Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          o+rKTQNOheHaPRFzP7zaIYz1C9/AnkJDBugnV6lSQ20=
Subject key identifier:   59:14:93:92:BF:17:98:B9:8C:AF:FC:80:20:77:B4:FC:75:98:41:25
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       01962DF3E97846129266A53773A52CB7C3D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: CyeXa70tg7zgdDIy1uc1evaBB9zumOOT1quWckX7PFk=)
                          2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:78:46:12:92:66:a5:37:73:a5:2c:b7:c3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=59149392bf1798b98caffc802077b4fc75984125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:82:f1:ed:ee:68:9c:5c:ab:d3:ff:41:30:
                    45:a8:46:ad:bb:a6:76:64:51:b8:9d:6f:7c:e7:15:
                    e0:9b:28:9b:55:1d:5f:2f:88:2d:dc:39:cc:7d:38:
                    d5:58:90:c2:16:18:e2:f2:ff:39:2f:16:81:c7:01:
                    9a:80:f0:77:12:44:78:5c:4a:80:e8:6d:ba:35:1c:
                    74:ed:76:53:28:fb:92:8c:be:8e:dd:cb:a7:d9:a5:
                    b6:b0:47:cf:66:68:5d:48:5d:d0:1e:4a:e1:8a:28:
                    2f:19:02:e4:ca:89:f1:ac:c7:40:8c:3e:0c:b0:ce:
                    3b:a7:88:e2:8b:74:3a:0b:b6:09:97:58:c6:c3:24:
                    35:5c:ba:aa:6e:84:0f:35:3d:8d:97:b9:1e:ad:a0:
                    bc:d5:b2:2c:d3:26:81:30:15:73:96:7f:20:d5:e6:
                    31:dd:28:de:52:de:bd:05:8b:cc:f9:cc:1f:17:76:
                    55:19:aa:ac:58:4f:a7:f5:54:9c:02:1a:5f:94:96:
                    40:ca:ba:b5:d9:1a:20:1a:3b:0c:50:bb:21:e9:e0:
                    3e:d6:3c:6a:e3:d2:d3:ad:31:f0:5d:d6:e5:dc:ad:
                    27:3f:2d:a5:dd:a2:35:f5:48:56:54:5f:55:39:cf:
                    f3:ec:9d:37:c2:b8:68:d7:6a:f7:c4:1a:6b:89:4b:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:93:92:BF:17:98:B9:8C:AF:FC:80:20:77:B4:FC:75:98:41:25
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:01:47:47:cc:5e:8b:a7:0a:8c:5e:27:bd:78:4f:17:8b:d2:
         f3:14:b8:04:50:96:6c:6b:f7:20:bb:cf:51:52:a7:2e:4c:43:
         85:b0:69:a9:f5:17:87:26:c9:2f:e8:89:8c:19:0c:6f:51:b3:
         7c:0b:36:48:4b:13:47:11:5f:1c:fc:dd:0d:fe:22:b7:c1:af:
         32:eb:fb:97:3b:77:c5:0f:e6:15:30:36:f9:23:d0:10:ae:e5:
         02:0a:2d:9c:ad:99:fc:b7:60:22:73:57:b6:ed:ab:3d:04:c3:
         64:ac:9a:60:a0:74:a5:9b:3e:af:89:15:09:0a:02:09:96:eb:
         84:82:bc:46:6e:5a:85:59:d1:84:df:5b:a7:ab:cc:69:a2:fb:
         72:ba:30:c6:65:51:c7:03:16:88:14:50:7d:e7:42:f1:6a:49:
         09:98:0b:14:61:81:71:4b:60:63:0d:04:85:44:d2:1b:60:7a:
         f1:c6:6e:1f:58:09:b8:ff:90:93:35:6e:fb:55:ae:f8:be:b0:
         d4:71:71:83:7c:3a:f3:03:8e:95:ef:43:7f:0b:ba:4f:da:f7:
         18:73:2d:5a:eb:d8:96:71:07:60:66:d7:0d:36:d5:d4:d2:7e:
         4a:8b:47:14:6d:81:80:40:f1:d3:75:a3:c6:04:54:14:9b:7e:
         79:df:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----