Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          921RSJNE3xYT5HP2aUV+Q5LWQ5jNe1MOeZxFnXAWwoo=
Subject key identifier:   63:F0:35:1A:C2:3A:09:84:19:C2:AD:1E:47:F1:94:3C:45:CA:0B:94
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       01962ECF9623904823107C0FE533D0DC5964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          06DE
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: N1rzgb/sXLyfH8/gAFj5wi5FgjxqE30o+uvlIFXA0B0=)
                          2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:96:23:90:48:23:10:7c:0f:e5:33:d0:dc:59:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=63f0351ac23a098419c2ad1e47f1943c45ca0b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:de:a9:ce:59:c3:e3:66:16:b8:15:e3:8e:dd:
                    a7:da:e2:3e:5b:21:f7:e0:ec:70:9c:8d:39:9e:ad:
                    da:25:2c:c1:45:db:69:ea:42:1f:61:ce:e9:be:35:
                    18:76:44:5b:c1:47:28:17:7e:04:1f:f8:0c:61:3f:
                    ac:d7:6f:e5:f4:9e:8b:98:3e:fa:20:0c:d0:20:fd:
                    65:5b:f2:59:e4:7e:25:35:bd:e0:93:82:6f:14:67:
                    80:95:fb:b2:5f:48:d1:9f:83:21:96:7d:36:61:89:
                    da:08:cd:b6:4e:82:09:35:d9:cd:6e:c8:46:44:7b:
                    51:d0:d4:6c:9a:f7:4a:28:35:a7:1b:bc:5b:53:c6:
                    c5:26:a4:6f:64:93:e4:22:1f:27:2f:0a:6d:2c:a3:
                    22:67:cc:fe:21:b6:1d:04:5b:61:6a:03:fc:af:1e:
                    1f:13:eb:17:ac:11:b5:3f:16:7b:ba:e9:4e:67:2b:
                    ec:ac:53:b1:c0:03:22:ce:34:c9:71:db:c3:23:5f:
                    7b:4d:f6:02:41:3b:29:f1:f2:32:13:93:d1:92:40:
                    e7:e7:89:45:14:34:fa:23:40:77:27:67:44:1f:20:
                    fd:bb:0d:fe:4e:10:a3:fb:5c:4e:bb:8c:34:98:5a:
                    5b:a2:c1:9f:48:86:89:f4:65:0e:73:1e:66:e1:65:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:35:1A:C2:3A:09:84:19:C2:AD:1E:47:F1:94:3C:45:CA:0B:94
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:e9:9d:97:80:2d:2e:45:19:c7:e7:a4:51:ac:ae:3f:f2:
         61:7d:cf:aa:6f:87:b3:82:70:01:40:7d:66:e0:53:67:8c:e2:
         6f:7d:b8:90:cb:a4:74:bf:ec:17:fd:de:4e:98:d7:32:be:2b:
         c4:35:ef:bb:25:bb:ec:32:82:df:61:71:dc:da:bf:81:48:49:
         58:07:73:95:a5:1a:86:2b:f8:06:e0:24:23:ed:04:6e:e6:cf:
         b7:ce:6b:32:04:52:92:e4:63:e5:1c:28:14:40:ec:db:af:9d:
         c7:e2:1d:9b:8a:fe:d4:a9:f9:44:c6:66:6b:31:3d:49:09:d9:
         0c:99:4a:60:d6:a7:e6:fe:ad:f5:6b:ba:39:69:76:bf:62:29:
         1c:f7:96:8f:e1:fa:4e:bb:ed:ae:11:18:14:ca:fc:6e:3e:43:
         b2:b9:a8:53:19:49:92:47:6e:89:67:23:19:ef:7d:85:84:4a:
         58:28:d4:4e:26:ec:1b:e5:db:87:ac:c5:50:1f:b1:62:54:fe:
         3a:05:c1:05:9e:b9:0a:5c:79:c9:d3:2a:3b:a2:7b:17:19:8c:
         b6:0c:2f:ba:b0:82:dd:11:a1:df:66:f8:89:82:a9:f9:b5:d9:
         1f:b1:db:aa:25:ad:67:c6:b6:25:cc:a8:b0:5d:c1:5c:30:23:
         3b:f2:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----