f7:d4:ae:61:25:f6:
         78:ba:46:01:95:6d:31:db:64:e9:71:c6:4e:7b:4e:ff:c7:9e:
         c8:50:3c:9f:36:54:a9:ec:c1:ed:5d:ff:a7:7e:43:5a:85:de:
         f2:58:2f:67:0a:5b:0b:c5:be:05:9e:e9:99:f8:85:b0:02:fd:
         27:ed:2d:c9:14:18:ac:38:86:f6:a7:ce:9d:53:46:90:77:e2:
         09:29:aa:7c:e5:de:69:f5:91:ff:41:6c:7d:59:b8:be:61:40:
         7a:e1:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----