Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File:                     7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier:          b/ORFE5OtMujOb/QR8dPKeHvR7Xa34FCLj0B90qlHlI=
Subject key identifier:   66:0A:A4:45:C1:83:FB:1C:30:87:20:8C:19:DE:33:93:96:8A:2A:ED
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer:       /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial:       01962F0660B9FA10BCCF257F95D602A396C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number:          11E7
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: Z0XJAX1pSSGdeBLzNAtNMM144gEdxReqO0eo5XoIBWo=)
                          2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:b9:fa:10:bc:cf:25:7f:95:d6:02:a3:96:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=660aa445c183fb1c3087208c19de3393968a2aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:71:35:25:14:eb:55:82:17:ef:0f:f0:cf:
                    2c:d4:0a:9f:e6:ef:fb:e6:ec:50:bd:f2:9d:bc:97:
                    29:a7:f6:47:40:a6:4b:04:77:72:a8:a2:2a:b1:b3:
                    81:90:ba:c0:34:48:23:21:f1:fb:48:82:26:6f:2c:
                    05:f9:33:58:0c:38:2e:4f:79:2d:c1:e1:26:49:f7:
                    96:c2:78:33:f8:9e:15:2b:48:82:1a:12:af:e8:d9:
                    ff:8c:40:95:19:a2:6a:19:23:3a:e8:1a:73:1d:2e:
                    3f:34:df:e6:9e:40:29:97:16:59:52:37:71:76:1f:
                    c5:64:a9:78:cc:32:22:35:49:3c:ca:30:7e:f5:75:
                    d0:7f:29:3f:3c:12:2c:b8:62:7b:b4:2f:45:9a:14:
                    a7:d6:81:7a:dd:50:fb:80:75:22:ab:e5:69:44:04:
                    e9:55:8b:c6:e5:61:1a:8a:a9:b0:a0:4c:95:d5:01:
                    ab:3f:b3:d8:83:bc:a0:d9:10:40:84:93:31:1d:1a:
                    cc:50:96:68:3b:ea:ee:4a:02:7d:13:8b:04:aa:db:
                    95:8f:1c:91:55:b8:5e:db:4d:fd:f1:e2:4f:20:8a:
                    fc:5e:43:1d:8d:2d:d1:b3:58:b8:19:06:6e:c8:f0:
                    98:e8:4c:8f:93:cb:57:e0:76:58:c2:00:2a:e4:3c:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:A4:45:C1:83:FB:1C:30:87:20:8C:19:DE:33:93:96:8A:2A:ED
            X509v3 Authority Key Identifier:
                keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:84:b7:3f:7d:10:9a:b6:4b:32:55:92:d6:e6:f8:3a:e9:43:
         01:e9:ad:d4:65:1a:cf:aa:04:df:6b:16:15:a4:6d:80:77:26:
         02:d8:8b:9e:c7:e1:53:36:7b:74:b1:5d:ef:ae:77:88:94:33:
         11:5a:24:3f:b8:2e:75:9f:f9:9c:53:5d:5a:0c:95:f7:1f:d8:
         44:da:00:64:46:3a:21:36:11:d8:7a:d8:09:99:13:64:e4:81:
         03:ea:8f:4b:c5:76:85:0a:cc:9d:f2:17:38:ac:54:cd:29:d3:
         32:43:f7:c1:8c:4a:6f:ea:69:09:fd:1c:03:5a:3e:73:f8:ce:
         53:4c:dc:d8:af:64:c6:ef:a8:08:a4:05:d0:af:be:20:b8:ea:
         6f:f2:05:06:30:f1:d8:81:1f:fd:68:ba:ed:1f:c0:73:54:c2:
         14:84:e9:0c:d2:59:d2:a7:6f:50:db:52:94:c8:53:c2:3b:15:
         c9:b7:ef:4e:43:76:5f:c3:c8:e7:7f:14:3a:5e:ae:0f:6a:73:
         a6:9f:43:fa:eb:a8:8a:2c:ba:52:27:7d:8a:d4:69:1e:0c:31:
         8f:61:4d:ba:e9:13:05:b6:3e:9d:c4:1f:cc:d3:13:dd:f6:58:
         2c:f6:ca:33:1b:91:25:aa:03:c2:6e:6b:71:07:4b:09:7b:2a:
         7a:a6:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----