Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File:                     feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier:          NnkPnrh8Cf6QRZC34dt0QiqppT1/0a4Nnvu3CYGyhV0=
Subject key identifier:   50:4C:CF:DC:1F:66:0B:4D:80:1B:B1:7F:9F:B2:1B:04:8A:83:B5:52
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer:       /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial:       01962F066798E82D4B5DBE0FA6E7BCD29527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number:          0F4C
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: r9x+AEuFQIrjGv0gjcUJ4tXvLSqkgciegCKAFpBRdl4=)
                          2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:98:e8:2d:4b:5d:be:0f:a6:e7:bc:d2:95:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=504ccfdc1f660b4d801bb17f9fb21b048a83b552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:b0:93:42:02:d9:54:17:69:aa:7a:88:d9:
                    9e:e6:84:d7:5e:38:b5:2e:51:77:b4:7c:5a:16:10:
                    b1:26:22:70:38:f4:7d:d3:0d:c5:53:c9:56:3b:3e:
                    1f:c7:d9:cb:60:00:2f:58:ea:5e:a7:a4:fb:dc:dc:
                    a6:c1:dc:ef:9a:c9:96:4f:f8:a9:96:bf:07:45:60:
                    07:6e:2d:e1:f0:99:14:97:85:3a:e9:29:02:79:de:
                    0e:b9:c6:5f:72:33:0a:3f:3f:d9:36:93:e2:b6:35:
                    1a:83:bb:c2:26:fc:d9:be:89:26:e3:7b:da:d8:7b:
                    57:77:c5:aa:d9:61:8a:d3:26:dc:3d:5d:73:72:33:
                    39:42:dd:d7:29:51:27:7a:d4:1e:f5:ee:be:9a:ec:
                    1a:e2:2d:85:99:5a:1b:d9:31:71:90:b2:30:08:5f:
                    eb:75:43:98:29:91:31:42:2f:4b:ef:60:65:9e:79:
                    c7:19:f7:a8:28:71:fa:84:a8:88:0b:b3:e6:28:06:
                    57:bd:ab:af:64:72:a0:6c:c7:6a:5a:a5:5a:ed:36:
                    34:ba:78:1f:d9:d8:ba:b7:f2:24:f3:13:25:2a:dc:
                    00:9e:6a:8b:eb:d4:a7:7d:17:10:da:d6:bc:b1:de:
                    a6:cd:b5:2a:a7:1f:2b:c4:e0:da:9e:37:7f:2a:98:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:CF:DC:1F:66:0B:4D:80:1B:B1:7F:9F:B2:1B:04:8A:83:B5:52
            X509v3 Authority Key Identifier:
                keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:d0:b6:d6:c5:0d:92:ac:5d:af:2b:34:fc:76:94:59:e2:
         d2:00:98:6b:d7:77:4c:db:8e:f0:3d:52:1d:88:e8:2e:c8:61:
         56:77:8a:d3:ad:96:85:a6:49:5c:6e:54:c8:88:7d:40:bc:24:
         40:27:a4:f8:89:e1:0d:ce:6d:e8:f2:1a:58:3b:e6:d9:5e:90:
         c1:c1:32:5f:f9:21:13:5d:b2:4b:ef:63:7e:48:5c:89:5e:85:
         05:04:54:48:eb:83:d2:00:17:35:26:98:e9:b3:83:84:ab:aa:
         f7:2d:90:d0:13:c0:17:cd:df:b7:92:ae:06:6b:c8:c3:77:50:
         f9:dc:04:11:35:7c:ba:7d:9b:5b:f4:c7:50:c2:c8:8d:6c:d8:
         82:7a:b6:43:39:46:0a:c5:46:d5:6f:aa:3c:63:73:d5:15:e1:
         41:6e:fa:7a:33:39:7d:f1:65:f9:61:ce:3a:50:58:23:f8:94:
         70:36:4a:8c:06:63:82:40:43:9f:d9:46:ef:9d:9c:03:3c:bf:
         81:a1:83:a8:15:aa:60:b4:43:52:26:88:bf:92:4d:2b:21:13:
         67:38:9f:06:b2:37:d8:a9:bf:64:df:03:fc:f6:c9:f3:b0:8a:
         78:a3:e3:b4:67:8e:c3:48:2d:d4:36:cb:4f:07:c6:43:21:e6:
         c3:16:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----