Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File:                     MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier:          sGtdla8zy5KQ0U0mot4JUa85uEUz2IpD06J4ZCdM700=
Subject key identifier:   32:48:68:88:49:9C:2D:38:00:9B:2B:87:AA:EF:9F:21:4F:70:B3:87
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer:       /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial:       01962FAB06B7DDCE7FA5BB51A1BD3D998215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number:          ED
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: giXg6gt58cm0lq16xhGUG246jBe1ELKL5VHH82a1N98=)
                          2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:06:b7:dd:ce:7f:a5:bb:51:a1:bd:3d:99:82:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=32486888499c2d38009b2b87aaef9f214f70b387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:2e:89:65:66:ab:16:8d:35:53:72:4a:74:
                    ae:aa:ef:da:61:c4:a5:ec:2e:92:de:83:15:5e:07:
                    6b:1b:f9:e2:21:1d:a0:63:a7:22:3a:f2:ff:ce:a3:
                    d3:ef:ca:ff:db:91:00:81:ff:37:3a:2a:0f:6c:28:
                    10:6b:35:5b:04:8f:06:fc:8d:8d:e5:75:5e:f2:93:
                    bf:65:6c:d5:40:a8:a2:9c:26:b5:ce:7e:73:43:5a:
                    db:95:22:ec:bf:2f:ba:8c:47:60:00:a9:9b:68:a8:
                    ff:ea:dd:d0:02:b6:9c:50:d4:c2:e4:38:48:48:5d:
                    f5:eb:48:b5:ac:56:9c:ac:38:6c:1e:b7:91:c8:eb:
                    c6:fd:30:48:f7:7e:4c:97:59:66:9b:93:f4:5e:72:
                    58:f3:26:a2:4a:f1:ea:26:d8:fd:f8:e2:cb:a9:47:
                    3d:9e:f3:ec:ab:43:f9:dd:97:b6:01:74:8e:55:aa:
                    97:56:f1:4e:25:57:65:b5:cd:d9:7c:ba:65:0c:cc:
                    19:a3:db:69:c0:5b:18:fe:39:3e:36:60:7c:d9:ee:
                    ba:b3:45:77:f1:a8:0f:a5:66:09:b1:23:5e:6a:9a:
                    16:d1:20:75:6b:a8:1a:e6:4c:8f:0f:72:03:db:9a:
                    c5:ee:fb:5d:6c:6a:f1:84:d5:aa:96:62:12:4e:e9:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:68:88:49:9C:2D:38:00:9B:2B:87:AA:EF:9F:21:4F:70:B3:87
            X509v3 Authority Key Identifier:
                keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:05:9f:29:2f:cd:7e:32:46:ff:4d:fe:49:9c:a3:31:d2:
         ed:03:12:0d:a4:f1:31:65:3d:c6:b1:6d:73:13:cd:8a:56:88:
         56:2f:45:b4:a1:85:08:58:e0:09:c2:91:6e:10:d7:cd:77:13:
         c6:6e:47:b1:0b:b2:c1:53:db:ae:76:5c:ff:ba:4a:13:35:c1:
         3a:b7:79:6d:60:cb:95:f0:4d:1c:e1:ec:63:ac:28:a8:08:8e:
         b2:47:d6:b4:c2:22:e7:1a:f4:4b:a7:d2:29:f2:e3:d8:15:37:
         cd:55:91:98:ed:87:e7:3d:9f:20:23:6f:78:fa:0c:fb:22:79:
         83:6a:61:f3:7f:e1:30:72:fa:1c:49:d3:1d:a3:f5:1a:91:e9:
         ad:b8:7f:5c:3e:e9:f4:7f:2e:33:1f:c0:2c:9b:02:a6:b8:25:
         fb:dc:6f:38:c8:0e:6b:ee:b1:ad:61:4b:e5:67:80:9d:20:8a:
         bc:8d:84:ee:5c:18:3c:95:68:16:4b:45:5a:bd:b5:ab:01:7f:
         23:8f:a2:68:6a:ca:13:1e:bf:91:18:8d:25:ab:e0:6a:fc:07:
         21:80:0c:5b:ef:69:16:6e:83:45:56:fd:ef:25:f7:d4:17:e3:
         96:98:70:a1:d8:86:48:1b:58:d4:c4:0b:00:c2:1e:88:cb:8b:
         ea:56:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----