Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File:                     M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier:          c9v3MJoY3Kwi6Aht7ZuaFk+0iaOcBInsrxTK3dSPpcw=
Subject key identifier:   45:08:00:09:31:17:2E:DE:C7:B4:27:D7:0D:7D:3D:D9:20:0C:03:33
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer:       /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial:       01962E986CF740A8C7B40BE044F78BF7EB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: 4yGazgMSkx5ORk1thjqkhgV0cMp6/y1mR6kvOn1e+ko=)
                          2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:f7:40:a8:c7:b4:0b:e0:44:f7:8b:f7:eb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=4508000931172edec7b427d70d7d3dd9200c0333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:62:ad:4d:7a:7c:0d:65:e1:24:d1:ab:53:
                    15:73:a3:2a:09:54:33:19:fb:bc:23:bc:8a:3b:bb:
                    bc:0a:f2:b5:ad:90:1d:62:9b:d9:55:cb:a3:d1:ef:
                    4a:f4:21:33:68:86:f0:35:f0:c6:71:ce:e3:0b:03:
                    51:7d:51:cb:a9:3f:d5:97:3a:0a:a6:0f:93:d1:1a:
                    aa:66:09:64:ca:24:db:02:2f:c6:eb:58:02:ed:05:
                    56:f0:22:03:c6:fa:36:d8:85:b4:c5:27:89:5e:fc:
                    bf:85:c7:44:b0:c5:38:d2:6f:88:f8:d0:5c:03:b6:
                    34:bd:04:91:d3:bb:01:60:ab:ba:b7:50:3e:08:cd:
                    0c:c2:42:87:cc:50:d4:9d:0d:36:6f:78:ab:fd:29:
                    f6:4a:9d:69:cf:f1:b8:b9:98:b8:3c:3c:c5:ab:28:
                    4d:b8:56:ca:3e:9a:82:00:dd:9a:e0:4f:fb:ef:5c:
                    ad:99:d0:b7:ac:59:8e:88:d8:32:eb:a2:cc:e2:58:
                    78:c3:87:b7:dd:9a:61:7f:d7:a8:63:24:96:1f:64:
                    ea:b2:56:4c:8e:85:81:28:4f:d0:f9:97:96:48:dc:
                    b9:8a:6b:ee:01:29:9f:3e:8b:64:f5:70:30:0b:28:
                    9e:f6:76:57:2f:a3:76:b4:ab:e8:b2:89:27:84:1b:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:00:09:31:17:2E:DE:C7:B4:27:D7:0D:7D:3D:D9:20:0C:03:33
            X509v3 Authority Key Identifier:
                keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:03:36:e0:7e:ac:8a:f6:c4:c8:1c:3e:5b:c4:49:aa:6c:
         e2:65:d3:27:97:f9:32:0a:bc:35:9c:63:b2:9c:c1:02:c2:53:
         d8:be:b9:74:78:7a:6a:19:76:4a:6c:5a:e0:89:ae:5b:a4:c9:
         0f:ee:04:e1:37:fe:f1:6a:3d:ff:82:11:ee:35:96:ee:bf:05:
         82:0c:8d:f7:cd:dd:c5:8b:0e:d9:f5:92:08:67:8d:62:70:95:
         0b:1f:7c:ec:6f:18:bc:de:2a:93:9c:76:05:e4:0f:34:7b:1f:
         1a:f3:b6:3e:09:dc:45:c6:54:52:a5:ac:b9:72:a6:e9:bf:b1:
         d1:1d:9a:cb:67:20:4d:4a:bb:50:34:ce:e0:a9:54:b8:f2:01:
         16:62:52:26:ac:38:a3:9e:ec:8f:fe:b3:6d:3b:be:83:85:56:
         9a:48:97:37:9e:11:2d:cc:92:7d:83:39:61:f8:5f:bf:46:d4:
         97:8f:e6:8a:90:e2:45:8a:89:68:ab:07:99:00:b2:f1:9c:5d:
         a1:9e:95:18:d1:94:c4:7b:2f:17:21:7a:e8:c4:90:f2:9b:00:
         83:25:61:e7:6a:24:0f:8d:fc:e0:84:84:0c:39:fe:bd:9c:bf:
         fa:fb:15:30:e4:0b:08:84:32:c1:b4:96:c0:64:2e:e6:29:b9:
         76:db:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----