Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          pPk4eLM2RGwFcKFr/Yhd43ZZuawcsp2hajDIF2LjiLM=
Subject key identifier:   77:35:D6:64:4A:17:16:67:07:B9:AE:DD:DB:73:FB:33:02:7B:F1:C2
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       01962DF40716A40DC111FAEF17DBA6F21D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: YhvugRDIWHR/Y0PZ87iVXam4yBvcRnCB/U8u6BgSnEs=)
                          2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:16:a4:0d:c1:11:fa:ef:17:db:a6:f2:1d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=7735d6644a17166707b9aedddb73fb33027bf1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:8e:d2:fa:0f:01:f6:d6:f9:16:0a:06:42:
                    c7:49:d3:0d:4b:fb:66:3d:e6:06:a8:d2:30:34:75:
                    b6:e2:a3:47:ff:4e:78:10:12:82:cf:78:5d:40:93:
                    5a:30:7e:4c:e0:5f:a0:b3:33:89:3c:ca:2d:43:a6:
                    ca:92:38:c5:be:e4:68:a6:b8:cb:19:40:b0:df:46:
                    57:dd:fd:82:60:1a:71:9c:53:43:d3:08:ae:b6:6a:
                    a1:fd:27:55:9d:2b:69:1f:7d:4e:de:f3:09:65:07:
                    52:6c:5a:be:e0:7d:b3:b6:97:e3:e2:43:cf:1e:96:
                    16:61:d6:07:fe:32:d7:99:df:39:ce:56:b0:ec:fc:
                    7c:4c:e3:96:d9:3b:9f:db:19:d2:fe:30:17:52:a6:
                    d2:d2:31:34:91:98:a0:c7:9a:2f:8c:a5:2b:b4:fa:
                    97:8b:22:85:2b:0a:62:5d:15:c1:82:33:c7:69:3e:
                    f5:d7:da:c0:07:22:fd:70:16:cc:73:ca:a7:67:f7:
                    16:96:3b:da:55:67:fc:20:84:c2:ac:4f:02:67:7e:
                    10:35:9b:9e:17:37:2c:07:cb:5b:a6:0f:74:81:1b:
                    be:04:4c:68:e0:02:84:c3:af:73:e5:35:d4:d3:1b:
                    8f:46:e8:62:5d:d5:06:50:f6:c5:27:44:89:f1:7d:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:D6:64:4A:17:16:67:07:B9:AE:DD:DB:73:FB:33:02:7B:F1:C2
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:31:cc:89:05:17:65:28:2d:ce:40:b0:5c:20:80:03:b6:
         29:67:73:fd:d1:5d:e7:59:37:a5:fe:c4:fc:03:fa:56:94:03:
         1e:12:3b:fa:0c:0f:22:db:72:80:ea:d8:89:13:00:04:d7:7e:
         5a:4e:db:e5:61:e2:5f:36:27:fa:69:cf:7e:e4:03:61:a9:8b:
         4f:ea:59:72:a3:6c:96:8c:fe:1c:eb:26:c8:3f:0b:cd:70:bc:
         bf:bd:c5:88:b2:f9:fa:d8:ae:e7:43:ec:b5:ea:8f:84:29:f0:
         f0:f6:7a:51:ec:20:86:3d:09:77:85:a6:f0:11:45:46:8f:2f:
         26:2e:19:e3:c9:be:c6:12:3f:b5:7d:32:1b:cc:13:2f:39:1d:
         04:d7:79:20:79:a7:52:ed:50:e5:39:ca:61:9b:ad:3f:5e:a7:
         6f:20:4d:28:dc:8f:b6:a2:ac:13:d6:05:93:d9:8e:40:04:ec:
         36:37:2a:55:05:18:dc:51:38:9d:35:d3:e2:73:7d:56:7e:47:
         20:00:22:b4:e6:cc:3a:0f:c2:4b:dc:3d:31:5c:28:3e:87:5f:
         6b:7b:85:9d:42:24:e7:9e:14:1a:70:69:ce:b1:c1:df:28:10:
         7e:a7:ef:e3:be:e6:b7:61:9d:10:37:28:f8:bc:cc:27:bb:3e:
         9b:7f:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----