Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          p/TvgEoOPESHlg1buKMZbJTiHNWAJfVozbPOCjcNMBg=
Subject key identifier:   A6:2E:FB:9F:7A:22:38:F5:BE:92:46:55:58:60:93:6D:3E:47:00:AD
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       01962E2B057DCB2777105D3A7701C2EFA8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: sNbABfKZ+WJoy5MfmXapn2Ef2hNIUaFLXAFeS13Sdl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:05:7d:cb:27:77:10:5d:3a:77:01:c2:ef:a8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=a62efb9f7a2238f5be9246555860936d3e4700ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:c6:06:72:10:7f:18:8f:84:ce:36:d8:95:
                    db:a9:7c:c1:08:51:be:60:d5:0f:e3:8d:e1:5a:81:
                    7b:6b:d9:c3:25:0a:0c:57:04:7b:f5:f7:85:88:4e:
                    95:73:81:5a:a8:e9:dc:ff:b3:e1:00:5f:0c:ff:c6:
                    a9:ef:df:76:94:67:42:4c:02:2b:30:be:ea:a2:54:
                    bc:67:74:d8:29:8f:6e:a9:ec:39:42:57:cb:8d:3f:
                    8d:72:cd:f4:b8:6a:56:ca:2f:21:fe:c8:31:68:01:
                    25:20:db:46:ca:58:d9:7e:16:7a:9e:01:be:c5:01:
                    34:fc:05:5a:00:96:39:99:97:1e:5a:ef:e5:15:61:
                    33:c7:31:59:8b:a3:8b:08:87:15:b7:8e:d8:86:d8:
                    04:b5:56:9d:61:38:0b:96:35:3b:33:f9:82:cc:35:
                    2a:79:e4:40:b9:51:57:24:14:77:3d:c2:04:52:2d:
                    b7:cc:35:91:a3:ec:7b:53:08:12:5f:e9:44:e4:60:
                    15:b9:12:eb:99:6d:1b:69:62:15:e7:c6:1e:01:f9:
                    cf:78:da:72:84:05:cc:ec:00:44:f0:d7:a5:a9:05:
                    58:81:a7:a0:a4:da:3f:f4:80:87:4a:bc:9f:04:e7:
                    40:18:81:1e:8c:2c:7c:75:a1:d4:06:f1:8b:5c:41:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:FB:9F:7A:22:38:F5:BE:92:46:55:58:60:93:6D:3E:47:00:AD
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:a0:79:18:58:d7:c2:d3:84:93:69:74:5a:e3:43:6e:2e:
         b5:2a:c3:3f:37:2c:16:ae:59:c6:51:99:db:9c:9c:5a:12:cb:
         6c:3e:ec:ce:96:89:50:78:96:77:73:e5:18:5c:39:fe:61:03:
         41:ad:d4:75:58:6d:dc:ba:93:d1:59:40:0e:a1:8b:2d:f5:04:
         f2:ab:7d:15:e6:31:2e:99:22:ab:b6:17:0c:5e:97:2f:86:c3:
         c1:5b:b4:68:de:ce:76:88:f8:ad:08:cf:e1:e7:15:0d:00:05:
         a6:ed:95:a8:5b:b9:1a:81:f5:e7:2d:21:18:79:ae:1d:4c:d3:
         ab:e2:df:bb:90:c8:9b:3c:bb:77:ec:9b:b9:16:0c:2f:9b:b0:
         25:bb:a8:2a:f7:e0:eb:3e:3e:91:65:c1:99:a5:ed:d7:a1:b8:
         c9:15:da:e6:1c:87:e0:3f:d1:dc:89:f2:4d:be:0d:e8:c7:cc:
         e0:fb:ab:ea:36:6f:84:f2:2c:55:bd:10:63:b8:4b:ca:e1:17:
         8a:4a:93:ac:2f:59:d8:fb:39:35:1e:dd:90:36:b0:de:6e:f2:
         b7:46:92:0c:da:66:16:c0:e7:85:e5:0f:91:f2:01:e9:f9:ba:
         b0:70:ae:71:63:ac:3b:d7:b4:56:a1:ca:f5:59:1b:48:c3:a3:
         98:10:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----