Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File:                     M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier:          lmLGL+/LfKBYAEc8Hc2TdtwcC8vEP1SDY9/XlCQC7co=
Subject key identifier:   64:C4:38:5C:9C:A0:97:8B:4A:45:28:DD:E8:D8:17:9C:0E:CC:0B:78
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer:       /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial:       01962DF4389C8151C08B52A9928CE638A431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
                          2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: w36KN0xKchzAceAcdgP0Z08aUlCCbY9HX918JgCGS+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:9c:81:51:c0:8b:52:a9:92:8c:e6:38:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=64c4385c9ca0978b4a4528dde8d8179c0ecc0b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:58:7c:71:68:12:9d:c9:b5:4a:c4:02:27:
                    1c:d5:b6:3c:fc:f8:19:4f:d6:1b:b6:1e:8e:ab:e4:
                    ef:1f:ff:c8:91:57:f8:75:02:a6:ba:b1:82:f0:5d:
                    72:4d:79:01:fd:de:55:e7:be:47:ac:cb:58:77:55:
                    f1:b1:07:31:36:21:4f:74:db:c9:48:b8:8d:29:d6:
                    13:73:aa:de:d2:55:1d:2a:e6:d7:e2:6b:59:b7:08:
                    0a:d5:3c:1b:16:e3:ca:1a:51:3b:23:47:26:41:6b:
                    9c:0b:3a:5b:4b:ad:92:51:f8:4f:64:08:99:a9:61:
                    d0:a1:c4:11:0d:1f:43:cc:bf:4f:0a:04:31:ea:1e:
                    30:8e:d3:54:a8:b3:92:5a:f3:5e:70:cb:95:7f:11:
                    c6:11:51:0b:36:27:8b:ca:a1:8d:5b:20:3e:c6:ea:
                    6d:c5:82:96:a5:ea:32:19:6f:f4:dd:57:98:d9:06:
                    0d:98:35:6d:00:78:cf:5c:c5:a9:ca:95:9d:a3:f9:
                    d6:08:bd:3a:d8:83:62:77:1c:c3:b7:93:40:c7:a6:
                    33:9a:3c:f1:e1:14:bf:5b:11:b5:94:ce:ea:e9:2c:
                    d6:f8:72:97:80:fb:53:fc:78:ff:f2:ef:10:ef:1d:
                    55:0e:8d:67:fe:81:56:37:6b:0a:1a:50:52:f8:c8:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:38:5C:9C:A0:97:8B:4A:45:28:DD:E8:D8:17:9C:0E:CC:0B:78
            X509v3 Authority Key Identifier:
                keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6e:43:90:1e:a4:d0:c6:e0:f0:49:f8:d9:82:5e:d7:67:25:
         a7:9d:e5:5e:1a:4a:fe:bb:17:23:c8:2b:59:42:22:91:3c:34:
         6f:9b:af:1f:6e:60:dc:b3:ac:f2:7b:5b:2e:c6:52:e6:80:71:
         08:7e:c9:43:8f:26:97:c1:8a:17:1d:76:00:1b:e9:21:36:93:
         2d:52:39:4e:db:33:6f:3e:1d:72:12:6c:f1:32:e9:54:b8:54:
         6c:c7:4e:29:1f:2f:69:d7:8f:3a:33:a3:c1:32:41:21:62:d3:
         a0:b8:47:d9:c2:71:8f:e0:d2:70:34:cf:83:d1:4d:e8:88:6f:
         10:a4:f4:26:80:eb:b2:5c:33:17:07:b8:cc:b1:81:6b:c4:44:
         77:1d:8a:cc:e5:f1:fe:3c:47:19:fa:e5:1c:da:5b:18:02:50:
         1a:41:ff:50:8a:26:06:23:89:dd:4d:10:79:18:06:d3:92:a3:
         51:6f:32:5d:61:7c:f2:e1:b6:9b:6b:9f:b4:97:e3:b4:2f:86:
         68:50:e0:af:f3:73:66:62:73:69:eb:18:86:d5:94:a7:c2:fe:
         b0:77:32:53:5e:ef:57:13:25:69:f3:b4:79:92:7d:76:31:33:
         cc:a9:fe:95:c2:1e:c2:8c:98:3a:39:83:c5:6f:4d:d4:76:fe:
         f0:af:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----