Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File:                     MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier:          YIPCb24myrgLJ9aZaUb/HEyXgvMn7W1FPFkNR9jHOJE=
Subject key identifier:   2F:69:93:A3:59:8B:0F:DE:54:44:7C:6D:DF:33:CF:CA:4C:F2:8C:BE
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer:       /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial:       01962FAB30E4781421A01277284082937C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: rIUPNc5Uvl6sC2l/AdSSbodsda6MvOrJd2NdFX3V2Uk=)
                          2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
                          3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:e4:78:14:21:a0:12:77:28:40:82:93:7c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=2f6993a3598b0fde54447c6ddf33cfca4cf28cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:12:d1:ec:99:c2:88:ae:d4:b3:67:af:61:
                    22:d3:0c:41:14:96:53:8f:e3:18:08:f8:61:3b:f3:
                    c5:6f:63:ab:b9:9e:f0:a2:83:99:10:f5:48:78:86:
                    1a:8c:f4:bc:b8:3b:47:fb:ba:9d:15:cc:d0:ee:41:
                    a9:a9:23:16:7e:0f:85:8b:ad:75:3f:d3:9f:0d:57:
                    d5:31:80:c3:23:a5:f3:d5:f3:49:d3:e0:b5:f4:85:
                    d4:26:f8:de:33:b7:c7:fd:46:04:63:f1:b2:01:68:
                    42:c5:93:fe:76:1f:f9:6c:0a:02:11:2a:45:cb:b3:
                    98:3d:15:b9:92:0d:83:e2:ee:6a:d4:7b:50:9d:e6:
                    95:2f:12:43:b9:3c:aa:a5:9c:7f:c7:d4:4c:e1:cd:
                    d9:40:65:e0:3a:6b:14:fb:a3:62:ca:b2:d0:5f:41:
                    c8:bc:32:7c:2a:7b:33:07:75:7d:c0:7a:82:ff:26:
                    c2:cd:6b:72:e0:e9:61:85:fa:f7:ad:ef:ff:84:f1:
                    c9:2b:be:a5:95:fc:11:58:9c:20:26:84:2a:57:8a:
                    92:eb:c7:75:3f:14:28:3f:8f:78:22:52:70:11:c4:
                    d9:fe:4a:8d:b4:78:f6:5f:84:f9:1a:89:45:4e:ce:
                    6d:59:9a:9a:d6:7b:61:60:ef:06:2a:c2:19:c5:c3:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:93:A3:59:8B:0F:DE:54:44:7C:6D:DF:33:CF:CA:4C:F2:8C:BE
            X509v3 Authority Key Identifier:
                keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:6c:ec:e2:c3:a9:34:b6:88:47:f9:34:5c:80:7d:9b:4d:
         6e:ef:a0:a2:69:44:f1:8a:6c:fd:c1:10:dc:d5:01:c2:71:13:
         6e:43:8e:1a:4c:57:49:0a:d9:9a:3e:5d:1b:26:06:9b:ae:54:
         36:92:8d:99:b7:42:7f:59:40:43:2c:cd:dd:49:a6:a0:51:4d:
         f6:fc:0b:e3:6d:7d:79:0f:22:fc:9a:3f:41:23:54:81:c9:42:
         5a:50:6e:e4:4c:31:ba:58:a2:1e:be:97:ee:57:5f:43:4e:b0:
         5e:f6:ab:2e:18:dd:7f:73:c9:d9:06:ef:7b:32:72:a6:46:ed:
         fe:4e:1c:55:0b:63:f9:1e:75:9b:72:7d:fa:7e:1e:5d:bf:f0:
         de:46:a3:9d:a7:74:ce:06:a6:45:6e:fb:97:3b:93:ae:fe:db:
         41:d0:8c:56:c8:1b:f1:28:04:0f:89:69:9c:6d:7f:9f:42:40:
         d9:fe:6e:90:50:ae:77:5e:04:6c:2d:35:f9:b8:9b:9a:c1:93:
         81:b9:59:b6:8b:79:76:ad:e9:ce:9f:56:8c:c3:07:41:94:75:
         d4:29:a1:9c:d5:1f:df:ff:4a:fd:e6:81:ad:6d:c8:e2:5e:22:
         e5:6e:89:b9:dd:80:f9:61:29:c1:6e:74:f0:12:c3:22:2b:d2:
         f0:78:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----