Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          /1Umj0i5qZCqPe0fY3Iq9MhL1oyVyUdOmD/yAF5Z20A=
Subject key identifier:   A9:20:5D:78:45:0A:23:39:F9:71:92:E5:9F:7D:57:7E:7F:14:A1:41
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       01962F743FF7BECCAA6FAFB87A4D1665952D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
                          2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: 2lEZJm7jA9XmhfBZB0z2/wEFfAdQFAfcYHrb+zjcz3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3f:f7:be:cc:aa:6f:af:b8:7a:4d:16:65:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=a9205d78450a2339f97192e59f7d577e7f14a141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:16:d7:ab:ae:ea:8b:52:cb:33:fa:3a:cb:
                    8a:4f:e2:c9:05:fc:d8:7f:38:e8:38:c3:74:50:29:
                    e5:83:d5:5c:d0:01:91:c3:de:6a:32:9e:a9:bf:4a:
                    32:89:03:99:cd:fd:0c:bd:79:69:ec:9a:9b:f3:4b:
                    e1:d0:83:e6:93:fb:ec:fa:92:15:14:5c:89:e6:45:
                    f3:f2:dc:8e:31:d3:86:e3:13:0b:57:98:c9:f4:71:
                    b8:90:d6:01:93:e0:44:8c:5d:ce:17:ed:6b:f8:6f:
                    77:99:30:8e:ab:23:8f:ad:8e:7c:e3:ea:98:13:4f:
                    64:d8:c7:ba:08:a2:15:9b:7a:c2:12:35:a0:0b:33:
                    2b:33:86:70:77:30:ee:6d:98:f3:a5:ec:6e:37:9b:
                    20:f8:2f:4b:3a:7d:37:cd:de:87:63:f4:ef:9b:33:
                    2c:89:dc:06:46:d9:e8:36:24:4c:19:32:b3:0b:24:
                    17:fd:4c:8a:63:d7:07:cd:4a:64:aa:bf:3a:0b:f8:
                    57:c0:d0:f8:11:27:e7:52:23:29:24:5c:41:a1:39:
                    26:06:d1:64:9e:e3:a9:36:31:28:d1:98:ef:a6:b5:
                    63:dd:c4:5f:ff:65:fa:d5:c1:9d:6e:1c:f7:07:ce:
                    ee:dd:7d:23:f8:38:21:77:f3:a4:f9:fc:ea:e0:f8:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:20:5D:78:45:0A:23:39:F9:71:92:E5:9F:7D:57:7E:7F:14:A1:41
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:d1:a2:cb:14:3b:fe:1d:59:93:12:5e:d9:10:fa:28:bf:
         12:78:8e:03:30:e9:af:93:78:79:62:62:1d:f1:a3:3e:02:ff:
         d6:2e:fc:48:58:63:74:c4:e0:05:5c:5f:b0:1a:99:0d:84:a5:
         95:ae:c8:40:3b:d3:e3:f6:ae:6f:6b:5c:3a:b4:c8:a3:f6:d7:
         27:04:b8:08:49:1f:b6:76:43:2f:e8:8e:6b:f8:2b:7d:9a:f9:
         68:89:67:7f:47:06:12:5c:de:42:66:2e:ea:b4:2d:d0:d7:53:
         b7:bf:e1:b4:4f:f4:57:12:a6:a3:1b:74:66:41:90:7b:07:94:
         bb:72:3d:50:9e:5d:7f:5c:74:9c:c8:4a:1e:c9:35:35:d9:11:
         ae:1b:f1:9f:4b:c6:0f:80:16:62:c7:ea:0e:b9:b4:3b:5d:b9:
         00:2c:49:9a:36:6f:e1:56:a7:4e:26:47:23:30:e5:e2:ff:88:
         37:3e:70:eb:e4:5c:9c:15:18:02:0a:8e:c4:e3:48:5f:70:2b:
         f3:e2:31:ce:87:e7:58:b3:d8:03:d0:4c:f3:e8:9f:d2:a8:5c:
         e1:a8:78:3d:14:06:ff:33:b0:10:f3:87:41:c8:16:29:77:47:
         e7:e2:34:e8:24:ae:49:7b:6d:74:eb:8d:96:3d:18:67:5a:1e:
         74:5c:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----