Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          YDqf7Z3eFUtpDt487S5jU+wm8xFFiphwCHDIZJSU/50=
Subject key identifier:   AF:29:85:DE:9A:8F:B7:20:FA:81:34:E1:3F:CE:07:31:92:53:E4:ED
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       01962E98F084F728D7D36F57FB284CFA049C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: pYKFfz2oZbHBCEZSaRTH78sBGyHymZoOwb7JiNnJdJY=)
                          2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
                          3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:84:f7:28:d7:d3:6f:57:fb:28:4c:fa:04:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=af2985de9a8fb720fa8134e13fce07319253e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:08:d9:dc:1e:de:7c:9d:5c:5c:bc:a5:df:f0:
                    8a:8b:d8:a0:c3:a4:bd:f5:95:94:cb:92:89:30:9d:
                    02:2b:5d:c8:48:e0:fe:04:1c:06:9d:36:ef:d4:af:
                    0b:64:31:6c:a3:1e:cb:be:10:ee:70:bd:50:f0:29:
                    29:07:9d:89:60:62:7c:cb:4a:f0:7f:52:0d:55:5d:
                    31:63:20:d7:dc:3b:dd:33:76:ec:93:48:1c:d1:bf:
                    2b:a9:91:ca:81:8b:87:75:d4:1e:da:04:f8:64:75:
                    31:7a:6b:5f:6f:74:c4:6b:7e:9c:15:d2:98:e5:26:
                    4b:d8:7e:de:61:4b:07:a6:dc:7b:29:13:26:3b:2b:
                    61:5c:67:94:af:be:4a:ac:0c:f5:13:fe:ab:1b:03:
                    2b:81:47:d1:41:65:58:a1:9d:91:25:72:05:d8:1e:
                    0e:a8:3e:ee:fd:5c:1d:38:dc:8d:07:7a:75:65:31:
                    de:fe:ae:ad:8b:aa:6b:c7:5a:cc:05:d5:03:82:e0:
                    02:b6:ca:da:55:a7:59:ff:8c:58:6e:05:64:3c:d1:
                    66:c2:05:14:f7:74:6b:7f:c5:9b:5d:55:ba:e5:96:
                    00:cf:21:67:2d:44:29:32:ee:fc:1b:c8:f1:e5:19:
                    7c:d0:11:8a:5d:43:10:02:51:3b:44:56:4a:47:5f:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:85:DE:9A:8F:B7:20:FA:81:34:E1:3F:CE:07:31:92:53:E4:ED
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:00:7e:31:40:6c:61:cf:b5:bd:6f:b3:11:52:4a:a3:90:4e:
         eb:89:b2:06:28:fd:8d:19:65:26:c0:52:16:f8:77:e8:4a:ab:
         a9:bd:29:79:55:9f:72:5a:2c:da:6c:e3:9b:f1:6d:7f:cb:ab:
         44:93:82:1c:96:cd:79:cf:ed:69:c9:44:84:61:f6:06:4e:3f:
         fa:6f:b2:da:c9:6b:19:2c:d2:47:0a:a3:70:f4:de:2e:0a:25:
         df:ca:f7:bf:d4:0d:52:31:03:a0:ac:16:5b:07:67:4a:2e:07:
         2a:85:8e:79:fd:fc:b0:cd:66:35:68:92:de:c2:32:32:4e:72:
         92:ce:77:1d:bd:a2:82:10:c1:dc:a6:d8:65:37:18:03:98:42:
         14:0f:12:f0:b1:aa:73:93:32:3a:43:c0:0c:f7:69:95:2b:94:
         09:1a:78:8e:19:64:03:2b:58:8a:c0:66:ed:e4:6d:a3:b8:c8:
         4a:6a:a7:03:f8:30:71:97:41:5e:a7:d5:14:14:92:a1:3d:b8:
         c3:a2:d4:e7:67:04:8b:47:dd:a1:8c:e9:44:45:6f:9d:c0:ad:
         14:a2:76:96:47:8d:0e:14:52:b0:d3:98:f9:08:e6:62:b5:fe:
         ae:63:b4:e2:5f:cf:e0:2f:36:f6:2c:fb:57:ab:93:43:70:f8:
         e7:2c:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----