Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File:                     7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier:          I3G9WB7HgLKTDOI/UBMdi5iJ5f7+Cq3bRgFuCZZyzv4=
Subject key identifier:   7B:33:B7:A1:A6:BE:4C:D5:8F:68:8D:62:54:3F:11:4B:D5:60:6B:3B
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer:       /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial:       01962E2B361E7223D37183BA85D0334311B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: 215ppShwEUSKIdDlcuOIN3ZxbACwipuVtwwh4e5MkFM=)
                          2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:1e:72:23:d3:71:83:ba:85:d0:33:43:11:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=7b33b7a1a6be4cd58f688d62543f114bd5606b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:c1:32:63:18:f8:06:f8:16:72:76:b1:b6:
                    bb:80:a5:d5:fb:a3:4b:d0:82:65:98:40:1c:77:7f:
                    a2:a8:b9:c8:8c:47:9e:f3:15:d2:72:70:12:38:5f:
                    0b:55:99:d3:ea:2a:62:ca:75:eb:89:ef:0e:c9:af:
                    10:9e:f0:0c:eb:2d:20:42:db:6d:79:e2:0f:d2:f0:
                    fe:c2:c3:2e:6b:84:a1:56:b0:03:22:58:3c:f5:5d:
                    75:67:05:50:f8:2d:6a:bd:de:08:ce:85:a2:11:92:
                    72:0c:93:86:16:b8:22:51:81:a1:68:55:0a:a9:46:
                    2a:46:9d:cc:fc:a0:d2:98:59:83:fb:2c:35:94:f7:
                    cb:d6:a6:df:25:c1:b7:4d:8d:ed:08:ea:b1:55:d0:
                    0c:7b:9e:fa:77:09:f5:5d:fd:9e:7b:39:01:0c:28:
                    e8:e5:bd:e5:4a:cd:f8:ac:c7:1e:ce:e3:2e:6e:21:
                    30:b5:65:52:33:d0:8c:15:cd:1a:b6:58:e2:cc:95:
                    3d:9a:b0:73:54:7a:87:f6:ae:83:64:5d:8f:1f:48:
                    d9:6e:a1:37:e9:f7:9f:24:c7:78:8b:02:18:50:8a:
                    59:15:c2:b3:35:8e:03:b1:97:d7:2c:40:41:9c:1a:
                    f5:84:cc:f2:73:ce:5d:ab:5e:d4:65:da:00:82:30:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:B7:A1:A6:BE:4C:D5:8F:68:8D:62:54:3F:11:4B:D5:60:6B:3B
            X509v3 Authority Key Identifier:
                keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:59:ba:f8:8e:f4:4e:d4:86:34:9f:90:0a:89:08:70:ab:1e:
         27:38:57:ff:db:36:25:fc:72:c8:eb:5b:f7:46:b7:4a:00:1a:
         45:60:8e:c0:5d:31:33:e4:a8:8b:3e:0d:8c:f2:ec:ec:6b:89:
         dc:0f:a1:82:0d:c4:d0:01:c5:7a:b7:8e:d4:09:cb:b1:fd:f7:
         aa:15:ad:82:c9:c9:43:3c:9b:95:99:18:82:c6:6a:41:9c:d6:
         68:bf:91:05:dd:f9:6f:58:9b:02:bf:37:ab:f2:a2:5a:c7:d4:
         5c:84:e9:6a:3b:66:83:6f:ab:a6:a7:7f:bd:91:4f:fb:d6:13:
         c2:43:2d:e7:4c:73:cd:d3:3b:8b:84:e5:cc:9d:9f:cc:86:5b:
         26:a4:26:7c:67:11:ed:f8:60:8d:9d:54:80:d7:a2:b4:9e:04:
         fb:e2:b7:18:89:8f:38:cb:6c:44:98:38:7c:b1:fd:6a:e5:82:
         30:06:1c:f0:a6:4f:8d:17:2b:c8:d2:87:17:58:dc:d3:03:31:
         f6:94:b2:9f:02:ff:78:bd:b8:5b:60:30:42:0b:92:a6:40:e9:
         52:de:d1:fa:14:3b:44:82:e6:fc:03:e9:73:17:78:60:b1:b1:
         25:87:2e:09:cb:12:60:84:df:d3:62:2f:36:dc:44:5b:51:03:
         2c:43:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----