Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          JalZNIYbugKMzIscAaEX7XRrgzGRLJq61RC7xpnpmlQ=
Subject key identifier:   99:FF:4A:B9:D9:2A:81:C6:95:CE:70:03:47:61:26:5D:C0:2F:51:23
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       01962F7442375A005FB86E9B442888A043FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          022D
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: 0vaxE7fZHWFeKOLc2dp+sUZSy4OCRphKXWWLUhJXBqY=)
                          2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:37:5a:00:5f:b8:6e:9b:44:28:88:a0:43:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=99ff4ab9d92a81c695ce70034761265dc02f5123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:db:97:78:4a:2e:56:71:0a:bb:e1:b7:ea:
                    63:b2:a4:d8:0c:6e:fb:76:58:1b:42:eb:c5:4b:18:
                    d6:6f:0c:fc:f3:c0:d0:72:a7:12:a2:56:59:57:5f:
                    0c:ed:e8:96:0e:43:bd:1d:f1:ba:9c:49:93:43:28:
                    5f:bd:12:d5:15:21:c6:6e:a8:59:fb:7a:d4:63:2e:
                    3c:97:cc:14:57:dd:b9:7d:27:8c:cf:4d:d6:1b:b6:
                    7f:d7:15:bf:f0:c7:86:b9:0c:e2:9b:be:e5:27:06:
                    f0:23:b9:f9:4e:a1:b4:e3:e6:2f:5e:e8:3e:c4:05:
                    5d:d5:6b:36:fa:6b:6a:9d:b4:bb:29:58:94:d1:70:
                    75:cb:d6:8c:63:48:79:c2:a9:30:7e:21:14:84:cb:
                    b9:3e:bc:89:c8:c8:1c:31:f3:5b:f1:c4:72:73:c1:
                    5b:73:55:84:0e:64:c0:56:b0:c0:7c:17:3b:c1:3a:
                    6b:d2:d4:20:5b:43:02:5d:dd:94:ce:cb:85:00:87:
                    c1:be:25:21:b2:85:f8:7d:d5:c9:ac:52:b0:e3:28:
                    74:04:4e:e0:a6:35:0c:a1:0f:29:cc:be:77:09:65:
                    39:26:02:55:ef:26:3e:70:9d:ff:6a:49:49:12:99:
                    1a:f1:f8:23:ce:fd:4c:13:fd:80:98:44:7b:60:8d:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FF:4A:B9:D9:2A:81:C6:95:CE:70:03:47:61:26:5D:C0:2F:51:23
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:ae:7a:3d:28:e9:79:f8:4c:a7:87:00:fd:c7:25:0e:d0:
         ae:d8:ec:84:6b:10:1c:b7:03:1d:22:d5:bf:46:91:e2:9d:e0:
         fd:5a:1f:c5:cb:b1:57:a2:c6:1f:bd:92:19:98:df:99:76:fc:
         77:9f:3b:04:01:48:3f:35:4d:77:09:f7:a9:60:68:af:17:a1:
         b4:16:8c:77:59:c1:5b:37:a0:3c:d4:07:54:1f:5f:54:6c:4f:
         51:52:58:2a:d0:a5:0e:42:ae:de:f9:c7:5a:2b:20:f6:5b:dc:
         81:ef:15:73:75:96:63:01:06:ed:f4:99:f1:a2:d7:4e:34:39:
         f8:9f:1b:e1:1e:85:d4:4d:5e:ba:56:ac:62:e8:44:e6:34:fe:
         8b:93:04:31:a7:61:f7:a2:49:ca:59:e2:91:3e:6f:3f:2b:49:
         6f:24:ae:83:1d:8a:a4:98:28:77:c6:74:a6:da:81:a8:ce:24:
         6f:c1:f4:05:1a:af:52:c0:64:ce:09:8b:d8:a0:a6:7c:79:dc:
         6d:58:8f:c6:f6:60:e8:69:20:1d:ae:52:58:41:02:1c:36:e8:
         7f:c6:14:df:ae:54:4c:57:67:7a:55:d7:5e:a5:7d:b0:f2:20:
         03:b0:98:c8:5e:d7:e3:0b:14:4f:21:3f:7e:95:0d:27:73:b5:
         48:15:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----