Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File:                     M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier:          JCsVI/Ib9KJ9PfLW0+5jsoygaNrLNTycK8SLS1bHMFI=
Subject key identifier:   4D:7E:B8:06:E9:5B:F7:7F:9F:4A:6C:02:CA:57:DB:54:43:7C:F5:F9
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer:       /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial:       01962F068BD3712FA03F4CC3630B1FB71A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number:          0CA6
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: M8vbolbqC89zC+PqTRvO+NnBZvOhQ579p2MBCpKSdxI=)
                          2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:d3:71:2f:a0:3f:4c:c3:63:0b:1f:b7:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=4d7eb806e95bf77f9f4a6c02ca57db54437cf5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:81:01:15:17:a6:d1:e4:4d:a6:2e:f2:11:
                    f0:f7:dc:bd:73:43:4a:de:01:08:51:b2:fc:f7:86:
                    69:01:d9:e7:bc:a3:ae:63:d7:56:11:1c:f7:9a:f9:
                    e8:43:0a:24:39:09:a2:3f:ca:b9:f1:8f:e7:86:20:
                    e9:93:87:13:ec:f8:ec:f6:a0:d1:71:75:e4:02:f9:
                    b7:33:a6:32:2c:4a:d8:e9:21:7a:d1:22:56:5d:17:
                    b3:ea:37:d6:b5:6e:f9:f8:6d:91:d4:60:f8:9d:3c:
                    3b:92:c6:2f:95:e0:a3:8f:68:5f:76:b3:cc:72:fe:
                    96:10:74:69:08:05:fb:66:24:59:4f:b4:de:97:66:
                    17:74:00:dc:97:fa:a8:b3:ab:2b:87:44:e2:0e:ee:
                    a5:47:bc:0f:40:7b:7c:8a:5c:0e:6a:7d:94:f8:02:
                    f9:61:a6:3f:b4:c3:22:5b:d4:91:8c:d7:ef:65:6b:
                    67:8d:af:9b:42:8c:89:ed:e0:fd:7d:8d:fc:f7:cf:
                    1f:36:27:be:ff:aa:2f:34:08:e6:07:07:b0:93:90:
                    d9:71:dd:40:8d:54:08:da:9f:48:e1:7f:c1:7f:69:
                    4b:0f:89:b1:be:a8:f2:3d:e5:36:98:62:a5:5f:cc:
                    7c:90:4f:c9:04:4e:6a:3c:f1:9d:c5:38:0d:4b:1c:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:B8:06:E9:5B:F7:7F:9F:4A:6C:02:CA:57:DB:54:43:7C:F5:F9
            X509v3 Authority Key Identifier:
                keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:f6:92:77:ad:97:8b:13:86:c9:c5:d9:fe:fe:be:b7:be:
         da:9c:05:6f:56:ba:e6:7c:f4:cc:3c:be:d3:d6:f1:bb:e2:dd:
         6c:8f:ce:ea:b0:b7:4d:1d:74:ce:fb:21:d2:ed:dc:e9:db:11:
         82:73:08:76:1f:b1:d4:f1:12:a6:ed:0e:d5:84:e1:b7:5e:a6:
         19:6c:dc:36:a6:a0:4e:19:a2:09:24:c6:cf:e5:e3:d3:04:34:
         f1:95:e6:d2:6d:53:bc:c9:79:a8:51:15:0b:d8:0a:7f:3d:6a:
         0c:db:7a:98:16:ae:ea:1b:54:10:76:0d:66:61:bf:88:fa:77:
         47:17:ea:8d:51:5d:99:7b:1f:69:26:f8:7c:f8:da:ba:e1:33:
         53:f7:a1:b0:17:8d:30:25:e3:ab:4d:30:e0:89:48:a7:a1:aa:
         dc:9a:3f:e0:fa:c4:e9:67:db:1e:8f:3e:4f:6d:76:79:a0:68:
         02:36:3a:5a:e4:37:68:84:40:8b:68:99:8e:5f:47:64:51:b2:
         51:f8:12:70:e4:7e:df:aa:90:74:39:59:b3:e0:92:51:3d:e2:
         10:30:de:a0:7f:c0:85:68:4a:df:bd:87:ea:70:e8:58:a0:af:
         cc:15:33:86:61:a0:53:f0:68:89:1a:e0:fa:5d:27:44:70:49:
         2c:de:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----