Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          Op+WFIYGd1r7fQfAhlaqnbNOO1xMGrNjuS/DHYgpj8M=
Subject key identifier:   14:8F:ED:52:2F:64:0D:79:D8:09:68:E3:E5:10:57:E2:ED:A3:0D:15
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       01962F3D4B595525240BB28C58B1619F0257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: umDtgcA7mKi24yEWx/RZOacLHtevO1tHivcPzzr3BHo=)
                          2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:59:55:25:24:0b:b2:8c:58:b1:61:9f:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=148fed522f640d79d80968e3e51057e2eda30d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:77:9f:e6:8b:c4:9c:2e:79:ec:26:9a:f2:78:
                    94:ad:62:2d:a4:8e:86:97:1c:1a:8e:16:67:2e:5e:
                    58:65:c9:55:7b:8a:95:20:c0:00:d5:2d:d2:af:a4:
                    10:e4:a9:33:15:93:b8:ac:f3:48:ff:b6:37:3a:2c:
                    46:f5:74:9f:bf:75:0f:f3:de:2a:30:23:31:08:13:
                    ce:55:d1:71:e5:58:9b:70:1b:30:5b:12:ea:66:4d:
                    94:28:12:da:a9:2f:b3:9a:08:d0:dd:61:85:68:f6:
                    66:78:75:0c:47:e7:b7:33:5d:a1:75:f2:d5:ec:9d:
                    70:0b:fe:f4:2b:b2:a7:4e:f1:e7:ce:79:a8:43:8a:
                    9d:6b:e0:bf:0a:17:ea:cb:30:7a:03:04:b6:f3:f7:
                    a0:c9:66:b5:82:d8:37:00:3f:e7:03:9d:3b:fa:dc:
                    ce:49:90:fc:e6:a0:81:dd:fc:90:06:df:5e:d6:fd:
                    88:12:c7:98:60:39:3f:91:ab:49:b6:09:57:89:0e:
                    5e:9a:8d:b6:64:3c:66:62:22:87:54:40:2f:79:5b:
                    35:f7:e5:ed:c3:9a:6a:bd:db:4c:8a:e7:9f:23:a6:
                    ad:bd:e9:81:13:91:57:0f:1e:bc:7c:10:1f:5c:c3:
                    56:3d:c3:d8:f8:81:29:e0:a2:dd:3e:ae:b2:ad:d9:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:ED:52:2F:64:0D:79:D8:09:68:E3:E5:10:57:E2:ED:A3:0D:15
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:3b:48:32:c1:23:ec:c1:d8:6d:2b:38:9e:f3:b5:4a:c2:
         10:27:5e:cd:e3:ad:df:0a:54:16:f4:18:06:d1:e0:39:92:f1:
         9f:07:c2:7a:cc:ba:e2:cd:de:69:2b:b5:4d:9a:db:3c:08:65:
         96:fe:46:26:bf:21:07:b4:44:ec:8e:9d:89:0a:54:56:51:01:
         7b:c0:86:63:0b:70:43:49:31:34:42:5d:22:b5:e3:3d:a5:28:
         3b:e7:9f:b9:a9:ca:a2:9c:09:16:58:e5:ac:7e:ba:57:5d:82:
         6a:07:e0:8f:67:8a:45:cb:b7:54:66:a0:74:53:0e:38:c5:0b:
         90:4f:8e:d1:f5:6a:cc:16:9f:d1:72:07:5f:b8:26:5c:38:e9:
         89:0c:e2:ce:16:84:c7:f8:5b:c7:46:8a:f6:97:95:da:2b:2c:
         c9:e5:d1:47:8e:62:18:04:38:72:46:e8:dd:94:55:e7:de:8a:
         22:4b:3d:be:ac:e6:8d:bb:01:e6:62:9e:95:3f:4b:3f:a5:7c:
         d3:6d:99:99:b4:6a:ac:a3:3c:fc:a7:f9:80:84:da:a0:a6:b9:
         10:aa:3d:bd:90:4a:a0:a7:b5:8c:d0:c4:e8:91:74:7a:57:bb:
         e7:0b:3f:ed:d1:93:74:d1:22:3b:99:32:40:0f:a0:08:b3:c9:
         fe:8c:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----