Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          8YxvzZ0uIgkPyK/vprQYGHDuPo7fwBNyAvMb57qF+kc=
Subject key identifier:   55:F1:AB:B6:A6:DF:85:D6:73:A4:1B:6A:D0:B3:09:4E:F5:A6:A1:90
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       01962FAB946F5FDC65A02F2F1D473E364B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          0C50
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: 3P4NxBDdaixmVcYD3eFoEOxaNxMFNJ8DIwNeNiudlNQ=)
                          2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:6f:5f:dc:65:a0:2f:2f:1d:47:3e:36:4b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=55f1abb6a6df85d673a41b6ad0b3094ef5a6a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:f4:1b:7d:af:4d:1a:c0:fa:b5:4d:01:44:
                    be:ef:14:06:09:a5:3d:be:a6:1a:05:e2:07:93:b9:
                    1a:1b:ad:64:ee:f6:83:4c:43:5d:36:62:20:b5:d9:
                    4f:60:aa:2a:db:e0:c1:f6:c3:6c:7b:2e:4c:a3:b2:
                    94:05:03:91:5a:2c:6b:d6:7c:bb:d2:29:b7:f5:be:
                    31:b2:69:ed:a5:fb:22:96:b6:d8:5e:1c:b1:b8:49:
                    0d:bf:f4:93:b1:db:e3:1f:1e:e3:07:f2:7f:3a:43:
                    5e:7b:3c:be:34:31:9b:94:c1:2f:d9:cb:21:69:98:
                    41:12:2a:3e:57:c1:ff:06:3d:77:cc:b8:5e:00:ca:
                    78:c9:e3:78:30:d9:aa:bc:05:63:75:30:d7:17:d9:
                    65:3b:27:88:17:61:c3:c2:0f:00:f6:e9:36:2b:0b:
                    3f:11:31:95:10:d9:cf:32:f4:c8:bf:dd:ca:71:02:
                    b1:53:35:09:1a:d1:f9:ed:56:97:19:d8:97:81:ec:
                    1f:ee:4e:00:c6:a9:d3:6a:ed:8b:a4:d9:c6:1e:f6:
                    6a:13:ee:d2:f6:7b:5e:29:2e:5d:51:0e:10:6e:57:
                    a3:bb:5c:01:69:b9:21:d0:4a:f5:49:da:94:b8:9e:
                    cf:06:0c:67:ab:2b:5e:db:5f:1e:d6:45:25:78:13:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F1:AB:B6:A6:DF:85:D6:73:A4:1B:6A:D0:B3:09:4E:F5:A6:A1:90
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:b5:0a:a2:9c:e0:a1:39:e8:65:fe:a7:2d:3b:86:cd:d1:
         f2:01:ab:e2:5e:23:a0:61:69:4b:9a:7f:f6:bd:c0:32:05:d5:
         b1:92:0f:01:95:3e:39:f3:a7:75:ef:8a:37:46:8a:40:a0:d4:
         5c:25:fc:f1:d1:16:37:8c:98:20:51:e1:44:ff:77:47:e6:64:
         12:a7:e9:6d:2d:1e:82:4d:d5:bd:7f:de:7a:9d:0a:db:20:45:
         73:58:0b:b5:93:48:c8:de:31:9a:cf:91:01:31:7a:a3:ea:2b:
         ef:d5:71:c9:37:a5:bf:df:77:4e:06:7e:72:17:25:03:0d:4f:
         4f:29:59:1e:f2:08:00:e7:39:30:31:03:6e:39:fb:d8:11:7e:
         e0:29:9a:05:7a:c4:5a:cf:84:88:b4:ad:f0:a4:15:00:b4:c4:
         79:a6:b1:83:42:8a:17:fc:df:87:93:f8:a4:d4:3d:c1:e3:4a:
         a1:de:5c:4c:f1:43:56:89:66:1d:6d:1c:01:92:e9:b6:3b:ed:
         00:10:ba:e1:de:3c:aa:56:dc:3c:b3:77:26:15:74:1e:d8:a8:
         3f:94:2f:18:95:33:f5:17:aa:5e:f8:d2:e5:bd:d5:7f:1c:8a:
         ff:25:ab:a5:17:2f:0e:fe:86:14:20:bb:49:cd:32:20:25:d1:
         e2:83:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----