Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File:                     7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier:          Cmm/zqdGT1AcTKSMtAwk3HRkh4WN9d3BVYu26xJ2IpE=
Subject key identifier:   F7:D2:65:B4:39:83:EF:DC:9B:A4:39:84:A2:93:22:A7:81:C1:E0:5E
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer:       /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial:       01962F070E9D4946D1F7C788D519B79FE3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number:          0C58
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: OBl3xeufeQ8GK6ZeysQ6UlFIyjC05y5h/3pfMuNn63A=)
                          2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0e:9d:49:46:d1:f7:c7:88:d5:19:b7:9f:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=f7d265b43983efdc9ba43984a29322a781c1e05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:19:49:49:3c:e5:f2:f1:84:98:2f:4a:07:
                    ba:07:9b:aa:ee:1b:94:5d:0c:34:a6:4f:dd:c9:7d:
                    94:1f:92:07:73:3b:5e:e9:af:3e:3c:68:16:ed:ba:
                    84:67:22:21:5e:04:8d:15:d1:72:05:f3:95:8c:ed:
                    84:2b:08:db:ad:f3:64:1a:22:88:cf:c4:2a:d4:dd:
                    e0:59:d7:24:2f:10:da:60:a7:d5:ba:dd:c0:33:cb:
                    cb:96:c2:e9:95:84:b8:8a:98:91:58:1b:dc:c5:fb:
                    80:9e:e0:3b:2c:af:d1:32:09:fc:4a:f4:da:1d:79:
                    f2:2b:a9:fc:cc:74:db:32:c6:b8:97:31:43:52:5d:
                    a5:81:19:6e:3d:bb:5c:54:5b:ec:0c:fe:64:fb:b9:
                    f9:61:24:e4:d1:86:6b:fc:91:05:d9:42:f5:e9:32:
                    df:8f:64:8a:fd:9f:b6:8d:f5:71:92:7f:1a:1b:17:
                    10:e1:d0:84:15:50:39:3f:2c:35:ce:5c:a1:1a:66:
                    b0:59:a7:e2:33:a9:b8:a2:74:6a:7e:45:8c:05:92:
                    b3:9d:dd:2d:55:ab:75:2e:90:8e:27:49:03:03:b0:
                    64:4d:4a:f7:3b:66:7e:c7:4d:db:bf:1c:75:ae:84:
                    87:c0:f5:21:5d:d8:1d:c9:fc:44:48:df:3f:b4:01:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:65:B4:39:83:EF:DC:9B:A4:39:84:A2:93:22:A7:81:C1:E0:5E
            X509v3 Authority Key Identifier:
                keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:ad:4f:d7:b5:0a:07:82:05:89:76:59:de:13:b8:37:fb:
         38:9c:e4:76:98:aa:cc:e3:d3:56:79:c6:b6:56:f9:10:e1:51:
         ee:d8:5a:61:52:47:e3:3f:af:4c:6d:08:47:e7:71:39:05:0a:
         56:f0:eb:37:70:8a:3f:88:04:34:e9:93:d1:09:cf:06:7b:ef:
         85:e8:97:86:cb:22:d4:81:fa:b4:d5:5c:72:51:fa:b8:ac:d8:
         9e:1e:38:e4:d5:10:19:9f:bc:17:97:5b:74:ea:be:b2:e5:9f:
         5f:f2:ef:94:9c:25:63:ef:67:5b:0b:2a:27:bc:ff:28:14:78:
         37:a2:fa:24:d1:03:b2:98:14:12:29:e8:26:88:57:f1:f6:db:
         c0:5c:63:07:ec:47:fe:2d:56:f2:6d:d9:98:25:f5:07:23:c1:
         d4:41:d7:86:ea:0b:59:ae:ce:65:d7:03:24:75:be:1d:4f:66:
         15:a7:51:4c:e7:47:97:f3:99:c7:82:00:1c:c0:8d:a5:74:4b:
         c0:7e:90:4e:0e:6c:66:1b:5f:ed:af:ac:ea:ab:84:38:1e:5e:
         a7:69:02:6a:2a:5c:b8:c8:05:78:3a:c7:63:d9:9f:ad:8a:43:
         7f:9c:58:0e:d6:0d:a8:3b:9f:99:5c:71:7f:61:cc:59:4b:23:
         b0:3e:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----