Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File:                     nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier:          W9Flbgx8fpfxBUyVreR08rc+mMVka+WOAdZGF+fs72Y=
Subject key identifier:   9A:8F:82:74:7C:77:5F:85:32:2A:A1:CB:AD:9F:AD:CE:23:82:F0:D3
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       0194BD17DA3194629D2F2DFC011C6B705CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number:          143D
Signing time:             Fri 31 Jan 2025 16:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:44 +0000
Files and hashes:         1: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
                          2: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
                          3: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
                          4: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
                          5: XnV92qRpjzL9NiSlCAMAqCzTy7Q.roa (hash: x5JfgEIqPon//BPacVD49WbjKRdXkuNIT03yD4HKgM8=)
                          6: Zc78epUkS8U-1FtfX_63z7MoHBM.roa (hash: wP4gUHnjnAKGxxZilLo7m/NopoiQQ/4fltpez27ziD8=)
                          7: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
                          8: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
                          9: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: dNEOUjHPATY4yj6DM1IdQHsW+Z9gH5PMtuP/iKmwqlA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:da:31:94:62:9d:2f:2d:fc:01:1c:6b:70:5c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Jan 31 16:00:44 2025 GMT
            Not After : Feb  1 16:00:44 2025 GMT
        Subject: CN=9a8f82747c775f85322aa1cbad9fadce2382f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:98:8b:e3:36:40:89:c0:19:24:dd:7b:48:
                    7a:6f:14:21:21:10:1b:06:d2:d4:46:5b:19:83:17:
                    f8:b5:e4:93:e4:b1:a5:27:c8:4f:f5:9b:de:d7:68:
                    67:53:f7:9e:7e:3b:5b:28:a6:3a:ad:05:d8:0f:b4:
                    2a:63:e6:78:be:aa:0a:d8:a1:f5:ff:99:04:41:50:
                    6c:23:e3:16:75:e5:2c:85:00:39:01:e3:32:32:d3:
                    24:50:17:7a:16:70:bf:9f:fa:54:d9:d7:af:c1:86:
                    1d:f4:03:dc:46:36:c2:15:76:38:7a:e5:5e:ab:32:
                    80:6d:2c:25:40:a5:bc:38:3b:f8:6a:76:bc:1b:fb:
                    03:bf:b5:8e:cb:6e:ee:08:09:f7:05:7a:ca:58:15:
                    b8:2b:c4:55:fb:20:73:88:b0:cc:33:7f:cf:e1:06:
                    4c:5e:e9:67:1f:81:ab:c4:39:8e:94:da:09:a2:52:
                    93:6e:e1:0d:3e:0c:91:44:5f:af:c6:d2:04:38:10:
                    86:51:3a:70:66:fd:8f:30:58:9a:fc:8c:0e:23:05:
                    54:72:53:1f:a6:b3:8b:ac:64:f9:dc:21:23:d2:24:
                    14:4e:aa:83:03:31:11:73:5c:bd:f2:88:e6:34:bf:
                    15:82:fa:e8:05:d7:b6:e7:79:eb:e9:13:2c:e9:4e:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8F:82:74:7C:77:5F:85:32:2A:A1:CB:AD:9F:AD:CE:23:82:F0:D3
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:76:83:fd:9d:7c:05:99:31:89:d8:68:f7:ce:22:fa:55:61:
         f2:02:3f:62:0f:0d:88:ff:30:fb:a4:70:d0:54:4e:b4:cc:71:
         f4:e9:88:3a:40:26:ea:4b:6e:c5:cd:45:5b:b0:b6:88:f6:04:
         87:3b:af:42:15:fb:27:51:0f:48:27:6f:21:98:48:23:5d:98:
         5b:35:24:fb:44:5d:cf:0c:de:c6:2f:75:b2:34:46:41:e8:a7:
         c5:1c:f8:ae:c5:ca:11:26:30:9e:0b:ab:f6:69:5c:3d:29:80:
         ed:b4:4e:88:bd:a9:a9:98:82:40:f2:25:81:65:64:9c:32:09:
         75:08:90:0c:6f:c5:1a:bb:46:06:81:24:dc:3f:81:58:7f:8c:
         88:7f:a2:a6:09:87:17:3f:f4:da:00:1a:2f:ce:67:6b:d7:0b:
         52:2e:52:48:74:eb:28:5e:37:2d:25:b4:31:7d:d8:0d:68:1c:
         cb:f1:d4:da:37:91:aa:d3:29:48:df:b9:c8:c0:6c:2b:9f:e6:
         8d:dd:89:e9:14:87:9d:00:49:19:66:35:b9:86:8c:68:24:09:
         1d:ed:8f:71:bb:46:c8:24:96:ea:bf:73:cb:30:68:5e:2d:9e:
         ba:45:87:97:3f:ea:3a:62:f0:32:45:f7:87:dc:2c:3d:ab:9d:
         48:06:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----