Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          3Xir4bZEx3VqNbmRZU8ptTX2xJABFN3UZWKp/MqxV/0=
Subject key identifier:   18:A2:1D:E8:5F:40:98:FA:67:48:5C:9B:F4:FA:3B:72:67:EB:7B:4D
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       01962E2B066490F24ABB5E6D2970C3C11BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          0ED8
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
                          2: XQnA4fzSokv349YJHCcSPvW1wpY.roa (hash: 1T4l/3zq9SIbzqOCRSx+UROHUX/iz06EO7SpCd6NyJk=)
                          3: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
                          4: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
                          5: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: uZty8ILKOso7Y9+/Mpj3aQ+p+N39404cYxg3ba9Lwys=)
                          6: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:64:90:f2:4a:bb:5e:6d:29:70:c3:c1:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=18a21de85f4098fa67485c9bf4fa3b7267eb7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:4c:26:4c:16:48:0c:08:49:df:a0:8d:0c:
                    b5:4f:bf:cb:d6:0e:63:30:d7:3b:43:46:f9:95:28:
                    a0:19:92:a6:e7:ae:cb:51:5e:48:ee:d9:59:76:89:
                    63:61:10:8c:2b:ba:c6:d7:ce:1a:30:de:86:d2:9b:
                    6f:58:97:7f:aa:4e:51:e0:b1:53:f4:38:cd:b7:51:
                    61:45:33:00:26:1e:69:48:25:0a:19:b8:c5:f3:2b:
                    bd:6c:27:10:06:39:a8:2f:f9:e1:fd:4f:e9:e8:e9:
                    d9:7a:1f:2d:40:d7:e9:85:40:98:71:d9:a6:13:65:
                    c2:17:42:f3:33:c9:5c:46:59:1c:4e:ee:c0:5b:1c:
                    4f:ef:a7:3d:35:54:0e:c1:ca:79:c8:68:f1:ba:36:
                    dc:5c:bc:a7:34:cf:32:56:cb:ac:93:97:3a:6b:ef:
                    6c:68:7f:96:86:32:f2:e2:34:3f:b7:e9:dc:6b:cf:
                    45:03:53:6e:b5:0e:14:96:28:3c:f9:66:b5:5c:6e:
                    af:af:f2:79:f1:23:dd:a5:70:45:cd:f8:83:cb:f1:
                    a9:27:0c:80:c5:37:8c:f1:a6:d8:3c:35:80:ae:96:
                    df:1d:d0:fa:0b:9a:27:47:67:fb:05:43:25:02:aa:
                    59:fa:89:82:c3:df:98:92:cc:f2:c2:7c:42:91:35:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:1D:E8:5F:40:98:FA:67:48:5C:9B:F4:FA:3B:72:67:EB:7B:4D
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:76:f3:65:7a:1e:90:fa:0a:f4:57:db:ea:72:8e:3a:29:
         1e:0a:ee:59:03:2a:e2:c5:96:10:90:c6:25:89:2e:f3:36:18:
         c2:0d:b9:d3:40:49:a4:94:07:b4:c2:8e:28:f4:8b:ce:0e:e6:
         e7:19:b7:d6:ae:86:df:dd:28:bd:b1:a4:47:c3:06:58:63:7f:
         05:d7:d4:4a:3c:ba:4b:f9:58:9e:91:01:8f:55:8d:d5:16:f1:
         15:9f:1d:50:59:b3:6c:6c:65:dd:1b:4c:09:7d:10:ab:c1:3f:
         bd:b7:c2:20:41:65:0c:2d:c0:9a:d4:f3:f9:65:88:24:b0:e5:
         ee:e9:e8:65:69:f9:6f:08:b3:ec:31:1c:56:70:db:0a:15:ac:
         65:fc:bb:43:c1:37:d7:d2:bc:e1:b3:de:8d:a1:c7:ef:a1:1d:
         85:0d:64:54:e0:7d:50:94:2d:f3:72:a9:6d:85:a0:e9:a2:1f:
         20:47:db:26:3b:b6:85:ee:f9:85:68:70:5d:cd:3c:21:c9:8a:
         57:32:67:0b:19:53:8c:25:d7:04:bc:4d:80:ab:fb:19:1d:7e:
         d1:f0:bd:f3:dd:f2:2d:4b:7d:bb:a1:5f:89:7b:5a:31:30:ee:
         70:3d:8d:da:d9:f4:62:dc:2c:cf:f0:0c:ee:85:96:54:9b:fb:
         18:c6:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----