Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
File:                     MzNh-6hAkXT7PEgrjKJvI169IsI.mft (raw, json)
Hash identifier:          m5WJ7y71XtjbiapEkDeo+WpzHIHaLpfUNCQcOkyf3R8=
Subject key identifier:   38:B6:AE:1D:C4:83:54:0B:BE:F2:E6:F7:CD:D7:20:E9:D5:ED:2A:C9
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       01962DF3C9A680B6F03CC6287947D779DCCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
Manifest number:          11A1
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: 7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa (hash: RlyXBzHmtsm995ENs8O6yiu+NFUTpzrFveSmekzl2mQ=)
                          2: MzNh-6hAkXT7PEgrjKJvI169IsI.crl (hash: ceqIzJT+uuxj7pthtIo5eOfck0voTza148yrQZHbCfc=)
                          3: eL7L2yvUaHUcrqYa9YfSEkCrZQ0.roa (hash: hRmFfXusSA4yPVBPDkdUWWukYfa7ZjWi3ll24wVEEEs=)
                          4: rZcv-swn7039blCdnkHsmvuTEE0.roa (hash: YkjIIueA3tSkus+TXP81fG/yVykEarWy1n4j2aCv7FI=)
                          5: redZ5Lo-6i46yM5qdUMWwkSisZE.roa (hash: HxevwAQ5SK1xf86uDMqoDN6xfryXXeJR1/gwiD3DlWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:a6:80:b6:f0:3c:c6:28:79:47:d7:79:dc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=38b6ae1dc483540bbef2e6f7cdd720e9d5ed2ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:ae:2d:a5:c1:f5:85:22:e7:71:c7:39:c3:
                    87:8b:44:07:90:97:86:0a:f6:64:5f:e6:7c:be:21:
                    84:a2:82:9f:73:c2:c7:a6:03:40:74:ff:1c:91:4b:
                    a6:e7:b3:9f:a5:a8:a2:38:6c:4e:bc:21:da:6e:cd:
                    21:c7:14:e3:97:f3:b1:a5:5f:b3:c5:02:52:02:43:
                    45:d2:da:4e:13:fd:59:3c:71:56:57:19:cf:1b:77:
                    48:c8:fb:c7:fc:ee:d3:11:e9:c8:a8:c7:78:46:43:
                    8b:a7:14:1b:c7:45:a2:99:fb:7a:75:bd:ce:30:57:
                    c0:42:45:2e:3f:2d:4d:c0:93:cc:36:ba:41:48:bc:
                    ff:ce:c7:3d:58:01:7c:19:16:51:68:89:d1:84:7e:
                    78:5d:bb:3a:cd:db:b7:e1:78:0c:ab:3c:37:27:17:
                    d1:65:2c:e6:f1:c7:c7:5d:9a:1e:16:ae:24:58:fc:
                    82:32:b2:25:b0:2a:eb:62:f4:a7:d7:d4:2c:4f:05:
                    1c:99:ae:15:04:e7:60:0c:23:21:96:af:ec:ba:72:
                    e6:67:a5:55:d3:26:d1:b1:f7:d8:46:6d:7d:ec:7a:
                    db:bc:92:21:9e:45:26:01:20:cf:8d:e1:d6:18:ef:
                    48:6c:97:60:6b:ae:f6:9e:c6:d6:ae:58:a2:bd:29:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B6:AE:1D:C4:83:54:0B:BE:F2:E6:F7:CD:D7:20:E9:D5:ED:2A:C9
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:a1:ac:3c:f5:a0:55:de:ab:20:35:ae:04:c5:9a:60:52:
         fb:0d:dd:74:85:a4:14:16:54:1f:53:58:48:12:7a:90:1a:b4:
         05:62:bc:2e:26:17:d7:ca:a2:c0:0d:eb:d4:f1:1d:cd:3f:2b:
         c5:22:25:9d:98:86:6f:9e:d9:33:3a:c3:cb:c8:4d:5b:c8:2a:
         af:f1:e9:2f:b6:12:77:05:86:1e:96:80:f8:67:db:a5:d0:18:
         fe:81:da:dd:33:37:dc:dd:2b:00:e6:6e:df:81:5c:7a:c2:2b:
         82:47:37:66:c8:93:49:9a:ff:48:a8:ab:9f:b7:e8:22:6f:b4:
         74:d8:6d:9f:ef:34:b8:54:72:74:d1:3f:ac:50:a1:4b:b3:c2:
         b2:24:9d:cc:bd:52:a5:76:b5:38:e2:df:0f:58:c4:e2:2e:21:
         cb:b0:70:31:da:df:9a:92:06:28:10:07:00:f2:7d:62:ca:f5:
         c6:d5:7d:60:68:c6:bd:65:eb:95:e7:ff:f8:83:6c:ec:83:9c:
         36:1a:ca:4f:b0:73:fb:72:75:b7:b6:48:ee:59:7d:75:c7:f7:
         15:57:56:7e:b0:1d:66:9b:14:96:c3:89:48:85:72:94:f8:a9:
         78:ef:86:7e:2b:50:38:29:d5:8a:e0:25:3e:bb:69:86:a8:7e:
         61:51:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----