Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File:                     7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier:          hv/5/qWQwmYKjso8wno4zUV5NhNhDgIXqAkJJH9layc=
Subject key identifier:   D7:36:AC:C2:52:00:A6:D5:70:CB:08:21:22:90:09:DB:90:72:13:8A
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer:       /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial:       01962E98DF69ADDC9EE717F5A3D34376A965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number:          0627
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: ZoWhSIFtKgBp7UO/Rthzfy/avrXlhBg3vJ+PyIN14aQ=)
                          2: kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa (hash: Ff8IU/0K89U686a3qz0aLt9a8lnUt29LLnlbj61soko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:69:ad:dc:9e:e7:17:f5:a3:d3:43:76:a9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=d736acc25200a6d570cb0821229009db9072138a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:e2:08:29:cb:9d:10:e0:fb:11:0b:e8:b5:
                    da:b5:79:c8:c0:03:1b:06:0f:49:21:d0:fd:61:17:
                    40:12:60:24:99:b3:d8:22:e9:de:54:88:f9:f6:9e:
                    9c:7b:84:c5:bf:c8:0c:db:fe:30:08:08:4d:63:97:
                    e2:54:62:9b:b7:54:40:fd:43:1b:66:96:29:a6:b9:
                    2d:d8:68:62:d7:d4:6d:09:9f:1c:dd:3a:d1:69:e5:
                    0a:10:fd:b2:55:41:8a:07:04:5a:d9:04:86:6a:fe:
                    41:4c:f1:f9:33:ac:cc:f7:a4:e3:53:06:88:30:61:
                    ae:b9:71:1c:97:5c:95:32:4f:55:95:45:90:54:b6:
                    99:ef:54:01:66:f5:3f:a8:ef:6e:15:f8:e0:87:57:
                    50:73:e3:d1:ed:ea:63:38:7a:f7:dc:b0:43:84:24:
                    ed:53:84:04:5a:a3:5a:51:e2:82:13:16:e4:12:e9:
                    f4:6a:58:a0:ca:2b:5e:35:e6:4a:27:82:40:80:84:
                    6f:08:20:23:fd:df:5b:f8:71:dc:31:c0:09:c2:fc:
                    e2:98:d5:59:2c:4c:c7:c1:1d:ad:2c:04:40:32:0d:
                    49:a7:90:a2:3a:40:b8:3a:30:0f:11:b8:58:14:0e:
                    18:bb:5d:1f:b8:e4:32:d8:ce:50:3a:ea:86:06:31:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:AC:C2:52:00:A6:D5:70:CB:08:21:22:90:09:DB:90:72:13:8A
            X509v3 Authority Key Identifier:
                keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:60:60:df:16:b1:32:d0:d3:a2:af:90:cb:71:aa:f9:0b:
         f1:f8:49:08:22:9e:4b:b2:51:c2:a1:82:14:79:f2:eb:d0:93:
         3e:db:6c:d4:42:9f:5c:15:f6:42:ea:b3:15:13:2e:d6:d9:53:
         82:7f:a4:8d:a3:fe:56:89:17:4f:d1:fb:a3:f4:ed:21:96:35:
         cd:6b:ee:e5:d0:11:2e:4b:2b:55:1b:e2:49:93:e7:d1:61:de:
         b3:84:20:f6:8f:b4:8f:3b:0b:1d:cd:e1:46:60:65:1d:b3:13:
         31:0c:21:96:55:61:36:4c:47:0b:18:76:4c:5f:fd:3d:34:1c:
         db:60:72:24:fb:05:91:b1:d3:34:78:85:9d:e8:c9:f2:cb:af:
         ba:ab:19:16:63:04:39:51:3a:59:9c:b7:bc:a7:16:d8:e8:a9:
         a3:e6:35:00:81:f2:0a:ed:6d:bc:90:1d:23:5b:07:90:d1:8b:
         24:f3:e6:31:81:34:a2:59:05:4e:b8:83:98:9e:5c:96:6a:05:
         5f:ab:92:be:17:64:5f:fb:9e:d6:af:ad:ef:51:68:cb:41:0b:
         e1:20:85:06:2c:70:50:45:7d:83:4c:cb:58:ad:f0:f0:ab:55:
         f0:c2:78:f5:51:10:45:aa:f8:de:de:c7:8e:dc:e2:65:53:91:
         7f:92:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----