Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File:                     M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier:          ifXcmr7n0JSdeD3K0APkn7qKYLwH7S+K8Bwn+TKYrJ4=
Subject key identifier:   D1:F3:53:DE:7E:5E:D2:AD:92:13:09:40:7E:77:60:F9:79:05:DF:FE
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer:       /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial:       01962FAB66F1CE3A96310E86CC2C1811198A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number:          050D
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: c46K6BGelumjvjxSjQ8TvTNwjTI7TKj+0xoE8/3ZOjc=)
                          2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:f1:ce:3a:96:31:0e:86:cc:2c:18:11:19:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=d1f353de7e5ed2ad921309407e7760f97905dffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:5a:95:8a:6d:2f:1b:d9:bd:da:cb:80:2f:
                    9f:56:83:bb:63:f3:c6:f8:62:57:77:f0:3c:ff:33:
                    28:98:0e:8f:ff:93:13:33:ca:a1:a0:80:ab:75:38:
                    a4:f5:be:40:35:87:15:2f:3a:04:88:2a:30:e8:48:
                    fe:0c:35:58:29:33:3d:9b:31:81:65:88:4d:ab:04:
                    25:82:1b:a9:a2:fa:4c:9e:47:d8:1e:32:ac:30:61:
                    f6:b1:22:e0:85:4e:79:46:57:48:6b:be:f9:41:2f:
                    08:c2:9a:3b:44:90:0d:d7:2a:12:99:5c:63:71:46:
                    d7:1a:ca:7d:8e:b9:4e:bc:a6:a2:cb:e4:ac:86:7d:
                    d0:10:c2:e1:7a:95:a6:12:eb:4f:fd:f9:4f:8a:e4:
                    33:dd:92:53:23:4c:65:f6:44:97:7b:7a:ef:60:09:
                    c4:55:24:b2:0c:4c:9a:b7:26:09:a0:d1:c2:66:8e:
                    84:39:b1:fa:a2:12:cd:b8:3c:21:3d:bb:50:37:f4:
                    f6:78:06:54:95:03:75:27:47:9e:c4:1e:b0:3b:3e:
                    0a:02:c6:a2:0c:ea:e9:69:55:ea:d2:0b:db:34:5f:
                    17:7d:bc:69:aa:7a:3c:63:be:7d:a0:fa:d9:dc:b9:
                    36:9f:f3:3a:76:34:9c:33:f5:f5:72:6f:7c:71:2a:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F3:53:DE:7E:5E:D2:AD:92:13:09:40:7E:77:60:F9:79:05:DF:FE
            X509v3 Authority Key Identifier:
                keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:88:a6:a1:33:51:ea:14:24:12:e5:db:85:d2:c0:cc:74:b4:
         72:d4:78:55:42:64:e6:49:08:e5:4c:da:f8:1e:44:84:52:63:
         7a:38:a0:91:5e:02:f7:e9:1f:cb:a0:59:d0:b7:63:dd:91:1c:
         12:9e:c2:0f:40:86:9e:6d:ef:a6:73:d5:2d:2b:57:33:d4:a9:
         48:ea:7a:7a:fb:fb:7c:2e:73:a0:22:e5:4c:fd:ae:13:02:ea:
         7e:f7:39:f5:2f:4e:f0:99:9f:d2:2f:fb:64:18:c2:1c:c5:60:
         46:f1:06:cb:b0:ee:df:3d:89:e2:3f:38:01:60:0d:a8:c3:82:
         67:da:62:e6:e1:cf:02:07:13:29:53:4c:b9:ba:1c:0c:5d:c1:
         0d:4f:14:4d:d8:5b:fe:27:c4:ca:75:5e:fa:a4:63:00:a6:6d:
         bf:c0:20:3b:94:cb:f7:f3:2d:2b:1a:5b:46:66:73:1a:2d:30:
         b5:01:af:45:1a:cf:32:14:74:87:aa:a8:3f:86:13:ed:2d:0f:
         b6:b4:34:98:6a:dd:69:30:a4:99:7f:16:e1:9d:11:ec:ca:7f:
         5a:be:24:f3:6b:0b:b6:aa:16:7f:9e:9e:20:46:0c:f3:2d:05:
         06:3e:e6:d6:2e:33:71:4d:11:e8:7a:ca:63:30:13:a1:59:f1:
         01:37:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----