Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File:                     5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier:          bkIXM9qA+lMfj5cwa22JBQjyddk1ZGdZqtHo1kQTemw=
Subject key identifier:   71:EA:4F:5E:1B:18:96:50:3D:E5:16:46:90:97:83:C6:55:8D:2F:90
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer:       /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial:       01962FAB1CA49CC5D9C84D5C15131E32072F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: nrnxWQryLbJPta+cCSaPd7EL+2Z3oevreAMMovlT7ug=)
                          2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1c:a4:9c:c5:d9:c8:4d:5c:15:13:1e:32:07:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=71ea4f5e1b1896503de51646909783c6558d2f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:05:8b:e3:d8:90:52:22:46:b3:81:c4:1f:
                    11:32:c4:1b:1a:f9:3e:81:52:40:c8:51:45:72:c8:
                    28:b1:6e:3f:ee:50:47:2c:5c:82:1b:8f:6c:da:e8:
                    be:1a:13:b3:95:dc:8f:43:6b:48:ee:65:15:d8:c3:
                    2f:20:19:ba:88:81:f5:07:0a:ff:15:20:9d:72:90:
                    42:9e:ed:04:5d:8f:6a:e0:f0:dc:b8:a3:e9:12:f8:
                    87:fb:f1:5c:35:12:2d:17:d0:bb:ca:65:98:22:5d:
                    71:86:29:f0:7d:64:eb:bc:31:d1:62:42:bf:1d:73:
                    42:f1:68:ce:7f:27:6e:af:61:42:6f:cf:74:12:ac:
                    c4:5b:a5:5b:f8:17:22:b4:6d:4c:83:41:48:e0:aa:
                    f9:7f:67:97:91:bc:af:66:38:f1:7e:c1:1c:26:5a:
                    22:f1:0f:6b:4a:6c:6a:6f:93:17:b4:40:ff:05:47:
                    cb:83:d4:e6:3c:7d:bc:00:d7:59:5b:92:54:e1:1d:
                    3b:49:18:37:bf:c1:d8:07:53:4b:c4:c4:96:a0:b3:
                    4a:55:a9:ba:26:1e:46:72:d9:eb:fe:80:d9:c7:46:
                    b0:f6:89:c7:2b:b6:3d:86:0f:31:2b:da:7e:1a:a8:
                    4b:3d:a6:0e:c1:f9:c1:1c:16:05:47:44:82:7c:0d:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:4F:5E:1B:18:96:50:3D:E5:16:46:90:97:83:C6:55:8D:2F:90
            X509v3 Authority Key Identifier:
                keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:c7:be:47:43:42:4e:a7:52:e2:c4:1a:d0:23:0f:bc:ce:
         08:a5:9a:0d:04:95:c6:ca:e4:3c:ad:0d:00:5e:ad:25:00:4d:
         05:5b:49:20:25:ff:b5:fd:ba:af:33:72:4c:5c:06:cb:e9:b9:
         a5:e6:26:a4:18:81:6e:7a:60:8f:10:52:bc:11:09:3f:aa:2c:
         43:da:64:0a:53:4a:0a:81:e1:58:43:a7:e6:b0:54:66:fc:c8:
         94:56:bd:4d:30:c4:e7:47:4c:9b:80:65:99:3d:7a:54:e7:bc:
         3d:20:d4:b7:eb:d7:e7:8b:f9:40:f1:39:dc:a8:69:bc:46:2b:
         62:3b:9a:ad:cb:90:46:32:8a:3f:e1:fd:f9:83:9a:2b:25:c6:
         36:6f:09:4c:e2:19:8b:8d:95:3c:63:cd:91:ab:c1:e9:c1:05:
         91:81:22:a4:f6:41:c0:f8:f0:83:e1:3e:f9:47:3d:2a:3d:d0:
         92:c0:23:78:b7:c9:a5:eb:7b:56:16:20:e4:b9:6e:36:6f:84:
         e1:a6:6d:b1:3b:47:8a:f5:09:ca:43:fb:33:46:34:a7:88:e7:
         13:96:88:b5:c0:49:0a:aa:45:22:72:ec:fe:b2:86:85:89:32:
         53:50:32:af:1b:3e:42:f6:f9:14:6b:a3:eb:8a:34:57:81:3f:
         b9:01:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----