Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File:                     M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier:          Ifc3Q61tVKe5C6kBLztHso3Q5pivUn13u9yHirFPXFo=
Subject key identifier:   76:61:05:DC:87:42:03:69:AC:17:E2:7E:18:37:F2:0D:82:EA:80:D3
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer:       /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial:       01962E2AE1C862A0FCEED46C2B11CA90276C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number:          0C47
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 9rVgpptB2DltP3FzYdJopYyS8y3I/04j7V9Tyq2N77Y=)
                          2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
                          3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e1:c8:62:a0:fc:ee:d4:6c:2b:11:ca:90:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=766105dc87420369ac17e27e1837f20d82ea80d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:45:ef:3e:44:be:e2:42:f6:3d:70:45:fb:
                    05:9b:73:70:96:9d:d2:5f:d1:ab:45:74:d4:99:e4:
                    46:9d:b2:1b:de:23:e8:4c:f0:49:01:b5:df:6e:d6:
                    88:dc:84:5e:fb:86:74:97:ad:07:e8:82:e2:16:65:
                    7d:00:7a:d6:09:75:1b:e9:d0:28:75:c8:49:fc:aa:
                    c2:56:71:6d:cc:d1:ca:9b:f6:eb:24:bc:8e:80:dd:
                    14:08:f4:b0:d7:3c:6f:97:6d:1a:98:f6:d3:ee:76:
                    25:dd:74:61:df:12:85:b8:23:d7:27:53:95:9a:e9:
                    0d:58:00:ce:91:2e:22:a8:93:49:d1:29:e6:f9:75:
                    ef:7d:df:aa:a3:46:08:a5:39:4e:0c:ee:26:a5:fc:
                    47:9e:82:1d:2a:d6:12:26:32:59:89:f7:d1:7c:0d:
                    9b:87:ed:8d:61:42:d3:bc:d2:2f:9c:35:f6:ee:df:
                    74:5c:e1:bb:d7:b1:e7:76:0b:18:6f:80:55:7a:49:
                    20:0d:9a:1a:67:c9:fc:6f:12:24:61:79:32:49:93:
                    1d:b2:1c:0f:cb:f8:67:14:d2:e9:65:b1:2c:28:1e:
                    7c:56:ad:7c:ca:a1:c8:07:a6:fc:e4:f5:a8:cc:de:
                    20:5c:20:13:b6:4a:4f:1a:d5:55:8e:c8:fe:d5:97:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:05:DC:87:42:03:69:AC:17:E2:7E:18:37:F2:0D:82:EA:80:D3
            X509v3 Authority Key Identifier:
                keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:13:74:d7:10:0a:95:a6:f3:2d:f7:87:81:36:a5:13:9f:
         36:d3:e8:36:66:0d:11:cc:33:c3:13:04:4c:88:05:f8:bd:6f:
         5c:8a:13:3f:0f:31:e7:e9:dc:ba:58:92:fb:47:b6:1a:4a:03:
         b4:97:bc:45:a0:2d:e1:7a:2e:20:43:20:0f:16:19:d7:d2:bd:
         b1:c1:7f:7a:ba:3b:d0:28:a8:82:39:a7:f2:8a:06:23:68:42:
         54:d9:21:9d:17:e7:e2:34:55:37:83:cc:e7:03:d0:a6:a8:02:
         33:b2:ed:8e:11:ba:6e:2d:3f:36:84:bb:5c:c6:32:7f:eb:e4:
         28:c0:39:95:a4:b4:08:b2:3c:e2:3c:01:2e:91:03:8b:6b:9b:
         a9:5b:b4:b9:44:00:4b:34:79:32:41:20:a6:3e:15:4f:9c:9f:
         47:77:b3:10:20:04:5b:1f:ae:3b:e0:2c:5e:d5:bb:fb:0c:9c:
         0e:23:89:b4:af:60:af:85:40:2b:0c:4e:a3:13:b6:0d:9c:8c:
         0a:a2:f8:ef:fe:68:bf:a3:08:27:20:b0:ae:3d:f0:cf:bd:4b:
         ef:94:48:87:e9:10:d5:36:cf:bd:38:6d:b0:24:e3:d7:f3:12:
         8b:fb:30:6b:f4:c5:5d:49:f0:a5:4b:82:e4:b6:29:43:c4:ff:
         47:20:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----