Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          Or8aTrlLwXil+pyGqF66qWLgs6bukcBrxBB849o1LM8=
Subject key identifier:   6A:17:2C:47:5F:A3:49:EC:B2:26:AA:0F:5B:E2:FD:5F:95:6B:19:DB
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       01962ECFCF1014ED71191B3D7710C3D029B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: UlMKBtodKweBeFl8Yre+f6BuTrPfImyTH3AaS1tdVKo=)
                          2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:10:14:ed:71:19:1b:3d:77:10:c3:d0:29:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=6a172c475fa349ecb226aa0f5be2fd5f956b19db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:8f:87:04:84:2f:4b:5d:90:00:1a:b5:95:
                    15:ed:a6:e1:90:29:fa:8c:78:09:11:41:93:c4:6e:
                    e1:81:db:c7:63:3f:e0:fc:42:45:ac:3e:e1:eb:70:
                    96:a2:5c:12:fa:bb:08:ca:1d:2e:f9:4a:3c:e7:69:
                    5f:81:fc:1a:f0:23:c1:32:cd:bf:8c:5e:a9:6b:35:
                    68:c9:9d:ef:1c:4d:6d:bd:03:32:59:b5:65:7b:84:
                    dc:1e:23:6c:91:19:7d:93:c7:9f:e6:72:31:0b:0e:
                    11:c7:d4:00:7e:1b:7f:e1:51:8d:5f:12:49:df:d6:
                    72:06:6f:2f:88:e7:c3:aa:51:a1:33:69:84:6e:45:
                    59:f7:16:b3:7a:c1:72:de:3c:3b:28:08:e4:d7:b6:
                    ef:74:a1:77:0b:64:e9:eb:5c:10:c3:cd:41:84:be:
                    fc:37:bb:e5:0c:8e:4d:05:91:3a:8c:1a:07:71:a0:
                    01:ea:6a:64:f0:12:42:ab:08:3d:25:d0:19:6c:d4:
                    4b:25:7f:36:37:d9:30:de:29:4d:74:e3:bd:22:5f:
                    c9:d5:52:0f:97:43:f9:fd:ff:54:8b:cd:cd:ce:67:
                    f8:75:6d:8e:f1:db:22:3e:25:ce:9c:91:c4:ca:b5:
                    ce:81:4c:19:2d:70:09:1c:25:2a:47:60:89:03:e9:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:2C:47:5F:A3:49:EC:B2:26:AA:0F:5B:E2:FD:5F:95:6B:19:DB
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:86:c0:45:be:08:a8:b7:40:b5:20:77:54:3a:6c:23:d0:
         77:7f:8c:47:03:0f:ed:4e:d3:11:84:97:31:20:28:f3:d7:16:
         e8:18:d4:04:26:c3:88:96:b5:56:c2:90:6c:d7:5f:3e:a3:90:
         f8:95:25:10:8b:fb:1d:9c:41:d5:79:ea:38:95:f2:fa:8f:31:
         08:5d:bb:dc:98:fb:d0:6f:00:2c:5f:c8:73:99:32:9c:3c:d5:
         65:da:cc:42:1e:4c:c6:07:0f:ec:55:e5:e1:b9:1b:c4:60:96:
         43:b5:fb:31:b7:80:80:f1:3b:77:9f:6a:cf:52:f2:06:4d:3c:
         9f:ed:0d:09:27:c6:7c:95:f4:ce:52:a7:64:78:d9:c6:e7:99:
         ba:84:8f:c3:ea:57:27:b4:66:aa:d3:5e:f0:e7:6e:78:d8:c2:
         d0:83:5b:86:4e:3d:e5:04:b0:b6:fc:64:ab:23:3a:96:a8:fd:
         9c:b8:4e:40:91:4e:1e:ff:6b:44:9a:0d:b1:41:34:cd:88:4e:
         fb:70:31:0d:d9:7a:e9:18:45:f0:4d:33:98:78:bc:47:f9:8e:
         eb:63:e5:dc:5a:03:5f:b4:cb:55:0d:d0:94:13:81:6c:60:37:
         8b:e4:79:ee:d2:12:38:df:32:ac:20:36:76:6a:ef:76:22:9b:
         47:aa:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----