Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          /NYfxc9+zQyjQOWa/RS2KjEhCYZtyVw6X1pMlMdsPYQ=
Subject key identifier:   6B:32:31:41:FF:CA:E8:7C:7C:11:D5:82:01:04:53:77:E8:4B:38:91
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       01962FAB737DE6D9A3BE855E0E45F10F7EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: Vo7zSZsfIrXh2uCz4brG1+OxhoOK4MFFyQ57h3fhlyQ=)
                          2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:7d:e6:d9:a3:be:85:5e:0e:45:f1:0f:7e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=6b323141ffcae87c7c11d58201045377e84b3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:de:bb:03:9a:30:40:45:49:e6:ca:8e:92:
                    2d:f8:13:24:a3:6e:85:af:ec:f2:ea:d6:9f:02:60:
                    44:60:aa:2b:a4:1f:77:ab:08:b1:42:77:2a:20:b6:
                    a2:ac:82:d6:29:6d:c9:3a:3d:ff:91:d5:a5:fa:37:
                    91:fd:b8:43:0d:16:59:35:fb:03:2c:73:86:f1:bd:
                    1b:87:f6:f0:d3:b8:8d:a4:37:be:76:da:0e:26:82:
                    88:63:58:4c:3d:bf:34:ce:ac:f6:16:0c:c8:5e:3d:
                    45:7d:e3:51:64:bb:da:62:51:fd:d8:b2:38:36:09:
                    19:6a:6c:0a:ba:70:ba:1f:f1:42:a2:fd:f1:15:1a:
                    e9:27:ca:39:90:55:b9:f7:c7:8f:80:e0:af:11:87:
                    58:0b:d7:6f:c0:32:94:4c:25:53:6d:d1:66:1d:54:
                    68:85:ee:ce:97:97:ca:5a:6b:c1:69:b6:21:eb:e7:
                    24:b9:8b:9f:c8:49:80:5d:ec:24:d9:91:db:dd:f3:
                    36:85:8e:f4:ed:24:12:62:30:01:6a:65:21:58:e4:
                    9c:20:93:3f:e3:7c:e8:05:c9:15:a0:ea:df:91:d8:
                    5e:5d:0f:39:f4:61:64:24:fa:f6:9f:71:64:25:3c:
                    41:7c:dc:75:2b:4d:53:e3:35:93:36:82:24:de:5b:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:32:31:41:FF:CA:E8:7C:7C:11:D5:82:01:04:53:77:E8:4B:38:91
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:f7:60:6d:27:7f:d5:80:65:81:26:5b:f7:13:41:3e:33:
         86:88:c7:71:34:23:8c:d2:cc:35:77:1b:22:a1:9b:68:a0:00:
         ae:da:fb:75:bc:48:43:26:83:62:40:ad:d0:7b:8d:32:11:d1:
         c0:c3:4a:1e:fc:ca:ce:55:78:e7:16:57:97:b5:43:b9:2d:61:
         ce:de:c7:32:b7:9f:7c:ff:c2:4f:44:a5:b5:75:4c:f5:e2:34:
         52:24:da:80:cc:33:c4:ca:92:09:d4:2a:d4:ee:df:7f:0f:97:
         a8:90:07:ef:85:ed:68:c2:6b:a4:56:14:5b:a1:6b:ab:7a:0d:
         66:66:59:c4:19:98:37:0d:45:91:44:5b:aa:b6:d1:b4:30:eb:
         9d:36:91:1c:f1:98:a8:87:71:14:8a:cb:38:b8:aa:55:0d:ba:
         44:14:f3:d7:0e:fd:08:a0:7b:b9:99:d5:db:33:05:36:d8:c3:
         fd:bb:46:da:a4:2b:9a:1e:ea:59:11:d7:ab:dd:da:0b:6d:69:
         fa:c9:ef:53:54:b2:ed:b6:a4:e1:ec:88:5e:3c:2d:ff:09:5d:
         aa:f3:47:43:40:d3:41:48:f6:43:8e:bf:4c:7d:54:a6:ea:94:
         e1:93:40:5a:8f:6b:ad:f0:98:a9:3d:72:e6:81:f4:a6:1b:56:
         1c:ec:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----