Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          XOI8b2hHRWEaqXQSpuRz44khSithk5tSUi+0Jpw+ylw=
Subject key identifier:   48:B4:57:75:81:70:42:D8:BB:0F:F3:18:9F:FF:30:AD:30:81:49:82
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       01962E99323E60D2EE57C7C9A3185EE78D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: myZMsmMeLclW/MsFCumbvVfurXH/GucW0MeYJGOxWko=)
                          2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:3e:60:d2:ee:57:c7:c9:a3:18:5e:e7:8d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=48b45775817042d8bb0ff3189fff30ad30814982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:9a:9a:12:1d:bc:44:46:84:21:f1:7f:38:
                    30:ce:69:2f:63:5a:a0:04:30:b7:ab:c3:27:e8:b5:
                    16:22:6b:ed:52:b3:4c:e3:02:3d:a7:2c:b9:85:3b:
                    ca:18:69:56:9c:46:47:15:d9:13:c2:a0:34:5f:22:
                    bd:c2:2e:d0:84:b7:7a:57:1c:b7:e7:66:c6:14:8b:
                    d8:8d:e5:a7:b7:08:e2:c1:f4:67:ca:12:0c:e1:36:
                    35:b5:b1:ae:de:98:ce:a2:9e:c9:ed:47:7f:f3:f9:
                    c7:13:c6:fe:32:cc:0c:29:cf:8f:0e:21:2e:51:cb:
                    92:f4:dd:ca:30:bf:f7:e7:54:5d:66:de:0b:18:be:
                    7d:27:04:e6:50:e5:47:1e:79:ec:8d:92:5f:eb:9b:
                    e4:83:e4:d8:28:cb:ac:72:1d:e3:ff:6a:6d:b6:2a:
                    45:f5:40:2c:ed:d6:cf:3b:4c:c7:88:28:f1:b1:57:
                    fc:d1:98:67:ea:1f:d8:e4:8a:1b:88:33:86:ee:b0:
                    92:bb:8a:02:ed:02:1d:96:ac:30:69:48:9e:55:2d:
                    fb:2e:42:af:8e:a5:34:5a:f7:4b:28:c5:80:15:c6:
                    51:41:11:ec:32:9a:26:7e:53:92:82:c2:ec:fa:eb:
                    e5:b9:1b:3f:f5:e6:cc:24:aa:06:99:63:b1:a4:59:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B4:57:75:81:70:42:D8:BB:0F:F3:18:9F:FF:30:AD:30:81:49:82
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:c8:1c:ce:38:2c:6d:e1:38:a7:f1:48:4d:59:be:20:fc:
         19:39:0c:6b:5b:bf:45:c8:a4:aa:34:45:66:74:dc:f8:4e:3b:
         69:e5:e9:64:aa:3b:a3:b1:8e:5d:7d:f0:a6:10:d2:52:f3:d6:
         2a:90:dd:74:c1:f3:5b:c5:fe:6d:92:56:b5:17:47:cb:70:2e:
         01:8d:8f:af:46:31:24:11:0e:25:0f:53:90:4c:f6:5f:ca:41:
         01:7f:df:24:ab:38:6f:de:35:dd:0e:d4:5a:93:c1:ca:2c:14:
         e4:44:de:8e:33:86:38:e4:78:e4:c1:bf:66:46:80:22:e0:69:
         b0:e0:d5:42:3e:51:fb:95:6d:40:ad:eb:81:18:d4:4c:7a:6b:
         49:f1:18:b7:0d:35:2b:cc:9f:e5:b2:e3:7f:5d:99:be:a0:14:
         5c:e0:8b:75:26:cc:35:48:24:93:2c:a1:05:4f:af:5f:2b:53:
         2b:79:63:d7:d8:be:0e:af:68:f0:e8:b5:fa:be:5d:42:e2:19:
         cd:43:dd:50:a0:f4:54:cf:0b:9b:72:39:97:6b:1a:c6:f2:45:
         69:ec:1c:b6:f4:86:ec:e3:a8:41:83:73:e2:9f:be:39:f5:d7:
         8b:a8:46:9a:28:6c:bf:5e:a0:a8:4c:ab:08:de:87:d0:d8:d4:
         2d:63:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----