Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File:                     7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier:          g23xjHVM1THoRVfs+b0CAMsjsv7gKsB/b/TAJoFv9Ao=
Subject key identifier:   97:FA:D7:78:A6:28:53:82:25:AE:0E:42:F8:76:1A:14:77:39:B0:D8
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer:       /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial:       01962F0682C33710D2C302A43254B27130CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number:          12D3
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
                          2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: ZhUqlxg90w5sF3nSWjDGdgW1HeNp/AOfllPHw59BsvY=)
                          3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
                          4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:c3:37:10:d2:c3:02:a4:32:54:b2:71:30:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=97fad778a628538225ae0e42f8761a147739b0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:63:b5:4c:50:af:d3:1d:cf:f4:40:ba:e9:
                    42:c1:5a:e4:bb:ed:ad:c7:51:3f:5f:be:ae:b2:ed:
                    94:4a:82:ee:2b:04:30:39:da:13:bb:bb:6e:48:d5:
                    36:2b:0b:8e:e2:85:44:3e:39:1b:2a:7e:50:41:51:
                    ce:ad:3e:1e:08:2c:10:3f:a5:10:31:25:99:85:c3:
                    92:6d:7d:30:ee:23:14:c1:36:ae:a8:26:66:87:07:
                    f2:f3:f3:17:37:69:92:07:8d:5b:d9:6d:53:c4:88:
                    fa:27:7b:38:df:fc:9a:3b:a2:d2:7a:23:91:88:9a:
                    46:64:9c:94:47:95:39:d3:d2:be:38:23:f0:03:89:
                    e7:3e:d9:7e:d3:67:d8:99:be:4a:09:1d:cf:eb:ec:
                    eb:b8:6e:fd:96:d7:e4:04:6b:bb:30:d9:78:89:e9:
                    b5:77:47:21:09:e5:8d:8a:48:53:e8:42:bf:0f:80:
                    31:10:f4:57:95:82:c2:92:d4:77:3f:d1:ed:ac:77:
                    b0:e5:6d:c3:5b:66:36:98:a1:72:aa:62:5b:09:31:
                    2e:b0:f1:f4:d6:6a:d5:c2:f9:66:b7:69:48:6d:fa:
                    f9:5e:35:a8:ca:b4:ae:d0:52:09:a0:9c:de:3b:d1:
                    8a:a3:fb:69:fc:26:b5:e6:60:34:1d:3d:6d:8a:18:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:D7:78:A6:28:53:82:25:AE:0E:42:F8:76:1A:14:77:39:B0:D8
            X509v3 Authority Key Identifier:
                keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:b1:40:76:db:e4:ce:92:7a:77:f7:d2:4a:ab:71:17:68:
         e7:ce:ab:2e:bb:33:86:e1:77:75:a0:ed:01:6e:af:e8:ca:50:
         bd:af:9f:e9:d2:8e:65:be:a6:97:b7:84:05:de:ce:c1:85:20:
         bb:d0:d9:2c:4a:08:3e:c4:63:df:6e:78:e1:3a:06:d6:90:de:
         e3:4d:c8:9a:ba:03:94:38:07:5d:ee:ee:6b:94:72:17:3c:be:
         20:06:42:43:44:cc:e4:59:0b:b3:a0:5f:9f:02:5e:94:eb:2b:
         cf:54:2c:43:e7:35:db:59:39:00:a0:19:44:f9:62:29:d4:c3:
         f8:b4:db:cb:48:74:79:ef:c5:6c:a8:c3:f2:ce:62:9e:ac:f6:
         65:bb:26:a3:c1:87:04:23:2e:a9:90:72:1f:c1:f0:1b:30:3d:
         fc:b3:91:93:fb:fe:ce:33:aa:a1:a7:17:68:d5:d5:d3:90:40:
         09:79:d9:62:b3:dd:9a:55:52:91:47:05:08:4a:a3:e2:22:d8:
         eb:43:92:52:38:53:1a:02:23:69:11:16:7e:13:5e:f7:84:04:
         c8:0f:40:48:64:5b:5b:a7:13:ae:92:22:8b:84:ef:07:a0:c4:
         27:4c:07:6d:c6:ae:a2:b6:82:fe:ed:52:61:8e:e2:dc:3d:b5:
         3a:7c:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----