Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File:                     ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier:          Zzqei+D5Q5ZUnucNS/SuwvE4ufiwESEAmv5M5sG2Mrw=
Subject key identifier:   06:A9:AD:DF:4F:EB:2F:A6:66:5A:D3:1A:9B:C3:4D:2B:8C:23:9C:3F
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer:       /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial:       01962E99E7E444DF4E2C6B79DABC28844899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number:          0550
Signing time:             Sun 13 Apr 2025 10:02:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:40 +0000
Files and hashes:         1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: UxTUEKTm0DEaR7U+HmsltjhcZbL79s1Ax2wwm+sAV3I=)
                          2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e7:e4:44:df:4e:2c:6b:79:da:bc:28:84:48:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
        Validity
            Not Before: Apr 13 10:02:40 2025 GMT
            Not After : Apr 14 10:02:40 2025 GMT
        Subject: CN=06a9addf4feb2fa6665ad31a9bc34d2b8c239c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:9d:81:a3:04:64:6d:66:f5:0d:d1:bb:19:
                    a6:a2:fd:93:d5:18:65:9e:95:0b:ce:0a:14:77:30:
                    0a:d3:47:6d:48:84:2c:91:de:08:7a:1d:4d:22:53:
                    02:a4:71:d1:16:05:f9:09:fa:82:b4:c1:9d:ef:3c:
                    4c:96:d4:d6:56:2f:21:d1:e9:da:a1:75:96:4f:ac:
                    62:f2:3b:7c:28:f0:29:70:6c:15:06:5d:80:e4:05:
                    d3:af:d5:f1:44:c7:eb:4c:7d:ef:ac:47:e1:b3:f6:
                    55:c8:78:39:8c:1c:2b:0a:3d:1d:45:72:47:06:e5:
                    5c:73:4b:22:10:fe:ed:16:ad:fe:1e:a2:a7:fa:c9:
                    c9:98:64:f8:fd:96:99:34:83:11:29:e9:12:b3:9c:
                    8f:e9:90:15:53:95:ef:07:e9:87:7b:15:e4:11:62:
                    18:72:0f:1f:5b:a0:9c:d1:d8:b6:3f:4c:87:29:37:
                    be:a6:68:05:bf:fa:4d:b2:61:3c:0f:4e:49:9a:d0:
                    58:87:6b:5f:df:b0:85:66:41:cb:4c:fa:ee:30:34:
                    b4:4e:b0:49:c9:1c:21:c1:0a:04:8e:ca:a4:25:e8:
                    3e:04:ee:cc:75:85:36:e9:59:4e:ae:2b:22:20:4f:
                    54:af:be:26:b8:3f:43:b3:fd:3f:68:2a:a6:4c:0c:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A9:AD:DF:4F:EB:2F:A6:66:5A:D3:1A:9B:C3:4D:2B:8C:23:9C:3F
            X509v3 Authority Key Identifier:
                keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:fc:b1:19:f9:51:10:ca:20:65:69:25:00:ee:ed:8e:38:
         e8:1a:9b:05:28:23:d6:d7:87:e4:f6:c1:1c:1c:33:29:c9:53:
         86:df:07:18:94:43:5b:8f:b2:01:ce:57:fb:b8:4f:e1:ea:60:
         00:85:84:49:a5:65:82:c9:c2:78:db:0c:33:34:0c:9b:fb:32:
         10:6f:b9:0a:9b:4d:76:84:9b:0d:14:93:72:96:1a:36:b6:89:
         d3:d6:88:a9:94:a9:a3:d0:0c:01:00:fc:12:f8:95:34:91:d7:
         a2:10:80:42:0d:92:b5:c1:95:94:ce:e6:aa:a8:65:71:80:d7:
         49:2f:31:99:12:d2:f0:7f:51:27:6b:7d:9f:2e:fb:1e:ff:a7:
         5b:a8:f1:bf:e2:47:0c:cc:ee:7e:ef:14:22:d7:75:4e:5d:1a:
         4c:ed:b0:6e:b2:03:5a:50:54:8d:a9:b3:42:54:e1:b0:c4:b5:
         70:07:13:7c:5e:70:27:1d:9b:4e:61:c1:b1:61:2c:db:d0:24:
         e7:68:0c:bd:d2:86:7c:55:af:c3:f4:df:77:44:94:f2:d3:81:
         84:c6:79:62:8f:f6:4b:f6:4b:33:52:cf:d3:19:a0:99:f8:8a:
         87:50:c8:48:16:5f:85:2f:5b:ba:59:96:66:d8:0c:ea:fb:28:
         99:10:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----