Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.mft
File:                     M-okCE9ribBlVZkQ4DEetRS-uxE.mft (raw, json)
Hash identifier:          2HasN5C3v6rDmyZ5RfhnsvZfHLAN5uknfEmwa6KqZOY=
Subject key identifier:   F8:40:66:C9:64:F4:43:00:05:35:57:92:8E:0B:7A:7C:2B:F9:7B:1D
Authority key identifier: 33:EA:24:08:4F:6B:89:B0:65:55:99:10:E0:31:1E:B5:14:BE:BB:11
Certificate issuer:       /CN=33ea24084f6b89b065559910e0311eb514bebb11
Certificate serial:       01962DF3AF4A246ADFF177A47691C68FE716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-okCE9ribBlVZkQ4DEetRS-uxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.mft
Manifest number:          0821
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: M-okCE9ribBlVZkQ4DEetRS-uxE.crl (hash: MhunUmZODki7jtH0e08z/OCwBeptL/c0dmK0VSNHN+U=)
                          2: q5bfraBywGI6OWgME5lOUXQvdtQ.roa (hash: VPJfRwAlvqbFoPlw0asR42eLfzS3WBMbNuvc2HvQmEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:4a:24:6a:df:f1:77:a4:76:91:c6:8f:e7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea24084f6b89b065559910e0311eb514bebb11
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=f84066c964f44300053557928e0b7a7c2bf97b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:ee:db:46:e9:a5:73:9f:b8:ba:aa:91:7b:
                    df:bd:ba:2e:59:f5:e2:1a:18:34:6e:df:1b:cc:b9:
                    b8:d6:7a:11:2f:2e:8e:24:39:b0:a2:26:83:16:df:
                    03:68:ba:55:f7:67:4e:ec:37:fd:f1:4f:0e:0f:25:
                    69:82:f7:2b:6d:3f:c6:31:40:5f:a6:5c:e5:f4:3c:
                    51:1b:7d:ac:bd:d8:2a:be:6a:b4:f5:fd:56:12:a8:
                    b5:7a:d6:76:af:42:63:1f:85:68:fd:0c:14:a9:16:
                    2a:86:d7:01:11:27:f4:70:e8:62:aa:12:5e:46:6b:
                    7a:d9:e7:5d:96:c9:ae:e4:28:72:29:44:5b:4b:6c:
                    14:8f:76:da:7f:6e:f5:d1:2a:eb:eb:70:e4:dc:d0:
                    64:11:40:01:57:a0:93:59:d7:64:22:a0:7f:e3:ef:
                    26:5e:49:47:c6:12:a0:65:3e:66:79:c6:9d:f4:85:
                    9b:39:4f:05:60:4c:d7:2c:0f:d3:18:b2:67:37:18:
                    1e:99:4a:dc:12:36:c2:85:af:e9:92:bd:f8:7d:da:
                    3d:a0:af:5e:ed:32:22:dd:a6:41:1a:c6:25:65:a2:
                    14:7c:0e:5f:87:a5:9a:f1:60:b0:b9:ee:fb:d7:39:
                    80:09:12:b9:d3:c1:a9:27:97:32:3a:a9:d2:2a:c6:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:66:C9:64:F4:43:00:05:35:57:92:8E:0B:7A:7C:2B:F9:7B:1D
            X509v3 Authority Key Identifier:
                keyid:33:EA:24:08:4F:6B:89:B0:65:55:99:10:E0:31:1E:B5:14:BE:BB:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-okCE9ribBlVZkQ4DEetRS-uxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fe3fef-e176-451a-95d5-905196eba0be/1/M-okCE9ribBlVZkQ4DEetRS-uxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:77:b2:60:2b:50:f4:e3:42:fe:cd:87:6d:fb:48:87:b0:9b:
         5a:b0:73:e6:70:70:b7:e9:20:01:f8:95:71:bc:53:25:83:ff:
         fd:9d:71:fc:57:ce:53:ec:4c:78:d0:12:9c:97:7b:1d:c3:c9:
         ff:b3:e0:4b:6f:9d:23:38:5b:9c:3b:20:50:89:e6:d4:4d:3a:
         f7:56:89:d7:4f:d8:84:8e:85:07:fb:fe:ac:ee:98:36:ba:d7:
         59:1e:bc:be:ec:2c:19:35:40:05:c5:3e:fa:b2:3c:44:ac:01:
         f0:40:6d:a6:36:d5:9c:43:bb:e9:9f:71:3b:c0:a1:25:e5:1e:
         b3:48:1f:13:17:00:93:e7:88:0a:f4:56:af:4a:5a:9c:fa:28:
         50:ef:b9:07:bf:dd:cb:97:35:07:7d:b6:3b:f9:01:8c:b3:76:
         16:6f:82:c4:5c:f0:49:65:88:d5:3c:2a:e6:eb:d1:f8:07:51:
         ab:d1:6d:a7:a0:e1:0c:73:33:b1:0e:aa:18:6e:e9:34:de:46:
         00:1c:37:e1:99:ec:eb:07:ca:71:67:00:1e:10:b8:95:e6:a7:
         02:57:cd:2c:04:4a:d2:7d:8b:65:e0:16:f0:91:92:ea:ed:bf:
         e4:1d:38:78:a5:20:29:2d:34:c3:7a:18:69:ba:fb:0d:a2:cb:
         12:6c:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----