Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File:                     M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier:          H9g66gRc1GMxXi1ab09vvY4yO2EaYBz3lVBOfFhMO10=
Subject key identifier:   FD:CA:43:0C:46:DF:F7:AE:49:69:7C:A1:EE:5F:33:43:25:FD:06:AF
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer:       /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial:       01962F074A3D8367C3137F95F306CAF10CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number:          0621
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: VIZXttMYjU85Sdi9/kcUaYQHRAcO6k3czCVAGSk3kIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:4a:3d:83:67:c3:13:7f:95:f3:06:ca:f1:0c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=fdca430c46dff7ae49697ca1ee5f334325fd06af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:9d:d2:b5:a7:ab:68:09:6d:e5:af:4e:de:
                    83:69:cb:25:7f:35:0a:3c:0b:54:88:34:14:a7:f3:
                    0e:b0:4a:42:f2:41:ce:f0:be:0d:41:be:fe:79:c4:
                    85:3c:1d:fe:f1:15:b2:59:b8:ac:f3:0b:da:a8:a1:
                    de:6c:cb:dc:d5:d2:70:e4:d7:78:a4:c2:1f:8d:b5:
                    79:c2:de:6b:e2:6b:71:f9:42:50:89:67:84:71:ad:
                    07:d7:6a:a4:a6:68:f7:42:2e:fd:6b:a1:47:a6:55:
                    d1:38:9e:ed:0a:9f:7b:bb:34:11:45:eb:b9:35:b7:
                    30:02:2b:f1:6b:54:46:47:5d:a7:01:80:14:ac:6c:
                    ff:c6:48:09:a1:b3:51:e8:bd:ae:31:ae:07:9f:58:
                    5a:f4:56:4a:42:f8:67:0d:01:9d:14:75:fe:97:45:
                    5e:ff:46:cf:12:d2:82:60:6e:59:03:a4:35:64:06:
                    ef:18:52:54:03:c4:1c:82:82:31:0e:4a:3c:93:39:
                    96:1b:65:88:84:3b:56:5c:a9:3d:73:2f:f1:e5:49:
                    cb:c7:bb:be:c8:0c:f1:76:23:56:5c:2e:56:d7:93:
                    c9:94:e8:fc:c7:d2:31:d9:ad:01:59:b8:5f:80:ab:
                    40:4c:20:03:8e:49:d0:6a:31:04:ef:cb:ed:69:07:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:43:0C:46:DF:F7:AE:49:69:7C:A1:EE:5F:33:43:25:FD:06:AF
            X509v3 Authority Key Identifier:
                keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:d9:5a:e0:81:15:71:73:18:4b:ff:92:dc:bb:4a:2f:c4:
         93:8b:ab:48:fc:51:43:97:8d:88:c2:49:2d:2f:4f:f5:77:c2:
         cb:ce:53:35:32:cf:93:14:30:2f:67:2a:a4:61:15:b4:48:de:
         cb:75:cb:fe:23:65:f5:01:be:cb:a9:f6:cc:54:4f:52:ef:d8:
         96:ec:87:66:db:b6:57:a2:ff:f9:dd:49:2a:2f:a2:05:ce:4f:
         ad:82:a9:d6:b9:5f:7e:92:26:81:82:68:62:bd:fa:76:ed:e3:
         1c:71:79:c0:8b:97:cf:9b:a3:1a:70:1d:2f:75:9b:d7:ca:3c:
         fe:0f:9a:37:bc:fe:f6:78:a6:ac:3b:41:a5:a4:e3:78:93:48:
         ea:87:5a:1b:45:21:be:34:49:ce:bd:68:fb:b1:ff:b8:c3:a5:
         c9:9a:ba:27:9f:f4:d4:49:56:2e:a0:91:be:de:ab:4f:a8:e2:
         4a:0e:5b:eb:61:b7:bd:a4:94:35:a0:c6:64:f0:3b:7e:d3:ad:
         11:43:8b:df:50:4c:ec:94:95:02:f5:1c:fa:45:b6:16:1a:fb:
         53:e4:02:eb:2f:a8:fe:63:67:91:27:ff:1a:b5:b9:79:9a:c6:
         b5:f3:55:e6:d5:2e:70:a4:27:55:24:d3:bc:43:b6:24:d8:0a:
         21:0e:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----