Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          E6e7e4ucfJp1py0pJUk9d9W8i/YNdUsR0kcq9Vd8G9s=
Subject key identifier:   04:51:A1:8D:AD:87:57:20:E2:44:A9:B2:1A:DC:54:0C:64:A7:BA:5A
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       01962E2ABC502AB417D03D6AAB70E9B08289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          0E54
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: JyQJaIoSe9IMrVGMO0lyy1lpG1eIrWLX7RM1KhB9yCw=)
                          2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bc:50:2a:b4:17:d0:3d:6a:ab:70:e9:b0:82:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=0451a18dad875720e244a9b21adc540c64a7ba5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:a2:46:ad:7c:de:e5:17:5e:e8:9a:5e:7a:
                    84:44:99:fd:3a:2f:8a:a7:b6:ab:d6:eb:d0:60:a4:
                    23:92:29:7c:fc:21:69:bb:77:30:3d:82:61:99:59:
                    9d:1f:8c:92:c2:7a:67:58:45:9b:95:47:f7:77:82:
                    00:22:85:ab:02:1e:bc:05:33:00:78:8d:83:34:cf:
                    b3:80:a5:16:c5:6a:33:7c:fa:9d:3b:ca:fc:9a:32:
                    1f:8f:2f:3f:ac:6b:1a:59:89:22:7b:ce:5e:eb:33:
                    5d:1d:97:90:c5:16:87:3d:e8:ab:91:e8:24:ee:83:
                    6a:bf:3d:3f:19:73:bb:ca:c3:06:5a:25:b8:54:88:
                    1c:67:3b:b2:16:8f:90:be:69:e2:f6:a4:3d:bd:ac:
                    cd:35:a9:2f:39:e3:68:af:30:56:00:89:ca:17:08:
                    be:e8:0b:81:21:d4:c3:21:fa:d9:11:db:76:7c:e5:
                    a7:43:9a:bb:e6:9d:57:63:3a:fd:8c:d6:2a:2d:89:
                    91:50:a1:6b:09:fd:fa:dc:04:17:00:b1:43:59:12:
                    16:e0:71:d5:d5:79:44:1d:d4:65:a1:65:8d:71:0a:
                    61:f6:bd:ab:50:e3:67:22:35:bd:58:78:e3:94:6d:
                    0c:46:96:e5:6b:a7:20:89:3c:58:e2:fa:02:8c:a1:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:51:A1:8D:AD:87:57:20:E2:44:A9:B2:1A:DC:54:0C:64:A7:BA:5A
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:1f:30:6d:a6:cb:f6:3b:d1:c9:5c:44:a8:31:a2:cc:bb:
         3b:f9:c3:50:40:03:b5:7c:d6:16:c9:75:db:ba:b1:62:89:7c:
         71:91:2e:da:66:0a:90:24:8e:c5:05:8d:ac:a6:0f:24:a1:ea:
         50:e4:5e:99:ab:47:68:b7:09:78:a6:42:5f:65:58:3c:20:f4:
         bf:67:e5:b0:51:cf:14:f3:b0:74:dd:8c:47:7d:21:5f:34:da:
         54:6e:bd:05:c5:86:46:6f:a9:b2:67:1e:f9:5b:ec:10:76:10:
         3a:15:65:69:6b:69:cf:b6:58:2d:ef:d5:34:df:81:e0:83:43:
         81:fd:c4:41:e4:ce:9c:74:9c:b0:8d:42:51:82:fd:d1:af:93:
         f4:62:61:b8:e8:1e:5e:16:79:1e:f6:d2:11:50:69:9d:34:c2:
         59:36:c8:ec:68:a4:4c:d8:39:36:2f:5c:4e:d7:2b:86:b2:39:
         8c:5c:34:85:70:b0:c9:de:f3:b0:f8:ad:d0:ab:9c:79:35:f4:
         3a:b6:cd:f8:4f:34:ba:53:c6:59:ba:ba:b8:9d:c2:6a:f0:85:
         aa:94:04:9f:06:fa:b8:36:20:73:a5:c1:b3:1e:f5:c3:c7:93:
         48:5a:62:f3:f6:ef:c6:2f:c6:62:b2:1b:61:75:03:55:9f:5c:
         66:52:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----