Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
File:                     czQP17PChWN63ADx5h4rjkAmWPM.mft (raw, json)
Hash identifier:          tr0wPyCNjcL4zRdv4rPBSq6/wH8jXGCG1HnUUys/4yE=
Subject key identifier:   1E:A4:73:6A:31:DF:92:94:99:E0:40:02:CD:03:B6:36:C6:7D:77:86
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Certificate issuer:       /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial:       01962E98F0A255E671B005B3222A9839F0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
Manifest number:          1068
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: HjTMoAYNnig_SLdG7cjgafMO6sM.roa (hash: vtEs32Udg21ECRrqFxXkvtH2fOMUI8ZhlpPEmcfn7YU=)
                          2: czQP17PChWN63ADx5h4rjkAmWPM.crl (hash: AKsIVHYu97lx8gL1ddnCoGhMW7wSDdQNs/59HrBCjN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:a2:55:e6:71:b0:05:b3:22:2a:98:39:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=1ea4736a31df929499e04002cd03b636c67d7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:c5:de:59:25:57:87:67:25:75:2f:66:49:
                    a0:8f:27:3d:3d:05:6a:44:54:60:50:4e:81:0e:f4:
                    b6:8b:04:5a:7f:a0:f8:67:72:bc:05:2b:32:cb:f1:
                    1b:29:6b:41:48:1c:1f:f6:9f:a3:1c:a1:8e:aa:5a:
                    dc:30:90:90:ca:9f:44:74:b1:40:f2:29:23:16:39:
                    c9:10:dd:4c:cf:d9:c8:d7:37:c3:8e:83:c5:16:d5:
                    01:6e:c3:4c:d1:00:1c:a0:84:1d:04:af:fc:00:17:
                    8f:0e:14:77:51:6a:0c:b2:1d:35:14:ee:4c:b4:e2:
                    58:d7:b7:97:f2:f0:6f:20:48:3c:8b:30:38:c5:69:
                    f3:c5:02:96:a7:85:67:f7:5b:70:c1:06:0f:ee:2a:
                    58:3c:6e:58:8d:10:50:eb:0a:83:43:5f:11:84:a3:
                    ba:87:13:c3:a4:4e:d5:68:26:fd:16:19:16:e7:9a:
                    0a:7f:49:51:42:7a:bb:8f:c0:52:61:4b:e4:2f:2f:
                    12:86:13:8c:a0:23:f3:7b:55:a2:b5:6d:72:14:79:
                    55:a2:6c:e9:bf:b8:a5:3b:a0:f6:d6:ad:f2:5b:f4:
                    d5:2e:bb:02:c2:f1:8b:5f:75:83:c1:16:0e:24:22:
                    93:77:23:19:d1:46:bf:37:30:89:68:c9:9a:ad:59:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A4:73:6A:31:DF:92:94:99:E0:40:02:CD:03:B6:36:C6:7D:77:86
            X509v3 Authority Key Identifier:
                keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:38:c3:04:23:3e:d4:34:65:50:7a:ab:f3:98:2f:a7:59:d0:
         8f:ff:ba:f4:8f:d8:e8:13:64:08:8b:6d:bf:c5:9c:ee:67:2f:
         0f:f0:61:7d:a3:2e:e5:d9:dd:a3:69:6a:1f:b4:70:29:d4:68:
         fd:f9:ad:42:71:37:9d:6b:b0:8c:bf:5f:66:50:64:33:60:dd:
         61:53:b7:1b:1c:e6:31:05:5b:36:56:da:42:25:6d:13:f6:df:
         cd:28:db:c6:83:4e:92:5d:61:d7:6c:9d:38:29:e7:02:2f:10:
         78:71:7d:5a:d8:47:43:d1:90:10:fa:c4:61:37:21:7e:be:45:
         57:80:6c:6c:6e:fe:f2:01:1a:33:4e:d8:d4:c9:36:c2:22:4d:
         27:75:28:b1:39:cc:08:dd:df:84:82:c4:84:cb:69:34:3e:b6:
         b0:c8:3d:bd:f3:f7:18:3b:2f:cf:10:b9:fa:74:94:fd:d6:40:
         ee:32:4d:ce:d3:60:06:a5:03:58:44:1b:07:51:3b:ba:24:0d:
         0a:84:fe:6e:1b:ab:9e:be:97:b6:17:76:25:cf:6e:55:29:5e:
         c0:82:c4:f9:e6:f5:4b:af:a5:6e:cc:04:e4:49:a1:7b:50:8b:
         9d:3e:d5:53:88:f8:ed:b0:4a:ba:3d:df:4c:66:77:19:f8:71:
         e2:6f:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----