Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File:                     M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier:          EYQJoPA4u1bSLPdlAXBetYRS4Q4g+miCLW0kRU1DMkY=
Subject key identifier:   C7:11:6F:AB:37:BA:5E:70:B5:9A:D1:82:10:32:07:8A:35:CA:BB:99
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer:       /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial:       01962DF3CEFA214F8BFBFF0A9FD31DD0FB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
                          2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: BGqtBb8H0Tospnk3wO2rh/oxg1BTwJXV78bv6p4jS7I=)
                          3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:fa:21:4f:8b:fb:ff:0a:9f:d3:1d:d0:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=c7116fab37ba5e70b59ad1821032078a35cabb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:11:a6:b2:49:e3:b3:5d:f6:9e:c5:40:b5:
                    fa:51:4b:9e:d4:c7:f2:68:f9:be:05:b7:e5:39:57:
                    9e:ec:49:b8:84:33:88:15:75:c5:91:78:6b:43:0a:
                    72:f4:0a:3a:bb:51:ac:91:28:c2:1a:ed:10:43:f5:
                    38:b5:61:37:d7:af:05:88:fd:6d:05:da:0c:e1:86:
                    ad:96:40:6f:80:ad:d3:40:0a:5a:c6:53:2e:3e:d1:
                    0e:b5:ef:34:ec:fb:4b:94:96:b4:a2:e6:cc:7b:a2:
                    b6:a1:27:a2:38:3a:be:0b:6b:f9:bb:df:8c:05:8c:
                    6c:8a:e3:55:eb:22:b9:ea:b9:07:87:65:01:30:c4:
                    0f:47:42:0d:2c:07:44:46:3c:87:42:b5:cc:8b:e4:
                    a2:0d:d5:7c:07:06:b4:be:ef:b5:fa:dd:9a:47:2f:
                    52:e9:51:13:84:2e:b4:a9:c7:a4:27:4a:31:a2:9c:
                    9c:ea:9a:47:f9:cf:96:4b:05:58:7c:57:99:70:9f:
                    77:c9:42:2a:70:c2:93:a7:71:89:cb:98:b2:19:8a:
                    36:9f:61:55:81:ae:c5:f4:72:ed:26:cc:5f:af:06:
                    a3:e1:1d:9a:9c:af:25:cc:30:c1:a1:39:4b:ae:fd:
                    15:fd:84:85:d9:27:e6:d3:54:0b:98:1e:dc:43:95:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:11:6F:AB:37:BA:5E:70:B5:9A:D1:82:10:32:07:8A:35:CA:BB:99
            X509v3 Authority Key Identifier:
                keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:84:39:90:5b:12:50:bb:62:d6:36:5d:d5:94:68:8c:29:ff:
         9d:71:a1:5d:7f:b8:4a:ce:b5:15:6a:8c:c2:1c:fe:e8:d9:58:
         cc:cc:46:14:7b:85:73:ec:07:d4:7d:d9:35:c0:42:51:31:17:
         2a:6e:6c:f0:90:1e:aa:d6:d0:fc:84:99:31:c6:19:7b:ec:75:
         a3:7a:23:0a:fe:74:12:b7:3b:28:f8:fd:33:ff:9a:27:7c:d3:
         84:0f:82:9e:17:5b:d5:04:c8:7a:5d:1d:e2:56:67:79:ec:23:
         e9:45:6f:6f:b7:34:11:b2:f1:e5:71:a2:74:46:e4:6c:6c:6a:
         c2:e4:66:bc:15:7c:8e:b1:40:90:c8:a2:e3:31:39:77:15:52:
         c1:4a:5d:66:08:d3:52:4d:62:1a:2f:15:e5:2f:4e:f9:4d:d6:
         b3:c5:20:ba:72:86:c8:16:88:8d:f4:63:e2:c4:86:c1:53:fc:
         8f:99:fe:5a:27:ca:d7:2a:95:30:88:80:e7:2d:0a:b9:a6:19:
         31:4c:8c:41:7f:f1:b0:47:36:61:c4:2a:60:c3:3b:59:1f:b2:
         ee:a1:3c:c4:89:2e:fc:47:c7:87:99:91:3e:73:d7:88:cc:58:
         dd:37:4d:39:e4:b8:26:7d:73:e1:20:b1:55:b2:12:90:c8:77:
         ab:d8:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----