Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          H2dkAi2leIlY1mn5uuqbJm3bld5liyhxMc5hMx/hPJk=
Subject key identifier:   F3:6F:BD:D8:51:68:77:C2:35:9B:BA:66:A0:FD:9D:D4:69:F3:40:B6
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       01962F070D5E0E62725E2EC10C4577D9CB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: xUOAmd1//TTdH0OPYdTtGI8cPD20U7HSvI21AZl4gUg=)
                          2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0d:5e:0e:62:72:5e:2e:c1:0c:45:77:d9:cb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=f36fbdd8516877c2359bba66a0fd9dd469f340b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:fd:f0:a9:43:47:04:9a:b2:63:f4:0c:c8:
                    18:e5:9b:e0:55:1a:f8:83:cc:7b:d4:4f:8c:15:27:
                    16:78:43:25:57:03:b3:3c:8c:62:44:cf:8a:5a:cf:
                    e7:9a:42:9a:6d:13:9c:ca:7d:ce:56:6b:14:ec:2d:
                    7c:13:a4:22:52:5e:27:d9:46:ac:1a:a4:f2:f0:7d:
                    37:0f:9c:b7:9f:a1:39:3f:30:df:d5:1a:0e:44:17:
                    1f:a6:44:a8:b6:87:66:5c:d0:60:5d:84:47:ec:fa:
                    b2:fd:ad:b0:e6:f9:88:4e:28:e1:d0:49:72:f5:1e:
                    47:a6:1a:25:83:62:ee:2a:7d:90:02:cf:21:5d:0a:
                    e9:fc:95:74:ca:b5:04:59:18:50:89:fc:cc:05:9c:
                    93:c3:a1:1d:0f:a2:a1:88:60:92:20:26:46:fe:09:
                    c5:0c:d9:c3:8f:c9:a2:ca:28:5d:2f:f3:c7:51:bc:
                    0d:36:c9:f4:bd:d2:40:f0:b2:d0:b1:c8:d1:0d:41:
                    4a:f1:aa:a2:aa:fc:54:6b:8d:63:80:ec:1d:f7:24:
                    5b:15:ac:b9:3b:38:76:a3:d4:30:a4:33:09:53:1e:
                    90:e9:cd:8c:d5:40:56:8a:90:62:9d:fb:99:35:63:
                    1e:21:be:47:04:76:50:e2:16:9e:4b:07:e7:a1:3f:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:BD:D8:51:68:77:C2:35:9B:BA:66:A0:FD:9D:D4:69:F3:40:B6
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:39:a1:be:fe:0a:aa:bf:c1:ad:8c:a7:20:83:77:71:50:
         01:b1:27:71:0e:77:7d:d7:67:ee:46:fb:90:b0:26:9c:23:c9:
         1f:ff:03:18:a2:a3:33:25:85:bd:ed:dc:62:78:73:02:b0:98:
         ea:9e:aa:2f:a5:f4:23:44:28:6d:c4:8a:dd:54:9f:55:1b:55:
         3b:a9:99:41:32:b6:f9:eb:3b:5e:d4:99:5f:41:0c:bd:89:92:
         3e:49:b6:a8:1e:bc:5b:b4:13:c1:ee:e4:1b:62:26:ff:be:5b:
         45:68:4c:e9:6a:95:7c:3e:23:e0:f8:8b:07:67:36:f8:03:35:
         ca:31:2d:6c:fe:46:df:95:6e:d6:b2:6b:3a:a9:a1:d3:e3:ca:
         38:05:b1:49:54:65:dd:ca:e5:e6:9e:7a:34:a8:ec:55:2b:09:
         15:34:29:b0:fe:04:b2:01:9b:5b:e5:9f:65:91:53:6f:66:18:
         02:9f:95:f7:48:67:81:6e:3b:23:c2:a8:99:2e:80:e5:95:99:
         6b:5d:08:0f:f6:0f:3c:e8:6e:a7:2b:e5:e0:15:77:f1:a5:e0:
         65:9e:33:42:25:22:94:30:7d:24:9f:6d:df:29:9e:df:7e:22:
         99:c7:12:48:9c:be:b0:47:0b:1a:d8:57:ac:65:84:f4:4c:95:
         f2:8f:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----