Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File:                     nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier:          QecC3t0VPJPQ0iej/ycGOB9uu7XBK5OQoSGXkZERwPw=
Subject key identifier:   71:CF:5B:24:8F:32:B0:A0:6B:48:DB:74:E5:94:A2:BC:C8:64:53:CC
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       0195E0EB5C43EC1AD435DF9DE942FE48C2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number:          14D5
Signing time:             Sat 29 Mar 2025 08:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:15 +0000
Files and hashes:         1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
                          2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
                          3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
                          4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
                          5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
                          6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
                          7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
                          8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: UikTjyin1p7w7TcyhjUzg7YFfQ4PTN9RD6ESMAkPlwY=)
                          9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:5c:43:ec:1a:d4:35:df:9d:e9:42:fe:48:c2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Mar 29 08:01:15 2025 GMT
            Not After : Mar 30 08:01:15 2025 GMT
        Subject: CN=71cf5b248f32b0a06b48db74e594a2bcc86453cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:2c:6c:41:1f:8a:2a:ff:ee:f5:21:a6:c9:
                    61:c8:c8:c7:43:7e:97:25:df:8a:62:40:80:03:c3:
                    e5:f6:3b:a0:20:f9:b7:e8:02:d3:c4:1e:fa:a2:ed:
                    73:2f:c2:60:fe:26:ac:3a:0a:56:a7:47:62:30:d5:
                    9a:8f:91:09:52:2e:09:14:76:8f:3f:eb:6c:cb:9d:
                    28:88:47:be:b9:02:04:99:c2:7b:8a:5c:88:5c:a5:
                    ef:5e:22:8d:50:c8:7d:f7:a0:2b:1b:87:43:d9:80:
                    99:cb:a4:05:da:fa:0d:94:be:f7:15:f6:30:c8:dd:
                    8a:6e:a3:b1:af:7e:9f:43:3f:f9:7a:45:ae:24:8d:
                    98:e4:72:1e:06:9c:d6:84:74:f7:fd:42:aa:35:0c:
                    71:45:51:e4:66:99:1f:3a:f2:b6:64:2d:fe:18:49:
                    13:ae:0f:e7:c8:4c:28:e5:d8:6f:23:64:22:cf:4e:
                    ef:8c:30:58:21:34:3f:ab:30:ba:94:a6:53:76:b7:
                    9e:c9:57:ba:4c:04:90:64:c1:26:0d:25:4b:f1:bd:
                    6c:41:99:12:47:c4:04:d0:dd:86:15:f2:32:23:42:
                    e0:a7:b8:d5:2c:6b:cb:07:65:23:c8:9e:30:00:06:
                    9f:6c:68:63:28:88:fa:69:39:a1:48:20:cf:a9:76:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:5B:24:8F:32:B0:A0:6B:48:DB:74:E5:94:A2:BC:C8:64:53:CC
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:6d:ef:42:a5:a5:c9:64:4c:26:98:d9:f1:18:c6:a2:a1:
         8f:9e:8d:10:2b:d2:52:ea:a6:05:63:46:35:97:47:a2:6a:d9:
         9e:63:c2:a7:d9:7e:b4:79:41:4a:49:06:dd:5e:0a:2a:2f:0b:
         ae:ad:68:2a:a2:72:79:3b:92:c9:3c:ea:2e:d4:9c:31:50:35:
         e7:8e:ec:80:13:b0:00:bb:20:c2:5f:cd:2c:db:77:fe:60:ab:
         3f:2f:8d:ad:ac:07:04:a8:c5:88:1a:e5:df:a3:94:a7:74:1c:
         e1:49:a6:db:a3:6b:44:cc:4f:3f:56:2f:c5:34:96:35:d0:1c:
         6a:4f:bb:88:bf:7c:8b:9f:df:02:ea:a7:26:7d:f5:59:3e:c0:
         aa:6c:2d:a6:90:75:fe:21:fe:4e:db:0e:27:cb:2d:28:ef:bc:
         ea:e3:41:f4:ef:bd:b5:4b:35:4b:e2:a2:00:d8:88:84:08:5c:
         d7:12:01:03:f9:c8:47:c4:c6:9c:12:56:8b:9e:e1:e9:c0:70:
         6b:29:34:a6:9e:22:b1:bb:80:f1:fb:b5:61:d0:52:12:0f:13:
         62:ad:f8:6c:3b:ac:1f:15:ae:06:5d:8d:30:db:31:24:2c:9c:
         48:3f:d8:e0:a2:2c:70:42:64:ab:ca:57:16:ff:74:49:fa:e5:
         c0:93:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----