Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File:                     33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier:          Kx9jAgopgvTYq/U6qc/7JVY4zHb+0Xb40A93kBbDeGA=
Subject key identifier:   BD:92:B2:0D:CB:3A:D4:E5:B4:51:EF:03:39:A7:F7:0E:3F:61:F7:ED
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer:       /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial:       01962F743A466CAD6164D0E372E6DE596D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number:          1341
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: QAMa4uDTr0tQngFnsBiXXGkQoXC8Sv6xQboOixhusb4=)
                          2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3a:46:6c:ad:61:64:d0:e3:72:e6:de:59:6d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=bd92b20dcb3ad4e5b451ef0339a7f70e3f61f7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:a8:1d:44:42:fb:18:50:ef:2f:00:51:3c:
                    03:8e:6d:73:04:59:78:9f:ea:67:b6:66:9a:6f:70:
                    12:79:be:5d:d4:7f:2a:e7:a7:06:b0:7f:99:08:96:
                    e9:79:c5:41:74:44:ef:33:cc:58:b8:b4:b4:bd:03:
                    aa:78:7e:99:35:6e:c7:c2:6a:6c:f9:87:5f:0f:5a:
                    df:2a:75:6d:99:51:ee:2e:60:8c:e3:75:18:cd:82:
                    20:ec:2d:06:1b:f1:d4:8f:46:cf:99:30:62:b1:9b:
                    17:fd:df:dd:f6:ef:40:97:8a:ae:85:fe:82:6c:e2:
                    82:89:2e:11:1b:58:58:2d:11:87:ae:ae:32:62:4b:
                    7a:cb:b5:cb:ad:1a:ee:00:40:f1:3e:8d:50:d2:11:
                    62:13:8a:8b:fb:4d:b1:54:3e:2a:f1:bb:89:71:d5:
                    1b:d9:88:1a:24:30:3a:31:11:3f:21:02:95:a5:65:
                    fc:cc:74:9b:cd:70:29:e1:43:93:6b:0e:a6:a6:a2:
                    6a:1c:e9:43:2f:68:af:f7:2c:6c:11:e2:ac:07:13:
                    69:26:9e:c9:6a:cc:e9:68:93:ad:e1:30:4b:50:0d:
                    6b:66:84:9d:f3:97:7c:d4:e8:11:01:35:dc:09:ad:
                    d6:51:2d:48:70:26:65:36:6e:ca:0c:86:6d:5a:5a:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:B2:0D:CB:3A:D4:E5:B4:51:EF:03:39:A7:F7:0E:3F:61:F7:ED
            X509v3 Authority Key Identifier:
                keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:4a:ff:68:41:ed:c0:19:33:6c:33:48:44:31:07:45:74:26:
         c4:83:13:43:42:c1:8c:34:79:0a:bf:44:83:0c:fd:77:e5:f2:
         3b:57:c8:01:12:73:93:10:77:21:60:fe:ab:1f:8d:fd:ca:5c:
         64:ef:2a:0a:01:0b:ba:99:bf:c5:91:02:38:73:d8:45:3a:98:
         eb:8d:f4:74:f2:29:2c:09:da:2e:ea:09:6e:93:06:ef:90:8b:
         a0:c2:e9:0a:a3:38:bb:5d:65:9d:02:af:1d:be:d9:0f:0e:87:
         c7:c8:42:18:36:2c:e4:88:35:61:94:af:db:67:03:a3:02:94:
         ae:32:66:19:91:83:5e:95:b0:79:78:8f:46:9b:9a:72:b2:0f:
         36:1c:96:1b:80:81:8c:14:99:03:88:a0:e9:89:1b:c1:f3:a2:
         ad:75:a5:90:4e:87:ef:25:4c:90:a0:0b:66:61:33:67:65:e6:
         f9:50:91:99:b8:d2:a2:5c:75:0f:57:67:24:5d:d1:9b:59:0d:
         cf:36:34:3a:3c:f9:df:75:a7:15:c5:e6:60:e7:2f:5e:e6:a6:
         93:40:41:32:b1:78:bc:3a:6f:3f:fd:eb:38:6a:46:23:dd:7f:
         62:3b:3f:cb:5d:4e:ca:9d:32:e0:fc:f1:41:95:fa:69:b4:64:
         17:d2:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----