Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File:                     p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier:          ZikGqghE9VJspOJbT+UOtvrbHUIFijk4iyKSgGRuUk4=
Subject key identifier:   E4:3C:76:44:FD:A5:3B:29:E6:C7:A5:8D:CE:AD:D2:7B:B2:46:76:00
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer:       /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial:       01962E995213D8193000FD74137D4C89C5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number:          05E7
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
                          2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
                          3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: zdyB05WwGvuiOjGkxBUqh7iI75avwJ9kDo4wJpWR1Rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:52:13:d8:19:30:00:fd:74:13:7d:4c:89:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=e43c7644fda53b29e6c7a58dceadd27bb2467600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:1c:2a:e6:64:ee:ce:e4:38:67:5c:2b:b9:
                    69:6a:2d:01:a6:8d:c8:e3:49:eb:5c:7c:6a:38:9f:
                    c7:ec:49:91:9e:22:3f:45:14:72:d5:94:06:2a:63:
                    b4:7a:fd:a2:ca:e2:3b:90:3a:b4:15:da:07:d3:d6:
                    9c:13:a2:cd:f4:29:c7:79:34:bb:a6:54:74:17:21:
                    d0:8a:3b:a8:73:bb:d5:41:d6:f4:5b:e1:be:0e:39:
                    ad:07:e1:96:6d:c4:b5:f4:81:42:ed:5c:15:d3:69:
                    2c:3f:50:3a:3b:01:da:97:60:37:0f:ac:09:95:5a:
                    b9:13:f0:e5:cb:9f:c3:94:a6:ad:94:42:22:6e:68:
                    0f:79:06:4f:92:21:dd:cd:4d:da:82:76:36:e2:49:
                    4a:06:f0:97:65:a8:c3:b3:35:75:91:b3:f7:7a:94:
                    ab:71:a8:49:e8:c9:a0:0c:4f:1f:80:f6:18:a3:a1:
                    f1:ea:24:f3:c3:59:90:58:78:80:8a:49:54:e2:ca:
                    6f:88:57:1c:81:8e:d2:81:2e:b8:8d:93:f6:ce:47:
                    ae:fb:78:40:86:14:d6:0c:00:81:50:ae:db:40:40:
                    5a:0c:39:89:53:25:2d:cd:1b:4f:b6:99:b6:ae:fe:
                    59:81:63:0b:51:64:ee:77:8b:79:37:9d:3d:7c:91:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:76:44:FD:A5:3B:29:E6:C7:A5:8D:CE:AD:D2:7B:B2:46:76:00
            X509v3 Authority Key Identifier:
                keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:40:56:4e:f4:1f:94:3e:7b:96:cb:d5:77:46:33:45:8c:
         fe:c3:77:82:7a:b9:4c:a0:c5:d9:22:f6:35:9b:ff:c8:67:d8:
         c9:6f:92:6e:05:30:eb:10:8c:11:ca:a1:af:4c:30:5b:31:7e:
         2d:5d:bd:20:39:98:fd:af:d0:3d:e1:23:2c:9e:04:90:e2:21:
         db:18:be:1c:a6:db:50:a4:73:c4:ef:57:5b:05:e1:33:19:23:
         e4:c0:be:8b:97:55:67:fc:dc:09:d7:11:c6:b8:a1:50:4a:5d:
         0d:6d:eb:e3:69:dc:2f:70:85:63:8f:02:da:5b:7c:85:3e:f7:
         ed:12:35:90:d3:24:9a:f2:ee:02:17:6a:fc:1c:93:b8:11:c7:
         66:f6:19:10:0f:07:1a:08:d1:75:e8:41:8e:08:ca:d3:05:77:
         4b:44:26:d7:76:45:f5:2f:9e:dd:62:fb:c7:a4:12:fe:9e:44:
         8e:f1:f4:fd:40:7b:62:0f:2f:7b:59:a0:e4:c3:9b:94:bf:bb:
         fa:2f:d6:da:b4:12:58:6a:f5:c7:39:c1:03:a0:96:a8:5d:4f:
         9f:81:8d:7f:67:bd:83:15:0b:45:a0:1d:dd:ba:62:58:2f:c1:
         b7:c4:9d:fa:16:26:0d:88:09:0f:25:34:6f:cb:0a:06:95:7c:
         20:01:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----