Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          MnDcvh8bgr+j4A4zGcz4hoLlL4WZv2p60zkDUEZJZWY=
Subject key identifier:   CE:5E:AB:C5:75:1A:A3:8B:68:47:FF:7F:FB:F1:78:52:5D:BB:D5:A3
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       01962DF3E6BA9BDA781DE09BF6F4D1FCBBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          0761
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
                          2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: nrqjeoTYRQyoxI4ORawG+HYWAZdT8kovoPemMcU2TsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:ba:9b:da:78:1d:e0:9b:f6:f4:d1:fc:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=ce5eabc5751aa38b6847ff7ffbf178525dbbd5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:03:fd:c2:e7:68:36:65:dd:c0:a4:ee:0b:
                    cf:a5:8b:4c:a4:2a:6c:20:7a:dc:f3:73:c1:fc:9f:
                    03:33:d9:2b:ab:67:64:56:9c:25:86:f0:1d:cb:a9:
                    cd:d2:62:be:2b:80:a5:c0:a3:ec:20:58:0c:56:4e:
                    a3:42:9e:5b:d4:f6:fc:1b:02:4a:7a:de:fd:a7:c1:
                    ad:e9:45:d7:5a:92:18:57:9d:ca:de:65:c9:f0:a0:
                    45:43:80:45:18:f7:95:83:0b:73:da:db:4e:2d:9d:
                    dd:e5:cf:fb:bf:43:3e:3d:e6:09:e6:f9:4d:f8:0a:
                    ef:7e:75:64:e7:23:be:43:64:9b:28:c4:0c:2c:7f:
                    c4:53:27:34:69:bd:9b:30:93:0d:11:47:62:e9:6b:
                    40:11:eb:84:fa:80:61:36:f6:75:b8:40:d0:a5:27:
                    ce:36:e7:bf:38:ab:69:98:3b:c3:1c:0f:28:68:27:
                    78:d9:cd:48:44:5b:34:35:f5:ee:07:6e:a6:15:4b:
                    4b:74:8b:37:59:b2:f4:2b:d6:c0:82:a5:ab:db:57:
                    1c:4e:12:32:f9:57:a2:9d:95:c3:a1:66:49:c2:9b:
                    eb:14:37:12:d0:5a:20:77:f3:56:af:fc:cb:cb:2d:
                    99:d1:b0:36:d8:92:ec:f3:08:7c:36:02:05:6e:0b:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:AB:C5:75:1A:A3:8B:68:47:FF:7F:FB:F1:78:52:5D:BB:D5:A3
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:58:bd:31:cd:8d:02:1a:88:6d:5b:0c:f3:61:9e:b1:87:
         e3:4e:1f:51:7c:26:a3:81:e8:b4:81:25:12:ba:6c:f0:68:f1:
         af:2d:15:71:ce:6a:3f:4a:c7:bd:fd:d0:a0:d4:c6:e0:c9:52:
         56:2f:f8:66:9d:dc:0e:e4:40:0e:c0:81:05:b2:bb:37:cc:cb:
         b8:52:31:b4:7c:2e:1c:a9:f4:f7:bc:2e:33:ef:56:42:5c:db:
         7c:22:f3:de:44:62:6f:9d:fc:39:74:44:79:89:e5:f7:1c:fd:
         77:2f:e6:67:3f:b9:3b:54:17:38:88:d9:4c:77:11:82:3c:97:
         96:0f:a6:c2:f5:5d:4b:21:b9:3c:51:65:49:ee:ad:bd:ee:74:
         9d:47:f7:65:a9:11:e9:62:25:5d:8d:f4:ef:79:71:d1:c4:55:
         0f:e4:eb:95:1e:24:71:12:b1:22:5c:54:67:77:32:7a:4a:6f:
         d7:e5:3b:61:bc:f4:e9:5e:f3:24:af:54:5a:5b:e7:16:82:8c:
         5a:26:45:b8:b3:51:fd:dc:d9:67:4d:42:1c:14:e8:58:fb:8b:
         c7:ec:8a:5d:dc:6c:92:29:2f:9d:ac:60:4c:47:2f:4a:e9:81:
         62:85:b0:da:02:f6:a5:f4:00:df:9d:d1:3b:19:4d:57:6d:cf:
         b3:b7:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----