Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File:                     Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier:          NSMZDDikziIryGoYS/vQgq7rI0wKtiPJwDbilb1BA3E=
Subject key identifier:   21:AA:10:45:F1:76:6C:C3:D5:41:F3:B1:51:9F:F1:DF:1C:2D:7B:B9
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer:       /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial:       01962FAB1C5F688A189C3993A5B020878D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number:          1029
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
                          2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: ANRhsm2+S263+8Oo46kfMaFFUkFsyEr5i4CbHe+bTX4=)
                          3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
                          4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1c:5f:68:8a:18:9c:39:93:a5:b0:20:87:8d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=21aa1045f1766cc3d541f3b1519ff1df1c2d7bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:33:d4:c5:db:c7:d3:48:2c:6f:65:31:1f:
                    e2:22:0c:b3:b9:8c:7e:78:d4:d6:80:5a:83:bd:d4:
                    aa:aa:a0:77:24:55:7a:56:c2:f8:cb:88:55:3f:c1:
                    2a:b6:06:83:a5:f8:2c:a3:ab:f5:c0:0e:10:d7:6f:
                    5b:8d:8f:d7:ea:c5:a5:49:64:93:0d:f5:05:ca:5f:
                    23:78:49:61:78:5f:d3:79:bc:61:f8:62:90:d7:75:
                    5a:1e:43:78:fb:20:7c:fe:e3:3f:16:c4:23:fe:97:
                    9a:84:e4:ea:49:26:6c:a2:c3:6e:8f:fe:29:34:42:
                    28:1b:6f:1d:ab:ae:2a:a2:79:9b:48:35:de:7f:ce:
                    fa:c8:ce:32:2a:47:a2:0c:53:a3:b6:69:64:3e:17:
                    32:f7:72:46:22:ca:0f:7a:81:30:7c:d8:2c:0b:68:
                    ca:45:71:39:26:dd:1b:d2:93:7e:e8:b5:55:d8:8a:
                    d1:bb:46:bc:94:bb:fd:0b:1b:d7:e9:35:b2:91:9d:
                    8b:fa:04:06:69:19:a0:cc:37:67:16:cc:dd:96:1e:
                    d5:e9:ad:5d:54:97:85:64:82:84:d6:fe:09:e9:77:
                    c8:84:da:7e:fd:1b:33:9d:b5:b1:4a:d2:db:2b:16:
                    50:49:68:02:92:78:eb:62:2c:e0:9c:ed:d6:9b:ae:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:10:45:F1:76:6C:C3:D5:41:F3:B1:51:9F:F1:DF:1C:2D:7B:B9
            X509v3 Authority Key Identifier:
                keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:72:90:58:a3:07:93:df:aa:1c:bd:c3:01:67:ba:8b:13:
         02:6b:91:d1:b3:fb:20:56:2e:a5:fd:a0:ea:91:63:d0:a6:97:
         be:f4:1a:2e:1c:ef:30:f4:40:25:a8:7c:41:c6:58:90:3d:af:
         e9:6b:87:ab:6f:bd:36:ee:35:aa:a2:d0:23:57:d2:cf:f7:09:
         53:26:90:bb:ff:45:21:17:30:1b:c2:fb:c8:a1:7c:07:1a:eb:
         ba:2e:9a:2f:6b:d7:e9:91:22:58:f4:8a:73:7a:8f:11:bc:5b:
         50:69:f7:8b:2e:7f:34:9e:71:ee:6e:88:38:a3:06:e7:72:85:
         83:57:9c:f9:37:9f:a2:f5:6d:9e:eb:27:a1:a6:2c:28:a8:b0:
         8b:56:be:df:f0:94:22:8e:5c:43:97:73:da:05:b6:85:03:97:
         ca:b2:c0:61:0f:27:b6:9e:0e:c0:45:5e:48:43:f7:d1:b2:e5:
         c7:e5:ed:c5:94:4d:d6:1b:fc:5e:f5:a3:3e:c3:d8:40:92:88:
         43:b0:77:5b:9c:ca:c5:91:7d:f3:5f:e4:1b:90:80:0e:95:68:
         ef:d7:28:8e:01:27:36:7b:53:f4:ad:29:3c:99:fd:cf:3b:b7:
         a6:e2:c4:9b:9d:4a:40:3a:d8:cc:5f:d7:0a:ee:93:d5:a4:94:
         19:ee:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----