Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File:                     M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier:          LV3zmpO3qeBuChpCsWEb8+UR44FsbmN8HIOp5WXqJLk=
Subject key identifier:   56:28:24:AA:5E:2F:2C:EC:29:F6:9E:92:F8:12:BE:D5:0D:8D:B1:DB
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer:       /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial:       01962E2ACA00F0420D5DBCCF1AF5550D97DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number:          0D87
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
                          2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: E6rWgP4TNp89NEw1fPb845tGBL/LPOpdrMcbmoW0kVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:00:f0:42:0d:5d:bc:cf:1a:f5:55:0d:97:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=562824aa5e2f2cec29f69e92f812bed50d8db1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:26:98:d4:29:6a:af:c5:a7:e1:27:71:f4:
                    d9:eb:71:f2:ad:a2:e3:d0:4d:d2:f0:cc:7b:32:2d:
                    f9:0b:bc:f6:71:25:6a:93:8a:ed:2d:51:28:8a:b6:
                    5b:1f:33:dc:be:98:fc:36:b7:5d:f0:3e:fc:ad:11:
                    fc:8f:35:19:c1:95:6b:a5:b0:45:3c:7f:f8:24:e9:
                    e5:59:36:95:3a:b5:42:e7:cb:9f:76:8a:0b:da:fa:
                    16:ee:67:f5:d7:ed:e1:e7:57:09:e2:ee:4e:77:7b:
                    8c:cd:5a:1c:ab:19:53:16:de:a3:1f:c4:e8:a1:23:
                    3b:10:ae:c5:c0:16:92:fb:12:19:5d:f1:64:05:b1:
                    e7:0c:ff:74:80:51:64:d9:df:85:91:63:12:c9:e8:
                    66:5e:9f:65:b0:5c:cc:e9:a9:c4:1a:65:bb:e0:6d:
                    16:9f:72:65:91:69:e1:28:fb:e3:e5:bc:92:6a:67:
                    39:44:b6:45:02:89:27:46:17:b4:af:0e:d8:c4:52:
                    1d:84:2f:98:af:2d:8b:6b:fd:68:ee:71:86:58:82:
                    f1:ee:cf:ec:b4:21:19:a6:20:57:7f:ab:50:ca:4a:
                    ba:77:0f:ae:dc:68:02:34:80:73:c2:ac:20:cb:e7:
                    71:60:35:69:88:8b:c1:e8:98:a5:d2:22:3d:22:e7:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:24:AA:5E:2F:2C:EC:29:F6:9E:92:F8:12:BE:D5:0D:8D:B1:DB
            X509v3 Authority Key Identifier:
                keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:45:b6:57:a0:c7:15:ec:19:07:00:75:ef:13:49:2c:4b:
         90:ae:54:dd:87:87:fb:0b:27:2b:38:c1:35:ce:24:cb:3f:02:
         1d:bc:83:79:6c:26:01:57:81:31:6f:ee:57:34:d9:de:27:aa:
         b5:d8:d6:7a:e2:cf:1b:05:50:25:a5:08:a3:e0:fd:75:d3:65:
         f8:cd:cc:95:fe:28:21:d8:2f:38:3b:43:e4:17:b9:69:e5:a0:
         3a:dc:04:62:a3:34:20:a4:d1:f1:51:25:fb:b6:a3:3e:a1:62:
         5d:22:7c:ae:55:d2:2a:2a:82:c8:61:2b:7a:11:90:50:68:86:
         4b:50:c3:96:b4:64:8f:ed:b7:c9:69:ee:44:0d:82:05:3b:73:
         3a:f2:62:35:6b:e0:f6:86:e7:a8:9f:61:2a:ab:2e:fb:17:d7:
         5e:f1:c4:f2:ea:1d:29:80:89:14:8e:16:e5:42:06:ea:7f:9c:
         fd:2d:fd:e8:05:a2:72:1c:cd:31:70:35:59:68:dc:f7:74:fd:
         82:d6:6b:31:41:23:0a:16:da:86:de:b7:aa:74:c0:7d:af:c5:
         2c:81:ef:33:b2:33:39:e2:83:a1:ad:90:1b:47:7e:94:cd:f0:
         6f:01:a1:2a:7c:b5:14:95:17:1a:4a:a7:a7:f3:4a:bd:20:7f:
         62:93:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----