Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File:                     _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier:          ItNiTAhxxy/XPfxBpPZSYm+6BXZMIW48/DdW5AcBkKA=
Subject key identifier:   33:98:7B:28:42:FE:A6:B9:01:3D:30:65:DE:A1:C2:D2:06:F5:AE:D2
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer:       /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial:       01962DF3F932A4E10D8A74308ABF89EC132F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
                          2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
                          3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: BFHVYpzSncoRZzFv6zPL77BWlG4yjJ+ekwFFsnr5bak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:32:a4:e1:0d:8a:74:30:8a:bf:89:ec:13:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=33987b2842fea6b9013d3065dea1c2d206f5aed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:e0:13:38:6f:78:d9:b3:c4:ab:e8:36:30:
                    18:c7:db:e0:c1:7f:38:7a:40:aa:0d:06:98:cb:69:
                    29:c7:77:1d:14:fc:9a:46:de:ba:9d:46:c7:67:1c:
                    f8:bf:36:bc:98:06:d0:f0:4e:3e:96:e3:f3:72:22:
                    54:b9:fd:95:5d:95:57:9c:f8:50:a0:dc:d0:77:9e:
                    85:72:fa:55:bc:ad:ed:62:de:3c:86:51:c5:3e:b9:
                    92:dc:f5:80:04:36:45:be:c3:1a:2c:0e:f6:a8:3e:
                    a2:57:01:9b:c2:66:30:ef:86:9e:3f:05:e7:ec:57:
                    e5:57:45:ac:6f:54:28:a8:8d:0e:4b:96:29:50:c4:
                    e1:e7:75:68:7a:eb:73:14:f3:3d:ac:51:d0:65:05:
                    7a:19:15:9d:ca:26:9c:93:20:68:27:fa:ed:67:d2:
                    c2:26:f6:37:97:0e:82:3c:b5:5b:3b:34:7b:91:c7:
                    aa:3d:37:d3:ca:2d:42:c9:67:05:94:d7:2e:90:26:
                    96:d7:df:d5:d1:49:42:1a:5f:af:fc:5c:56:b4:5e:
                    db:6a:f8:0d:55:4a:c4:ff:a0:ea:7f:2d:22:bf:cb:
                    c9:ec:2f:bb:1f:9e:57:93:ec:63:12:37:8b:36:7e:
                    ed:30:bf:f3:54:35:cd:a3:d5:cb:0c:4b:80:db:f6:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:98:7B:28:42:FE:A6:B9:01:3D:30:65:DE:A1:C2:D2:06:F5:AE:D2
            X509v3 Authority Key Identifier:
                keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:48:dd:1a:ca:26:97:4a:28:8e:f9:7a:1d:10:fe:fd:ab:a5:
         60:52:1a:90:7a:0a:e3:ac:d6:ac:6a:54:e5:77:89:dc:b7:bb:
         48:fa:f5:7c:d0:13:da:42:81:ed:a6:b8:73:f8:80:48:8a:71:
         c1:10:11:a1:bb:fd:c7:89:00:e6:6b:11:e3:a0:13:6f:d1:b9:
         fe:60:7d:7d:b6:42:33:67:f8:8c:bc:41:9e:5e:38:2e:4e:91:
         58:20:68:84:29:8d:07:0a:37:7f:18:43:3b:00:08:12:85:67:
         50:87:65:0c:5a:70:6d:d9:ef:da:8b:5e:cb:03:8e:6f:2f:f3:
         fd:3c:af:33:f4:7e:9b:71:a0:22:ea:13:d5:60:aa:bb:3c:91:
         05:cb:fd:23:5f:a1:72:ac:32:15:a4:10:02:80:84:a4:ff:ab:
         d0:dc:d8:83:23:e3:61:b6:91:fb:3a:e1:45:bd:c0:b1:e5:b8:
         ea:45:1a:ca:3b:80:8e:1c:72:da:24:9a:85:78:79:be:39:59:
         c2:80:db:69:04:0b:e0:8c:1a:e6:43:fe:20:77:7a:f2:33:f5:
         c0:52:08:ef:1a:20:17:8a:dd:f7:c7:ab:1b:22:08:57:18:2e:
         e3:94:f1:5d:1a:9e:d4:01:53:53:6e:da:45:98:38:82:3a:90:
         d9:c8:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----