Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File:                     M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier:          FisEeshKiFGySE00+CWTvZOuhSPasGI8zzpwMcdR2yw=
Subject key identifier:   0B:18:28:00:C1:8B:CF:8D:EE:82:34:FF:0D:B3:9E:E3:CE:1A:82:FA
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer:       /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial:       01962F06C43B986DFA16CE3A665540458638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
                          2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: OKJpTFUi0iYTGAZrutAvJa6LgwwbPOe0RgDLPuwC0rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:3b:98:6d:fa:16:ce:3a:66:55:40:45:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=0b182800c18bcf8dee8234ff0db39ee3ce1a82fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:fa:5f:02:ea:c7:fb:ec:57:04:1e:86:5b:
                    10:bf:f0:ad:21:10:e7:d8:82:0e:02:15:d0:9b:3d:
                    a2:d6:4a:7d:49:cb:d9:3b:5c:78:90:75:45:77:97:
                    42:1e:fe:c8:59:de:23:53:c5:41:de:f5:52:d6:44:
                    0d:b7:a5:ea:ff:d1:6e:c7:9f:42:44:af:ba:aa:54:
                    3a:a6:0b:15:0a:de:86:f3:10:d9:1b:cb:2a:24:8b:
                    d6:4d:c3:a2:e7:ae:52:56:f5:bb:d5:40:51:56:73:
                    21:aa:e1:fb:4c:11:4b:87:1c:96:a0:b7:d8:b6:fd:
                    4b:69:16:6c:b4:39:03:a5:21:89:85:72:7e:a6:0c:
                    8d:f3:b8:0f:73:82:c5:19:b5:9b:d4:54:6b:c2:d9:
                    13:4b:0a:13:94:08:ff:27:d4:9e:5c:60:5d:ec:96:
                    50:6f:80:e8:f1:d6:59:22:ad:2b:34:91:bf:d6:cc:
                    96:bc:8f:68:ee:ed:fd:cc:97:b6:df:77:e2:6d:64:
                    f9:3c:ad:84:a0:57:51:e5:46:ab:24:ab:3d:c7:98:
                    e7:cf:e9:fc:1a:a6:c0:07:0b:05:02:d0:07:6c:77:
                    1a:1c:30:89:c3:60:db:ed:d5:eb:79:64:dd:36:aa:
                    de:3c:39:8b:5b:f3:45:c2:be:c7:9a:d6:11:82:1b:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:28:00:C1:8B:CF:8D:EE:82:34:FF:0D:B3:9E:E3:CE:1A:82:FA
            X509v3 Authority Key Identifier:
                keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:55:f2:3a:e2:68:00:a4:46:73:db:9a:0e:24:7e:72:56:05:
         47:b4:04:1c:79:8c:88:90:76:85:12:29:92:02:dc:86:8d:93:
         46:39:21:78:60:03:f7:f4:a3:d7:94:04:1d:8a:37:06:e3:53:
         03:7e:0d:7c:78:6c:dd:16:9e:59:1e:14:39:f9:e7:12:6a:9a:
         86:3c:67:c0:47:69:d8:c9:fb:18:88:3c:fe:7a:54:78:a6:b6:
         6a:80:bd:82:82:8f:f1:3d:95:3e:3d:3a:94:d7:e3:5d:4a:10:
         9f:6f:28:70:10:e7:3a:02:82:e6:30:40:b3:1c:06:98:c6:c0:
         58:94:2f:03:9e:11:c8:b7:3f:7d:5a:8f:91:86:31:7c:72:b7:
         be:2c:b8:95:f4:05:d0:16:3c:e3:50:7c:d8:ba:34:ba:81:d3:
         0d:22:54:59:6d:9f:c7:df:f6:a7:7d:15:a6:99:5a:27:00:71:
         53:1e:db:ae:6b:1b:67:2b:da:28:0c:03:76:d2:bf:90:c5:3d:
         78:3c:f1:de:f7:fa:96:47:1d:bd:f7:37:04:0c:2b:d3:11:3c:
         34:83:b6:0f:f5:26:a2:e0:e0:5e:73:6d:ec:ed:47:a7:df:8f:
         5d:e4:c7:b6:4e:87:90:93:ee:9f:d2:e3:db:22:78:cd:a5:b0:
         76:75:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----