Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File:                     M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier:          EhdWUDAPPCp9tsuQfQr1var6Kc8bTovgUnYY3B9nQLA=
Subject key identifier:   99:37:EA:BA:22:F5:5B:E0:36:9D:04:75:49:1F:4B:F7:90:2F:01:0A
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer:       /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial:       01962F3DC58FC1771C840C8805EBF8B66C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: VI8c12Yfx/dowAXGIAgn0x+PnPbKr9h5OS2XZT89uWs=)
                          2: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (hash: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:8f:c1:77:1c:84:0c:88:05:eb:f8:b6:6c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=9937eaba22f55be0369d0475491f4bf7902f010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:bf:69:68:06:d4:09:72:de:fa:b8:8c:33:
                    35:14:18:cb:99:1d:af:89:34:ad:fd:55:ba:8d:9d:
                    8e:6b:e1:c6:25:f2:00:e5:de:dc:f0:84:69:3b:ef:
                    35:28:07:77:45:20:be:a4:f7:6b:df:3e:59:3f:79:
                    8e:2a:f8:df:f9:1e:30:3a:9f:39:2f:dc:5b:18:27:
                    99:a3:f4:b5:94:05:b2:7b:86:20:25:d2:70:4e:46:
                    23:3b:42:dc:70:bd:53:5b:97:0b:c3:e8:c0:d3:bc:
                    b4:99:38:f5:65:6b:28:91:5b:3f:5b:2a:5f:12:eb:
                    b9:13:b5:31:a2:7e:fe:01:92:3c:50:15:38:1d:2b:
                    65:e3:d2:77:a3:2b:90:3e:33:40:5e:4b:7c:08:fc:
                    d8:e0:ff:22:6c:46:04:00:62:7e:61:52:b0:67:4f:
                    32:bb:32:e0:35:31:e9:9a:95:3a:61:05:96:67:99:
                    bb:c9:fc:b9:84:f8:bb:1c:f9:43:1c:d5:99:5e:26:
                    86:2c:38:70:65:77:73:d6:18:3b:a3:d1:cd:f3:fb:
                    9d:3b:ca:e0:97:52:59:9a:db:16:49:00:67:be:c5:
                    99:6a:43:6e:0f:00:64:d6:09:fd:3a:57:84:7c:c4:
                    1a:45:bf:da:86:2f:13:68:14:ec:d5:69:f5:6d:5f:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:37:EA:BA:22:F5:5B:E0:36:9D:04:75:49:1F:4B:F7:90:2F:01:0A
            X509v3 Authority Key Identifier:
                keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:85:15:6d:6d:83:27:57:c7:aa:3f:f9:35:85:79:d1:fe:
         4e:3b:2a:44:0a:8d:f5:d2:e5:1a:23:f2:9a:61:dd:24:14:22:
         8b:b6:32:2c:b5:33:fc:07:fd:ff:8c:97:dc:5e:2a:c3:30:58:
         e3:f2:af:76:87:26:0f:df:1b:53:42:7b:3a:77:52:b0:3b:d5:
         34:58:9c:1b:9f:8e:0a:91:8c:fe:33:f0:0f:d7:8e:7c:d6:46:
         b1:ea:4f:4e:cb:76:0c:41:f1:02:47:48:ad:7f:3c:40:64:00:
         6e:28:90:f2:59:6c:ea:25:d7:ae:98:91:2c:24:40:a4:b6:78:
         e9:33:02:78:24:be:fe:f3:1c:c7:b4:02:95:fd:aa:03:4e:f1:
         bc:98:20:60:30:f2:55:26:59:39:41:9b:fd:99:1d:3a:c2:03:
         8d:24:a2:f9:7e:26:aa:c4:83:a4:a8:fc:0f:af:58:1d:b5:a9:
         a1:16:34:4e:75:0f:7c:4f:90:dd:40:e8:e4:02:aa:a3:72:bd:
         7b:95:25:b7:6c:36:c1:c4:df:84:ee:34:25:c3:34:2d:72:40:
         db:4f:d0:52:52:ad:c1:c2:63:db:48:46:f5:08:b7:0e:68:79:
         be:31:0b:8f:ae:5a:53:22:e5:28:52:1d:f1:5b:19:33:f6:fa:
         9f:4c:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----