Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File:                     M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier:          jE5IA11+RJ3BhoblVXKO3xUs65wUiJZDW/ynd3BclNk=
Subject key identifier:   F4:87:2F:8A:BB:6B:F0:A1:C8:45:F6:F7:08:F0:69:60:2C:B2:1F:1F
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer:       /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial:       01962F74B9F199C6FAF19DF870022B5CF27C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number:          13FF
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
                          2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: 9tKw2bAqqZHjGO6XjnaXArXzrEQZVP1gCd2fmI6YDxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:f1:99:c6:fa:f1:9d:f8:70:02:2b:5c:f2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=f4872f8abb6bf0a1c845f6f708f069602cb21f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:2a:01:97:9c:f2:c9:cf:9c:70:38:c1:53:
                    85:fd:89:6c:72:a5:d5:37:e6:39:aa:f8:68:2a:6c:
                    f5:72:c5:41:2e:16:a7:d4:52:86:9f:c3:49:bd:72:
                    a6:4b:92:d5:a3:38:59:26:84:1e:b1:ee:65:84:a7:
                    a0:8d:84:e8:fd:b9:15:57:ee:77:87:dd:4f:99:de:
                    5f:61:1c:2c:cf:24:bf:4a:0b:b4:e2:c1:2e:7b:ba:
                    b4:fc:cc:f3:c4:67:12:8c:5b:bb:1a:6a:47:06:dd:
                    41:ac:10:f2:d2:9a:03:ad:8b:80:7d:ee:49:a2:00:
                    fc:b5:95:98:cd:d6:74:3b:95:07:59:6a:94:47:08:
                    db:b9:e4:57:2e:e5:40:36:47:0a:c8:ea:2d:dc:be:
                    d4:66:a8:71:46:19:5e:9f:ae:a1:c0:cc:12:bb:62:
                    c9:80:d9:5d:42:b5:60:e3:fd:cb:5d:d5:b2:eb:bd:
                    87:73:37:d6:57:ab:48:fe:13:d9:ec:c7:22:ff:05:
                    8b:cf:8f:72:5f:b7:1c:9a:c8:aa:94:0d:1d:4d:07:
                    e0:ea:46:93:82:7f:fa:38:63:74:5e:5f:d4:d4:ec:
                    fd:98:16:e9:2f:82:ab:cb:fe:57:f5:ac:40:a1:f4:
                    8f:13:6e:72:ca:e2:8e:f4:34:75:54:24:ad:6c:1d:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:2F:8A:BB:6B:F0:A1:C8:45:F6:F7:08:F0:69:60:2C:B2:1F:1F
            X509v3 Authority Key Identifier:
                keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:a7:67:6f:e4:e8:3d:38:6b:3f:5e:42:b4:09:31:ee:88:
         95:26:1f:69:37:d0:69:68:79:b1:05:2d:5d:72:d5:9c:12:7d:
         48:46:e6:2d:da:6f:ba:b4:0f:3f:1a:38:1e:11:7a:ff:2d:d9:
         01:c8:5f:cc:31:73:c1:72:31:12:5f:f5:95:97:e7:ba:60:d2:
         d6:1f:29:e8:cc:38:b5:3a:95:c4:38:d9:9f:ae:b0:5e:d7:92:
         ab:07:2b:c5:f6:eb:81:fe:2b:24:87:71:af:99:26:61:c2:f3:
         99:d6:e8:b4:24:e4:fa:d0:a8:c9:60:6e:be:6f:9f:b7:51:49:
         c0:14:80:49:ba:98:b5:ac:8d:fa:84:7a:06:8b:32:19:76:fb:
         54:1a:cb:21:88:8f:a0:39:17:19:13:6f:95:82:8c:ab:46:9b:
         3b:cf:21:37:dd:a9:fc:3f:ef:37:87:0d:a3:de:59:47:ea:1b:
         ba:2b:8f:42:54:70:d0:af:7b:b7:56:e0:ee:37:43:65:9d:6d:
         5a:67:8f:67:1d:41:b8:a2:1d:59:a5:c5:f1:df:dc:e9:4b:ff:
         72:0e:65:9e:fa:3d:98:e1:96:40:71:4d:e6:80:fd:25:4b:1c:
         ce:55:4e:88:8c:e9:09:8b:2e:e0:dc:69:4a:c4:ca:60:72:59:
         ea:26:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----