Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File:                     MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier:          QYDSOUsNB/QyCA2U22/sDn8OXxTpFdCUeEI59dgvZAY=
Subject key identifier:   96:10:D4:5B:A8:13:A4:85:7C:5A:59:9E:64:BE:DA:D4:F0:FD:81:E0
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer:       /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial:       01962F064FA0C230BCEAB7AB2992F01F223B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
                          2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: qq4iGQ2NLn2WEvGBIJs2YQ1hPZj7G/D1x0BVO/zJv84=)
                          3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:a0:c2:30:bc:ea:b7:ab:29:92:f0:1f:22:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=9610d45ba813a4857c5a599e64bedad4f0fd81e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a6:74:94:d2:e4:d7:92:c8:f2:cd:51:3e:21:
                    33:b6:91:f1:8d:a1:89:1a:a0:dc:1e:81:70:d6:02:
                    76:f3:be:f3:5d:f1:3d:21:d3:00:6c:69:ad:c4:b7:
                    29:b9:b9:17:4f:30:46:de:2f:6b:a5:a8:56:26:de:
                    52:ff:7f:b0:ab:1a:43:a0:b5:34:7c:d6:03:47:ec:
                    b1:d5:f1:87:26:4e:4a:1a:e0:08:2f:26:36:df:7f:
                    0d:e7:4b:4a:e6:de:32:e4:95:17:83:6d:3a:ca:f4:
                    14:83:ed:49:aa:c2:ce:13:db:fa:76:de:0a:1a:a3:
                    3c:6e:b6:be:23:3b:c2:d2:f8:1c:c3:b0:6e:9d:d1:
                    78:26:f6:20:d6:80:9b:a6:f5:ca:a8:21:c6:87:7c:
                    b6:f2:17:03:c0:30:2b:51:f1:0e:b4:2b:91:aa:fa:
                    28:c3:27:71:77:bc:62:02:8d:e9:93:60:98:58:a5:
                    a5:21:1f:9f:58:cd:e6:95:3c:1f:be:d5:f9:ca:be:
                    ba:29:2e:b8:07:2a:58:15:38:16:05:c2:33:13:47:
                    58:82:75:68:93:1d:e7:d3:5b:6f:4e:89:b1:d5:88:
                    c2:26:9f:36:7c:73:ec:21:14:96:56:45:99:79:31:
                    d2:73:1e:9a:8d:bb:e3:10:da:04:19:db:1f:f8:b5:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:D4:5B:A8:13:A4:85:7C:5A:59:9E:64:BE:DA:D4:F0:FD:81:E0
            X509v3 Authority Key Identifier:
                keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:6c:7f:00:1d:a0:54:32:ca:15:6e:c2:fc:7d:77:74:96:
         8f:58:f4:40:74:ad:ec:4d:3e:7d:5a:57:06:72:86:8a:f1:45:
         f7:80:aa:6f:53:71:a4:a6:ed:53:9f:01:07:8d:4e:37:48:2b:
         b5:51:7e:32:90:f2:6d:3d:af:bf:97:f3:0a:48:e9:9e:e4:f2:
         9f:22:ee:a5:8f:de:d3:1c:1d:78:68:b5:44:7f:5c:67:b2:fb:
         32:87:83:eb:0f:e2:7e:c4:fd:70:f2:cc:c8:09:e0:f1:c0:b9:
         cc:a5:9e:2f:67:76:06:ff:29:95:22:df:84:39:dc:a2:1a:bb:
         23:82:c3:86:ae:b3:7a:eb:aa:53:3d:9d:f1:01:2f:9b:e8:18:
         0f:fe:5d:b6:55:97:da:a8:18:7a:8d:55:86:df:ea:27:b1:0f:
         1c:7c:36:a0:53:4f:45:77:96:e3:b2:ef:e2:7d:4e:29:9d:7c:
         82:31:fc:44:e5:e4:3f:57:6b:c3:03:11:a6:60:c6:c2:24:fc:
         2f:49:ab:42:80:99:1b:7e:84:43:15:50:71:12:00:ef:e3:6f:
         57:91:a9:85:75:63:f4:b3:cc:d0:f5:3e:01:eb:b4:c9:fd:c2:
         f5:22:b7:85:8d:c1:9c:f1:65:bf:b6:0f:7b:ce:36:fa:2e:5d:
         75:85:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----