Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
File:                     7F4esePUCDzQChwAfbeS9xRLTQQ.mft (raw, json)
Hash identifier:          9vpyxOvGThrB/LaLfhKHeBV15le0gW3nHLEKpeGaXkQ=
Subject key identifier:   ED:12:48:BB:B3:ED:C4:0C:C2:76:B5:30:D5:43:4C:8D:FB:26:D9:C8
Authority key identifier: EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
Certificate issuer:       /CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
Certificate serial:       0193FA78969E4726F618EF2B553A55A5A739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
Manifest number:          01A7
Signing time:             Tue 24 Dec 2024 21:00:27 +0000
Manifest this update:     Tue 24 Dec 2024 21:00:27 +0000
Manifest next update:     Wed 25 Dec 2024 21:00:27 +0000
Files and hashes:         1: 7F4esePUCDzQChwAfbeS9xRLTQQ.crl (hash: Amo80vqNdDuyaL8v5V33szmTcFRkHlU28KrresdEwoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:78:96:9e:47:26:f6:18:ef:2b:55:3a:55:a5:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
        Validity
            Not Before: Dec 24 21:00:27 2024 GMT
            Not After : Dec 25 21:00:27 2024 GMT
        Subject: CN=ed1248bbb3edc40cc276b530d5434c8dfb26d9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:5e:e5:e8:92:b9:ce:5a:01:8c:e1:87:0c:
                    c0:8c:1b:84:a9:6c:be:29:31:2e:ee:17:94:3d:ff:
                    77:fc:f0:6f:61:a1:73:b9:10:f0:98:67:08:11:c5:
                    3a:1a:02:48:9b:72:41:21:fb:04:be:c8:01:a3:58:
                    7d:24:c4:8a:37:33:80:af:4d:05:a0:d6:35:87:24:
                    29:2c:d0:97:87:85:0a:4e:c4:24:92:ac:b5:4b:61:
                    92:c1:fb:e0:e4:f6:7c:e1:0e:62:d4:af:fa:ae:0f:
                    de:fb:ef:6e:3f:eb:41:23:3c:f9:ad:48:28:55:5f:
                    97:b3:e7:8f:1c:a9:be:e7:89:27:85:30:15:4c:52:
                    1a:08:61:91:6a:25:22:b5:46:14:da:d1:ec:df:ad:
                    ec:16:f8:96:e9:10:47:ab:08:c0:eb:43:f8:c1:6a:
                    49:7b:6c:53:aa:76:2c:f3:13:9b:1d:8d:c3:ea:ab:
                    09:a9:57:85:11:2b:2d:9b:2c:fd:10:08:39:5c:fd:
                    e1:d9:75:14:22:79:be:3b:5b:bc:95:84:6b:30:a4:
                    0a:2c:9c:5a:19:05:a7:f4:d3:91:2d:8c:0a:9c:06:
                    92:39:96:9c:d2:9e:24:8a:ae:9a:6c:97:e2:77:31:
                    32:84:fe:7e:12:01:dc:f3:57:df:5d:33:41:84:9f:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:48:BB:B3:ED:C4:0C:C2:76:B5:30:D5:43:4C:8D:FB:26:D9:C8
            X509v3 Authority Key Identifier:
                keyid:EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:4e:dd:42:25:ed:82:f0:61:ec:6a:a9:61:87:dd:31:2d:
         fb:77:ad:82:ec:f5:58:9e:93:88:f3:a6:b6:f2:37:a2:af:91:
         9f:c0:ed:55:7a:82:b3:4b:52:a9:3c:30:ee:64:91:4d:70:fa:
         be:54:60:3b:22:73:ca:a3:0f:f3:96:1c:7f:c4:50:25:96:85:
         e0:d8:8b:ca:14:9e:fc:f3:d5:72:13:b7:f9:26:9f:0b:2f:a8:
         ac:8a:3c:b1:2a:7b:8d:d2:cd:d7:cb:a4:0e:f5:b2:ce:d5:bc:
         7b:09:1c:a3:d9:23:97:00:8c:b5:4a:53:ea:ad:ee:39:10:f0:
         23:cf:a9:f7:e1:ab:9f:5d:fb:c9:06:7d:9f:01:d2:3f:d2:b1:
         fe:09:81:a7:77:d2:e9:54:ca:ad:24:fc:8c:f4:67:87:c9:69:
         c7:ce:5b:05:f3:bd:44:fb:b1:2b:7f:7d:2f:8c:4b:d8:55:b3:
         9d:a7:6f:b5:39:17:13:7b:df:b8:33:e0:69:69:7d:a7:13:ae:
         b5:ed:3f:82:94:56:d5:dd:b4:7c:06:87:82:8d:2d:c0:de:10:
         e5:af:ff:ae:66:d7:ec:2c:2e:da:c9:83:a3:e8:07:7a:ba:dd:
         7f:f7:56:ea:21:ef:39:8c:d2:44:0c:40:e2:6a:92:cf:09:64:
         af:4a:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----