Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File:                     9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier:          lV76Z0I1NdcXpL38DYGsCsVQz+txRS5EYBxlB9XxxfE=
Subject key identifier:   3C:E0:50:D7:60:62:31:86:5D:AB:D7:BB:74:76:0F:80:2C:D9:A8:E6
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer:       /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial:       01962ECFCAD030B03333C3E2ABCCCA4DD53E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: qXMKRzmIdsmWF8fvuupvGQYJFjhssDZUXAYy1Aq11Es=)
                          2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:d0:30:b0:33:33:c3:e2:ab:cc:ca:4d:d5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=3ce050d7606231865dabd7bb74760f802cd9a8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:b5:5f:95:af:e2:ea:77:84:28:30:71:cf:
                    58:77:17:90:ae:2c:7e:fc:9b:16:8e:21:fd:23:98:
                    56:c0:c0:d0:e2:34:a1:fa:54:07:0c:88:11:1f:8b:
                    4e:2c:26:93:5d:99:53:df:be:bd:fc:58:53:fd:ef:
                    63:a8:e4:f1:55:8b:5f:aa:5a:20:01:e4:ba:26:ca:
                    5b:b1:d0:40:0d:78:b7:40:31:7a:9f:22:5a:5e:b2:
                    8a:b4:62:94:47:c4:a0:44:70:74:d3:d1:ef:3c:1d:
                    20:af:25:e8:08:c3:57:30:ac:71:17:81:2b:7d:a6:
                    b7:e6:ea:c4:2a:35:6d:45:f6:50:bb:ce:9d:1a:cf:
                    a7:92:86:3b:9b:59:46:2f:39:03:2e:fc:1e:a3:73:
                    cf:bc:e5:43:70:f5:31:ed:d4:00:41:3f:f3:1b:8c:
                    e5:b9:12:00:f3:59:90:50:b4:c8:8c:d9:58:99:a1:
                    fe:bd:ff:d3:ec:9f:a3:96:8b:d2:ff:09:90:2a:9a:
                    e0:02:1f:57:68:02:44:bf:83:29:e4:64:1a:12:33:
                    9c:f2:f7:11:ca:f5:0b:1e:5e:c9:b6:4b:9f:68:fd:
                    d7:3b:c4:2e:09:30:a2:1b:9d:ed:ae:43:60:74:03:
                    94:d8:0a:01:95:af:73:55:dc:e4:2d:b0:5b:c4:85:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:50:D7:60:62:31:86:5D:AB:D7:BB:74:76:0F:80:2C:D9:A8:E6
            X509v3 Authority Key Identifier:
                keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:2b:20:ea:18:85:59:3b:bc:30:d8:b7:05:5e:0b:c8:8d:
         e8:db:54:b0:2e:f7:62:9b:b7:fc:5c:29:ce:44:fe:a1:fc:ae:
         10:a6:85:d3:9a:62:77:af:85:2c:9f:53:b7:4a:78:35:d0:a5:
         df:02:ba:9d:fb:52:ff:9f:2b:32:0d:9d:49:de:a5:84:0c:6e:
         05:b2:02:90:41:32:4d:bb:23:77:9a:f1:5e:fa:92:10:b0:0a:
         eb:52:1b:60:ed:ba:1d:99:f2:93:03:39:79:f7:44:55:d3:7e:
         04:49:f4:9e:a8:cf:1c:fe:07:cd:63:92:6f:6f:58:5f:a8:10:
         bd:67:e0:a6:09:8b:a2:26:1f:c4:f7:06:26:c8:83:ef:a4:51:
         63:da:3d:1e:8b:06:07:76:af:3d:81:70:79:8a:20:13:3d:e7:
         86:39:a0:43:14:b5:5d:e6:c8:ff:db:0a:3a:96:4d:df:8f:e5:
         75:3b:b8:30:23:d4:be:09:aa:74:90:53:61:4e:ce:06:1d:aa:
         77:6a:d9:8a:df:2e:82:59:17:c6:74:a1:21:f7:44:d8:a2:8e:
         c4:ca:27:af:b7:29:d8:4b:f1:7f:7c:26:95:75:66:2c:b2:53:
         84:84:b6:67:f1:a8:91:3a:76:32:a4:1e:d6:04:f2:26:7c:9d:
         02:4a:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----