Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          5puVDu2QljRlHFpK2CzRfnpZSpouIBmCU8h49AQ8Qw8=
Subject key identifier:   01:15:73:2F:37:2B:08:82:C8:46:42:9D:C5:0C:C7:A3:ED:BF:8C:3A
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       01962F3DA7E74F0BCA2B18FFF7ED89684CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          1508
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: cSinU2M8tXUNxCt6KIZhqqXolUvtc6dIa6/DdSgLtOk=)
                          2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=)
                          3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=)
                          4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=)
                          5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=)
                          6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=)
                          7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=)
                          8: _F5MVfF5fNE4gJHS7bTOuaP33x0.roa (hash: glFPm7n2DIuS97xAP2QYuEIRa9RXcbN9tpa+7lEYHOU=)
                          9: fakXDMo3zyIUclESUX9dWmYL5TA.roa (hash: IcVzCrlp60ik4ciNebwcS9dD7bdLcMNXOEwcfbEsKXU=)
                          10: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=)
                          11: yKEdpqHdvo91vC0Mmh0XBWCJyPs.roa (hash: pz0PLVuo+mNtiFiglr7TH4jCIgorFqRrLuJoPAyhrKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:e7:4f:0b:ca:2b:18:ff:f7:ed:89:68:4c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=0115732f372b0882c846429dc50cc7a3edbf8c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:30:19:90:b7:64:32:a0:d1:88:09:d3:2d:
                    e2:6d:29:fc:4a:ca:7e:d9:0c:7c:d0:76:01:84:00:
                    2b:31:66:01:86:36:f8:bb:70:5e:e3:89:d8:61:bc:
                    1d:af:f4:6a:05:d0:97:6b:bb:5f:0f:bf:e7:49:9f:
                    08:a5:cb:43:08:17:f6:3e:e7:80:34:18:67:52:3a:
                    6e:e4:18:a1:ca:25:dc:b3:17:79:ca:cf:08:f2:d7:
                    38:6d:52:51:55:11:7d:ae:96:a3:7f:44:e0:23:b3:
                    5f:d4:96:0e:30:1d:e7:cb:46:c1:a6:6c:f6:ac:e6:
                    e4:c5:69:11:6d:b1:2e:8a:a2:01:78:e5:f9:8d:b3:
                    d2:dd:ec:ff:69:9c:cf:10:0c:3c:04:fc:13:cf:2b:
                    d1:e4:ff:16:6b:7b:c0:41:f1:b6:5d:83:79:be:e6:
                    7d:36:b4:98:29:cb:4e:69:77:7f:9e:6a:4d:87:0b:
                    8d:36:fd:b3:2f:be:b2:6b:97:86:f0:41:4b:77:e6:
                    33:1d:82:f9:a9:f9:0f:ed:ff:8b:53:2e:3d:67:e1:
                    9d:3a:22:01:b0:cd:7e:ea:17:bf:38:db:ad:67:19:
                    66:0e:9c:ac:c4:a9:c7:c7:69:1e:a6:56:be:bf:ee:
                    4f:e0:c5:01:c4:38:90:68:b4:fd:13:bc:1b:86:9a:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:73:2F:37:2B:08:82:C8:46:42:9D:C5:0C:C7:A3:ED:BF:8C:3A
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:65:e4:f8:83:a1:6d:b7:f6:65:c0:02:68:66:28:71:5f:
         03:1e:79:23:08:58:ef:5f:ec:2d:a3:ee:4b:c0:dd:4a:55:d0:
         2a:83:58:1f:8c:f3:d2:d1:75:f9:a1:5a:b2:1a:de:06:4b:f8:
         db:56:f4:e3:46:e6:8e:67:12:00:96:5b:9a:04:ae:ac:d8:a4:
         10:8a:7b:58:ea:7b:ed:e7:04:c0:be:da:37:a0:8a:1e:3f:76:
         5c:bc:e8:a2:57:9f:da:64:70:4b:ac:0a:ff:5b:0f:46:be:82:
         69:e9:2c:34:12:58:f8:d8:b1:c6:2a:ba:ba:7f:39:87:51:9e:
         8d:16:62:41:40:b9:4d:d9:18:d8:9a:cb:c7:62:05:37:20:5a:
         ac:1c:59:72:96:51:60:f8:f4:24:66:ca:09:85:98:cd:fc:e1:
         c3:66:a3:f8:19:25:6d:d2:c6:17:f6:88:3e:d8:84:0d:b8:26:
         f6:d1:af:ad:4e:49:8c:bb:37:eb:1f:e4:5b:68:7a:8e:e7:42:
         62:59:3f:44:ee:a9:ad:b5:be:8c:b0:b6:f1:dd:68:02:b8:40:
         17:35:cd:ca:7a:61:eb:2d:11:1a:24:a5:8c:38:b9:d5:bf:e3:
         42:e9:21:f2:c5:b7:3a:cf:d7:f6:62:1b:5a:bb:53:55:84:6d:
         8c:94:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----