Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          ppDUwO6pcC1okAeeCqbJaYxMCJMDvtH+mNO3YhFL1bw=
Subject key identifier:   D7:97:C4:AC:1F:B5:C4:A7:AE:44:D8:C8:97:17:FC:84:17:12:2B:4A
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       01962E99C68E5C08E50056C08AAFF579291B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: J4hKf25/xl+fvp/OhSo2v2XgFxU5oujwrtMRwYwZa84=)
                          2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
                          3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
                          4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c6:8e:5c:08:e5:00:56:c0:8a:af:f5:79:29:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=d797c4ac1fb5c4a7ae44d8c89717fc8417122b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:42:d3:de:3d:8b:73:fd:2d:e6:37:1f:27:
                    fd:be:b0:63:40:64:d7:12:a0:00:41:31:7b:30:b9:
                    f4:56:ae:d5:4b:94:58:82:1e:c2:b3:7a:d8:56:33:
                    cd:f4:d5:3b:0d:fa:87:a9:09:38:e3:4b:17:97:3f:
                    c3:86:96:f5:09:65:a0:cc:4e:49:e4:fb:33:3e:32:
                    ab:f2:b8:55:33:1f:80:3a:d3:84:ed:4f:7a:69:55:
                    6b:a9:5d:c6:3d:05:74:dd:e3:5e:d3:e3:54:51:b9:
                    97:a8:75:ed:ab:90:1a:43:a3:ea:7d:36:c9:b7:7e:
                    0f:5a:f4:98:65:dc:dc:f5:31:b5:6a:83:19:83:c2:
                    e9:55:74:67:4d:ae:00:31:96:63:82:b1:c3:9f:53:
                    80:2c:bf:07:e9:fa:d8:78:67:58:45:f9:33:47:21:
                    23:7d:31:8f:80:1e:d5:19:20:e1:81:6f:c4:16:61:
                    1c:79:ce:8d:64:aa:55:2d:3c:05:92:20:7c:6b:e8:
                    c8:ed:ab:0a:6a:5c:1e:72:7d:16:a4:cf:43:41:37:
                    86:f3:de:85:ee:67:ae:da:6e:9b:77:c2:26:d7:c3:
                    cc:09:14:81:1b:00:90:d1:b6:dc:fc:a1:02:20:ec:
                    63:8f:e7:13:b8:ab:71:a7:20:bf:a8:dd:ca:73:9b:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:C4:AC:1F:B5:C4:A7:AE:44:D8:C8:97:17:FC:84:17:12:2B:4A
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:90:5b:6f:44:34:85:27:c9:51:01:16:19:34:65:b5:58:
         fe:7d:15:75:80:ee:49:a7:b3:90:e3:e4:99:e9:90:cf:8a:c0:
         2c:16:be:53:3a:f6:6e:8f:fd:5f:a7:40:5a:3f:17:02:42:b1:
         a8:3f:ac:3d:4f:6f:74:45:56:10:94:c5:12:f1:0f:62:a0:46:
         86:83:16:f6:69:3f:74:75:07:f1:e2:51:6c:fa:a2:7a:15:a6:
         94:c5:20:fe:b3:3b:3d:63:0c:6b:a9:da:a4:c3:ac:96:c4:68:
         ec:6b:9e:6b:77:63:7e:12:d9:be:24:d5:32:dc:8c:3d:08:50:
         6b:42:2b:a6:fa:40:0f:a5:1d:b4:15:2b:12:4b:df:77:0b:7f:
         2a:b7:46:43:6f:ef:ee:cd:93:a7:f7:48:b1:1a:f6:42:ad:57:
         8d:1a:47:b5:22:8c:c0:80:7c:db:d9:b1:b9:34:6d:75:75:35:
         35:01:66:a9:50:ac:0a:47:ad:a9:55:2a:ed:b5:3e:3b:d1:f6:
         f9:1a:84:1c:90:27:52:5c:43:f7:cb:8b:ef:25:7f:5a:b6:fc:
         3e:04:39:a2:44:76:39:10:2e:9c:93:cd:a8:32:21:23:f7:c8:
         88:e2:7b:f6:52:46:06:fb:4d:d7:ed:61:1b:bb:20:99:1f:20:
         fe:dc:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----