Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File:                     M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier:          sVQOjyWLYE+JqwfVB45rA/WtrNbK4+JrusH0YEem4hI=
Subject key identifier:   CB:AC:1F:DA:FB:C0:33:3D:41:4E:5A:A6:86:14:87:D5:7B:95:F3:E5
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer:       /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial:       01962ECF72AD55DEC1AA692E4AA31C436876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: XLP8kKM++F8ejgnlP7dGAHisQmpFqQ97nBQmY4tiAj0=)
                          2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:ad:55:de:c1:aa:69:2e:4a:a3:1c:43:68:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=cbac1fdafbc0333d414e5aa6861487d57b95f3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:5c:16:f1:70:37:75:f1:e2:c3:b9:02:e4:
                    e3:5d:a2:f1:53:eb:d0:bd:96:01:f4:24:58:da:bf:
                    e2:52:8e:a0:96:e3:55:e8:9c:1a:59:a7:6f:99:04:
                    f8:b9:6b:9e:6d:f2:77:b4:a5:91:06:7a:26:e7:98:
                    ac:bc:18:0b:ed:84:11:94:b3:dd:94:78:97:02:1a:
                    19:69:b8:1a:c2:d8:9d:b8:36:84:0d:5d:bd:a9:bc:
                    79:2e:f0:1c:50:4d:cd:24:44:62:cd:39:d0:b0:e3:
                    7c:e4:5e:52:7d:f4:fb:47:e3:cd:f5:cf:f2:0d:d6:
                    56:35:06:31:3e:5b:97:7f:48:e7:40:1c:5e:3f:d6:
                    6d:e9:f0:20:1e:d0:ad:ee:01:f9:e7:2c:05:97:96:
                    e3:a5:c6:a8:19:bd:15:9f:3f:18:fe:87:b7:87:f0:
                    69:55:3a:e1:9a:3c:4e:7b:dc:0f:e4:03:7b:9b:df:
                    d9:73:88:c0:bf:ed:38:f1:8c:61:44:7e:f3:da:41:
                    13:9f:8a:44:be:f7:df:56:70:61:42:36:86:e8:4a:
                    e3:64:92:7c:c3:7d:07:db:d8:60:be:4f:0d:97:a6:
                    61:a4:b1:13:a0:b3:dc:4a:13:78:e5:8e:a5:c8:0e:
                    26:ca:b3:8e:e8:1d:c1:da:88:79:b8:70:b8:42:ab:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:1F:DA:FB:C0:33:3D:41:4E:5A:A6:86:14:87:D5:7B:95:F3:E5
            X509v3 Authority Key Identifier:
                keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:93:4c:44:8f:7b:06:6a:21:59:f9:c1:71:68:8e:06:16:
         b2:af:99:1b:e7:a9:38:15:a6:77:ba:70:f9:90:27:47:1a:c6:
         14:2f:76:33:18:9f:78:64:54:d1:37:2d:24:90:53:d2:4e:db:
         13:d0:66:9a:4b:fa:36:0f:a2:cb:66:ac:66:c8:35:aa:ab:19:
         93:d9:80:42:95:f7:fe:da:64:2f:a7:60:c7:7c:d1:a3:75:8f:
         ee:74:74:ea:b5:85:2d:7c:ee:ae:ae:ee:b7:ad:50:03:df:ce:
         97:43:0a:e3:8e:fd:11:a8:08:0c:9b:ed:e9:39:ea:0f:83:40:
         c1:9c:b6:63:33:6d:f6:06:3e:aa:2e:c3:6e:e1:8f:82:52:d3:
         40:b3:21:5b:29:7c:cd:63:d3:2f:18:9e:44:7c:6c:92:eb:19:
         ae:04:d4:b3:c2:08:f1:17:5a:80:d0:b5:54:f6:12:79:fe:0c:
         45:9e:75:44:2a:b9:fd:85:76:cf:be:87:5b:ad:03:80:56:07:
         e3:60:d5:23:20:d4:93:f0:ff:71:29:83:01:86:71:c8:80:e5:
         eb:27:c0:7f:52:f9:1e:4c:59:14:4a:20:08:99:f0:1a:76:82:
         e2:c5:b1:7f:b1:3c:82:a8:6b:71:2a:13:21:d5:4a:ad:1d:ee:
         b3:48:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----