Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier:          1DtVocR6FLh1bIjSWehyb7dW1iM1+Hm7o2ESKi6Dwjk=
Subject key identifier:   37:C9:50:1A:C1:61:70:50:35:1C:8D:9A:75:58:33:4A:77:72:12:55
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer:       /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial:       01962F3D68F2EBED5FFD04D555F533BE7CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number:          02D6
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: WwSWEs5Lc0eDro4nUp2EFSHVmJI2HmSA5bmUxFLxTQw=)
                          2: UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa (hash: 2A2ajEPDxijC/XTi8wtmJY4/n4ZoZiwiXE/zRByiGqY=)
                          3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:f2:eb:ed:5f:fd:04:d5:55:f5:33:be:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=37c9501ac1617050351c8d9a7558334a77721255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:7b:8b:43:07:4c:d5:2f:fb:86:af:2e:2b:
                    eb:41:c5:b5:d9:65:de:ee:7e:07:15:4e:4e:01:d4:
                    06:6f:32:58:ed:32:d3:74:9a:35:d5:52:40:ca:6b:
                    a6:e0:14:b6:bf:5d:c0:e0:ab:be:4a:4a:55:b7:33:
                    99:66:63:13:f8:36:0d:2b:24:fa:e5:8b:87:ba:4c:
                    b1:70:86:b2:0b:77:e0:89:a3:63:e2:eb:d5:65:35:
                    98:00:0e:61:50:21:92:82:50:68:66:82:3f:6f:20:
                    85:3d:39:a4:a6:b1:e6:0b:31:54:a5:27:ca:cc:93:
                    af:dd:65:a2:1d:75:d5:62:f7:4c:23:90:7a:5a:10:
                    da:7a:7b:8c:6c:18:26:fc:c5:e9:d7:e3:4a:01:dd:
                    41:68:1c:5d:15:0d:cc:38:79:d6:0b:8b:cd:8c:4d:
                    8d:a9:17:b5:5d:1b:77:a9:52:23:37:b6:7a:2e:c8:
                    e2:4a:22:ff:11:bc:85:c3:1a:7a:c1:aa:b2:c4:62:
                    a2:32:43:05:41:b1:aa:69:f0:4b:ff:54:a9:72:1d:
                    a9:b5:63:2a:92:d8:8e:e2:fe:2e:7f:95:e3:df:96:
                    97:8a:71:3b:2a:af:0c:98:74:0b:6f:02:a2:03:bd:
                    b3:66:b8:90:d2:96:b2:a8:72:8d:de:43:08:62:fc:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:50:1A:C1:61:70:50:35:1C:8D:9A:75:58:33:4A:77:72:12:55
            X509v3 Authority Key Identifier:
                keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:09:f7:98:5a:70:28:47:ae:ff:84:f8:93:cc:2c:05:49:
         b4:17:39:b9:c5:f4:de:61:5e:dd:a5:f7:6d:11:7c:93:d3:8a:
         46:97:ef:be:42:91:16:e3:11:66:0d:17:a5:bf:13:4b:78:c5:
         b8:df:ff:d0:7d:d4:7a:0c:92:6b:7e:ec:0a:a7:d9:a6:5b:2b:
         45:15:fa:6f:07:4c:f0:b7:6f:0e:b6:5e:20:fb:58:86:fa:fe:
         a9:f6:16:21:68:c7:e3:cd:b0:3b:4c:37:23:0b:9c:2c:ab:32:
         50:1c:a0:80:7c:97:c8:95:4a:f6:1b:e9:02:82:48:15:d0:d5:
         8c:d7:55:db:20:a0:3b:0b:2c:76:71:54:5e:2d:fa:b7:b6:2e:
         7e:54:6e:7e:49:ef:b4:65:ca:15:b0:eb:a4:82:09:af:ce:21:
         19:c7:11:d2:63:36:e3:de:fd:73:d3:38:ea:0c:7e:92:c2:f1:
         d5:4e:3b:b5:6f:04:3a:7f:f2:6e:f9:d2:92:ee:48:42:e1:15:
         5c:1b:ce:92:1f:6f:6d:d1:89:2b:73:b0:de:76:61:bb:5d:c2:
         5a:e8:e7:7b:14:b3:d6:e3:54:13:ef:cf:c0:54:f5:09:22:7f:
         5a:21:65:f4:92:47:3c:db:e2:38:2d:7d:16:86:8d:2d:ec:bb:
         93:0e:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----