Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File:                     7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier:          MUPkNP1ycjM5Kzxe70au5WIjRKnACs25Etfr0ToZTQA=
Subject key identifier:   70:F5:A3:90:F2:C3:EF:0F:7B:13:CE:AA:7B:42:B9:EB:F1:14:0D:17
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       01962F74223E92BE7119061A4E65FADADDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
                          2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: Peb9pp2Rji8oeo7Iq7SbQoXsw9PklFOjGB+bp57g6Os=)
                          3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
                          4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:22:3e:92:be:71:19:06:1a:4e:65:fa:da:dd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=70f5a390f2c3ef0f7b13ceaa7b42b9ebf1140d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:07:ac:53:44:aa:9b:d1:09:37:bc:e3:f9:
                    8f:39:a9:d7:8f:87:0d:33:64:6e:ab:3c:9d:15:aa:
                    ed:2d:92:c3:e0:50:ba:83:47:40:81:32:04:86:5c:
                    cd:ce:f8:d0:41:19:a6:f4:fe:00:6e:32:2c:fe:77:
                    3e:37:6a:0c:d4:20:ba:76:8a:ec:35:5d:c6:f3:f7:
                    07:25:bc:99:6f:4e:b8:68:7d:e8:4c:aa:a1:93:20:
                    cb:cb:b0:b8:12:da:86:bb:9d:c2:d8:02:08:f2:b1:
                    3f:d8:45:10:2c:c6:db:6b:4f:1f:2d:3c:20:70:a2:
                    44:a6:de:24:a3:30:cd:4e:3a:05:e7:00:fe:1d:03:
                    71:76:ba:fa:43:ca:21:3f:0e:81:bf:cd:b6:21:9a:
                    10:97:a5:d5:2b:a4:cc:fa:e6:6e:f8:02:f0:9b:53:
                    ee:e5:b3:f3:57:bd:1a:b1:44:66:b1:96:d3:7d:68:
                    21:2e:ad:97:15:34:a0:5e:aa:99:5e:1b:5b:6d:da:
                    19:d0:45:00:0a:4d:79:82:4a:f4:2d:79:1b:70:ff:
                    d2:31:6e:f4:ea:1a:ab:20:b8:66:21:6e:11:0a:f1:
                    4a:03:57:17:b9:8f:09:b3:2a:10:e6:a7:66:99:bd:
                    51:b7:7e:f3:a5:12:59:ca:72:7c:ef:b7:3b:c7:b2:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:A3:90:F2:C3:EF:0F:7B:13:CE:AA:7B:42:B9:EB:F1:14:0D:17
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:13:d7:cd:cd:a4:a4:fc:54:06:2d:cb:47:89:1f:5d:ca:65:
         fe:96:3a:19:6f:3b:93:0c:de:84:4b:62:d0:02:2e:60:fc:97:
         fc:18:14:4f:19:de:ef:09:84:05:15:d1:b2:1b:ae:be:04:af:
         b2:d3:b4:30:59:90:f1:58:72:62:ee:c0:2f:77:50:87:ba:7c:
         83:e5:c7:31:a9:52:4f:16:62:58:ba:df:6b:66:d6:35:5f:89:
         df:b0:4e:e7:3e:7a:e3:63:fa:88:a3:39:33:79:d8:d3:b8:44:
         d8:f5:5d:60:cc:ec:7d:ff:98:85:7c:38:f1:82:33:33:23:a2:
         8a:00:da:08:ac:9e:0b:65:37:da:a4:2b:91:f7:4a:f9:46:57:
         94:c7:1c:4e:35:90:ce:f9:19:3b:82:23:b3:5c:83:4b:b4:83:
         23:24:3d:68:1e:58:2e:97:77:d7:6c:2a:21:2c:35:4e:47:64:
         19:df:70:79:86:72:06:5c:4a:7b:f5:3c:00:18:a1:e5:ea:2c:
         9c:98:4a:b8:a8:97:d7:5a:41:1e:f2:08:3b:d5:78:27:12:d8:
         e9:b5:a1:e2:c7:aa:ac:fe:00:04:99:42:21:f9:8e:98:89:d0:
         6a:23:27:3e:29:1c:9c:d3:c1:e6:bf:c3:44:1d:8d:f0:06:86:
         4b:92:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----