Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File:                     Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier:          xfqOTzUgnyAtl4f8PZQbBV5dixdJaW+VujTwEpBLuPA=
Subject key identifier:   EC:75:15:10:10:A9:9D:F6:90:AF:A4:1A:4F:9E:3D:38:D1:65:98:9D
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer:       /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial:       01962E61B4D51B9263B2776241562EC1F7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number:          0333
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
                          2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: pwXv5ASxie6QDqJEbRNI1BNBeBfbMtlaaPCG2vNW5/U=)
                          3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:d5:1b:92:63:b2:77:62:41:56:2e:c1:f7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=ec75151010a99df690afa41a4f9e3d38d165989d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:14:7b:bf:05:66:c3:bd:b3:e8:e5:ba:5a:
                    7e:13:19:77:7a:a4:90:1e:6f:6e:1c:fa:84:f6:6e:
                    cc:1f:eb:7d:3f:2e:fa:dd:56:25:9d:dc:cf:20:da:
                    ec:15:45:98:db:ea:78:ec:92:72:ab:30:b9:94:4d:
                    6b:11:e9:50:b9:1f:c5:fa:19:d2:60:a1:5d:68:58:
                    40:62:3d:8b:29:bf:b0:4e:af:3b:e3:58:11:41:44:
                    0a:35:15:07:71:b0:bc:b7:86:21:4e:e8:72:01:c3:
                    5d:b2:b0:05:65:69:bc:e2:00:34:e8:b8:d1:b5:d1:
                    28:cc:f3:8d:7f:1e:78:03:e2:fa:65:a3:0f:0e:a3:
                    d7:8d:34:09:97:25:ce:78:bf:61:28:99:3d:53:51:
                    5f:8e:b2:59:85:d5:71:7f:ed:ed:8f:26:a1:55:05:
                    ef:2f:fa:e3:4a:5d:0f:15:41:46:07:e6:ae:c4:0a:
                    58:ff:b6:50:70:46:23:b8:c0:61:f6:7a:89:75:b4:
                    aa:3f:1d:08:75:9d:2d:19:99:09:d7:5a:8f:56:2b:
                    72:c1:10:ba:36:19:04:af:44:40:3d:4a:ce:0b:94:
                    ed:1d:b2:cc:42:67:a5:01:90:fb:da:26:7a:dd:b8:
                    dc:08:9a:3c:9d:9f:8b:f5:0f:4b:58:7a:e6:48:f9:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:15:10:10:A9:9D:F6:90:AF:A4:1A:4F:9E:3D:38:D1:65:98:9D
            X509v3 Authority Key Identifier:
                keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:a9:e8:f7:27:1b:7a:d1:86:cc:a8:a6:80:f6:14:3e:a4:
         00:ae:6a:aa:9b:88:e1:fe:9a:9b:0c:54:12:10:db:df:3e:a9:
         95:a6:8a:ba:c4:f8:9c:bc:51:21:79:02:2e:8d:bd:51:dd:15:
         70:35:71:d3:48:7b:aa:4a:bf:d9:ab:11:3c:78:ce:16:59:31:
         dd:6e:ce:68:1c:3f:92:5f:48:cb:06:ee:5e:04:d2:a7:a7:a2:
         5a:25:a9:ba:b0:d0:88:82:b3:1a:ff:9f:7a:ef:b0:ff:a9:76:
         9d:1c:98:3e:13:b5:c6:05:40:0b:8e:69:30:9c:96:5b:c4:57:
         ac:ab:29:33:2e:64:cb:19:0c:ed:36:12:65:2f:a3:87:31:b9:
         35:fe:5d:e1:2e:1a:84:a8:dd:e4:9c:16:d5:15:cb:e4:d7:93:
         4c:7a:72:cd:02:bb:45:1f:6c:05:fb:c9:e7:ec:3e:aa:90:d6:
         39:56:a4:d3:5b:0c:3e:4f:6d:e0:67:84:db:bf:46:50:54:cc:
         d0:58:31:53:e6:e8:90:61:67:81:d3:a0:8e:8b:87:6b:f8:82:
         5c:c5:73:2d:67:ba:01:e9:d6:e7:1f:32:ff:72:cb:88:ee:07:
         85:8a:72:b6:0e:ed:79:08:a2:94:37:2c:29:0e:e5:0e:ab:57:
         26:f2:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----