Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File:                     MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier:          +KsR5yXDsNhEeQQLiXnK4uoGkxd0r0y93BOxBZVmyxU=
Subject key identifier:   83:F1:F6:8E:89:E4:4E:89:48:49:E9:A0:FE:C3:84:86:CB:CC:C1:3C
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer:       /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial:       01962ECF67C6B0AD0891E026DB09F0B814B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number:          0738
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: JnbAYfF7MG7sLQi5zE0foaNOLd0mIE4AZpfNkiUvcbc=)
                          2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:c6:b0:ad:08:91:e0:26:db:09:f0:b8:14:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=83f1f68e89e44e894849e9a0fec38486cbccc13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:80:0e:fb:fd:cb:c1:0c:43:28:0c:83:ae:
                    c0:51:b3:44:14:86:58:ff:5d:d5:6e:3b:c0:a1:bb:
                    1a:1c:4a:5d:08:fe:e4:40:99:d3:59:da:0e:c8:b4:
                    a5:2c:69:bd:f6:db:78:9f:63:95:88:6c:27:bc:44:
                    fb:2d:5c:27:46:e2:b1:2b:5c:e7:a4:59:0c:c2:15:
                    dc:d5:9d:62:40:e4:7c:ec:34:f7:bd:46:f6:fe:0d:
                    ee:ac:1f:5d:12:b6:6e:0e:1f:e8:ab:f1:97:95:27:
                    6a:a6:3c:b4:58:07:5c:86:24:64:a9:3f:f8:19:2b:
                    eb:f0:77:20:4b:04:e1:63:a3:36:ab:c0:88:ec:08:
                    77:f3:0c:5c:3d:57:c6:37:2f:e2:e9:41:0b:99:1e:
                    c8:33:fb:71:26:6d:38:26:ac:e3:44:81:a7:5b:0a:
                    ec:e3:52:74:e2:b1:82:03:36:44:88:73:d5:87:c4:
                    b3:1a:d3:ab:18:8d:bd:a7:f6:02:7d:ce:43:09:60:
                    b1:00:08:b0:dd:b1:22:30:98:54:cd:e5:0b:3f:6e:
                    68:c2:b3:d4:c8:e6:12:dc:3e:f7:31:59:d4:59:8c:
                    67:a9:43:95:19:bf:dc:40:55:ef:9a:76:08:f9:f4:
                    a9:c6:35:17:1b:27:7b:15:b6:69:31:fd:34:6a:e3:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:F6:8E:89:E4:4E:89:48:49:E9:A0:FE:C3:84:86:CB:CC:C1:3C
            X509v3 Authority Key Identifier:
                keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d0:ed:8e:72:df:96:3e:5f:c6:47:c9:f8:d6:de:c0:b5:63:
         8d:b9:51:9c:a6:66:05:ff:8f:63:c5:05:7e:92:68:64:40:a8:
         d0:75:9a:70:15:4d:30:73:ba:16:79:b0:bc:ff:17:04:72:34:
         73:41:c0:f1:d4:99:d6:4e:2a:e6:86:98:50:70:fd:6d:44:a1:
         d3:b6:62:a4:41:66:15:52:e7:a4:a2:d9:b1:03:d5:0d:f2:a1:
         52:71:05:23:be:99:39:8c:c9:9b:62:78:63:5c:7b:3c:4e:67:
         79:9f:07:d1:9e:f1:21:89:4f:2a:c4:f6:5f:38:aa:a3:46:7b:
         1b:8b:12:97:f5:7c:c3:e8:83:3d:05:68:b6:a4:88:26:07:c5:
         a7:51:e3:04:63:65:84:ad:61:5c:52:bd:27:1f:c8:c4:7e:9a:
         95:ed:a9:d7:87:d2:80:81:12:37:a5:e8:d7:29:50:4c:42:c3:
         b4:6c:2c:ca:04:fa:ab:6e:47:58:64:08:58:3e:5d:66:2e:3b:
         ca:2b:10:31:a8:1c:42:bc:7a:46:09:fc:14:8b:da:2a:a5:7e:
         be:a9:5c:1d:f3:42:d4:72:53:db:c4:46:82:3b:b7:74:a7:00:
         98:7b:a8:ce:36:f6:de:f4:4e:7b:d3:a1:c9:d5:db:ef:cc:85:
         e9:31:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----