Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File:                     M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier:          tkrz4bJtWGK6dPqKD/HXodj6wxz2CuAuZzwRLjcfLVk=
Subject key identifier:   34:78:08:95:2E:B6:D4:B7:DB:99:F8:A6:97:80:E6:21:CD:41:83:A0
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer:       /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial:       01962F747A8F9C338CC95BF7E6538CDEAC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number:          078B
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: Zk6UKcSPAjItekGPbuuJMChhG8hVe9W80q4MQ7HqRQE=)
                          2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
                          3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:8f:9c:33:8c:c9:5b:f7:e6:53:8c:de:ac:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=347808952eb6d4b7db99f8a69780e621cd4183a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:3d:23:76:50:f0:f9:06:36:31:f8:51:64:
                    aa:4e:ec:e9:16:ba:7d:4b:07:11:0a:43:be:08:6c:
                    66:7a:95:f9:c3:4e:4e:d6:49:e5:60:e3:32:c6:cb:
                    d5:32:47:29:39:22:ae:0c:19:5c:65:38:e3:b6:7c:
                    4e:70:9a:ea:64:e5:06:b6:91:8a:ec:3d:17:64:b8:
                    fd:4b:17:c5:f5:c9:ab:47:22:0e:5c:17:e5:4f:e3:
                    51:6b:33:42:17:fe:12:44:af:a4:b8:06:62:55:46:
                    92:b6:e6:53:48:c3:35:8a:f1:a3:c1:12:42:2e:62:
                    06:b2:cb:56:9e:46:02:ad:62:16:ab:07:e8:26:bc:
                    4d:93:bb:75:c6:fd:99:6c:37:ef:5c:9a:ba:84:dd:
                    b5:58:9b:80:89:d3:36:aa:34:9d:42:73:2b:ef:6e:
                    fd:b9:62:44:2e:f6:41:0c:96:21:58:10:7c:05:72:
                    e5:e8:b5:63:03:32:a8:a8:73:1b:94:c2:fa:3a:57:
                    ce:f2:4b:13:a8:76:7d:46:fe:5e:8d:1b:52:33:b8:
                    04:b2:a6:8d:e0:b0:bd:10:52:92:3e:74:3b:e5:10:
                    5b:44:37:09:62:6d:9b:2c:d3:f9:e1:8a:7a:74:3f:
                    35:4f:ac:2c:67:23:08:40:cb:af:e7:7f:33:59:f9:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:08:95:2E:B6:D4:B7:DB:99:F8:A6:97:80:E6:21:CD:41:83:A0
            X509v3 Authority Key Identifier:
                keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:14:fd:12:9e:49:0a:80:04:4e:e4:15:7d:8b:c5:bf:4c:5a:
         2d:b7:82:cd:14:d2:d4:02:48:d3:20:f6:45:fc:3f:06:72:7d:
         0e:72:97:da:c3:57:3a:61:4f:ef:c1:db:fb:1f:6c:d4:ca:08:
         67:fa:46:2d:1f:8c:17:9b:de:75:a6:bd:61:73:7a:ea:4d:88:
         6a:54:a9:86:43:62:b5:4f:36:ce:7a:4b:82:0f:ad:8f:0c:b7:
         b3:83:a9:18:29:8f:d9:8b:63:d6:1d:0a:29:5a:56:5b:9d:ac:
         0d:57:d5:51:ea:47:20:67:7a:1b:87:e9:39:f6:d9:95:ed:55:
         5f:34:51:b2:a3:d0:41:94:05:30:29:1b:24:a7:aa:10:90:ce:
         a2:4b:92:f2:74:f8:66:f6:21:61:19:a4:c6:d0:3b:1f:4f:74:
         55:11:f9:86:5d:9a:f6:53:9e:7c:ac:fa:25:8f:bb:71:8b:64:
         80:99:84:6a:ce:b2:b3:ae:45:17:e5:b5:4e:d7:21:c3:d9:42:
         cd:44:1a:b7:bd:01:b2:70:94:f2:9e:f3:70:bf:fd:f9:b5:f2:
         40:4d:10:6e:d7:15:5a:a0:bf:d3:ab:e3:c2:90:e8:60:24:ef:
         d6:82:b4:8c:a9:9c:6f:0f:66:12:cc:fe:1f:6a:58:e7:7c:a7:
         63:96:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----