Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File:                     7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier:          t/T+clRK3+G1cjyPA5k9Mhqxfe2lWWCBi4YWMSSDs6I=
Subject key identifier:   37:AC:D5:2A:71:33:71:8F:E8:49:4D:79:12:9E:44:09:C2:62:DD:48
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       01962E997E437CBAD90F4D3CA0982E20B697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number:          0B41
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: uGwDyDij7Q6Gh6UWZxTMHmEwVwavE8Qrafs8AdCTkns=)
                          2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=)
                          3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=)
                          4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=)
                          5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=)
                          6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=)
                          7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=)
                          8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=)
                          9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=)
                          10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=)
                          11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=)
                          12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=)
                          13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7e:43:7c:ba:d9:0f:4d:3c:a0:98:2e:20:b6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=37acd52a7133718fe8494d79129e4409c262dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:32:be:22:6d:77:be:10:db:42:1b:d4:fa:
                    ff:df:a7:3d:8d:fd:26:95:b6:11:94:24:39:01:38:
                    f2:13:26:08:e3:61:e3:57:ce:e4:5c:3e:2c:18:c9:
                    06:31:c2:a8:2a:a8:62:41:3e:22:2f:0a:3b:65:00:
                    a7:34:c1:c5:40:39:74:ff:64:37:aa:c5:0d:d4:9e:
                    65:46:a4:c8:52:6b:38:11:6a:76:f2:78:9e:ea:62:
                    f2:29:ac:cb:62:9b:2b:c8:de:ff:1a:77:9e:2c:c8:
                    b5:18:0a:60:9a:e1:5b:ec:28:c4:39:ff:a3:67:c8:
                    d1:2f:8f:61:a8:6f:7e:e3:09:9b:d8:9e:20:a6:24:
                    9f:56:97:d0:0d:64:a8:da:c9:55:6c:a1:b5:01:a6:
                    97:de:04:29:b0:8d:04:f9:89:6c:e6:2d:af:f7:9e:
                    7f:67:fd:1a:20:a0:3a:e9:a5:c3:eb:45:11:a0:44:
                    9a:c1:85:1d:74:6f:23:eb:59:3b:b2:18:c8:b1:63:
                    38:54:c7:c1:ca:62:4c:87:f8:f2:24:7b:6e:4a:d5:
                    62:32:af:ca:aa:dc:ea:82:c6:26:b0:db:ec:f6:76:
                    cc:02:c1:a9:b9:37:2b:88:1b:5b:d2:f6:ae:4a:41:
                    ac:9d:1d:f8:71:b5:13:11:5e:a4:e0:bc:15:06:fb:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:D5:2A:71:33:71:8F:E8:49:4D:79:12:9E:44:09:C2:62:DD:48
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:97:b9:05:1c:e9:67:08:89:06:6c:34:85:cf:4d:69:0b:
         db:d7:07:e8:f5:85:54:df:2f:2f:2d:ad:d2:d6:85:03:19:34:
         b3:c4:59:04:49:e4:71:10:ad:d2:23:79:d6:07:7e:f1:79:f8:
         a0:d5:b5:92:8a:60:d4:47:31:57:dd:05:f6:74:ac:17:8e:27:
         b8:27:c9:62:06:6c:91:fd:f5:9a:cb:61:f5:3c:e8:35:07:60:
         54:43:c5:cf:d1:c1:7a:51:c1:fd:1a:8d:ab:dd:ec:63:81:d6:
         82:1f:5a:88:e0:a6:e7:5e:2d:66:64:9a:5b:c0:7b:16:6b:65:
         7d:06:df:19:60:13:8f:2f:6e:dd:1f:7d:4d:e7:8f:0b:65:85:
         bf:8c:4f:dd:c9:8f:a1:16:51:44:25:b2:21:44:d4:6e:98:8f:
         b6:4d:53:ee:83:84:ad:76:00:d0:d6:7d:f5:eb:da:a8:9c:bf:
         a5:ab:95:15:7e:bc:31:8e:2d:33:fd:ca:2d:56:7b:64:6d:a3:
         82:22:fd:e4:72:12:ea:56:01:e0:98:da:5e:0a:05:3f:dd:95:
         b4:2b:5d:dc:9b:fe:1c:51:28:c2:b8:2c:d0:ad:d2:c5:c6:f1:
         63:45:64:cd:0d:53:4b:d2:25:4b:14:47:52:0d:1d:e2:9f:78:
         6c:e4:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----