Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File:                     7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier:          PMf0Vj7eE6U0MymkzRF6UqSd1oaSe2XVufonrSS9ZRY=
Subject key identifier:   0C:C1:30:08:E5:CD:19:FC:B8:68:81:FC:67:18:93:DC:50:52:D0:0B
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer:       /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial:       01962F3D4C9F626E5D6C7C23BEFF235C4EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number:          126B
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: TBYMwXjzlgS2jPuMyENWwNcHdkPFDitoBcLRrjeSjjo=)
                          2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
                          3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4c:9f:62:6e:5d:6c:7c:23:be:ff:23:5c:4e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=0cc13008e5cd19fcb86881fc671893dc5052d00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:dc:e9:78:ef:cc:c8:ea:15:0a:ab:ea:de:
                    6b:b6:93:59:86:a7:89:6b:fb:a0:07:85:9a:f6:63:
                    7f:92:d1:be:ec:a4:f6:13:f2:86:b5:f3:f6:92:86:
                    3b:80:39:d7:48:70:1b:37:bc:1e:96:3a:fb:9b:1c:
                    ce:56:7e:c2:1b:84:cf:82:34:28:21:77:f9:3c:c6:
                    f0:cc:7d:92:d8:60:46:ef:7d:58:79:98:cf:35:4f:
                    66:0c:1c:3c:ee:df:cb:3b:d0:61:24:92:e6:3d:1e:
                    6a:58:45:4c:2a:05:37:90:ad:42:a2:0b:17:dc:fb:
                    96:52:90:f6:33:ac:08:1e:c3:c7:6a:93:08:c0:6b:
                    45:51:b4:97:6b:98:09:e5:a8:0e:a1:5a:2a:65:4f:
                    f6:e7:cc:22:42:93:9d:21:a2:49:8a:86:df:63:1e:
                    7b:67:c6:54:89:33:07:63:39:65:bc:af:44:1f:91:
                    41:dc:c4:90:eb:77:00:7e:6d:cd:61:2c:fb:b7:d8:
                    be:ab:59:37:4e:38:49:91:00:a3:78:af:99:33:f0:
                    af:11:f8:79:72:33:62:bb:8a:7a:fd:00:0e:fa:ee:
                    04:50:a8:67:16:6d:e4:54:df:eb:83:01:88:f4:c3:
                    d6:0c:c5:b9:5d:6a:fd:b0:16:e5:2a:55:68:1f:77:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C1:30:08:E5:CD:19:FC:B8:68:81:FC:67:18:93:DC:50:52:D0:0B
            X509v3 Authority Key Identifier:
                keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:21:6d:fc:d4:66:fb:09:b1:10:81:c2:d8:9d:59:f5:2d:
         79:8d:63:51:d8:b0:21:51:e8:34:c8:16:95:17:62:6e:af:f9:
         03:33:7d:82:0d:17:e0:62:31:e5:f0:b4:14:23:08:36:d9:0c:
         57:2f:94:b1:c0:e9:c0:b1:1d:dd:9f:4d:47:da:99:9d:61:ae:
         7a:f6:67:95:25:af:ea:b2:6f:10:c5:9b:a3:b5:3e:c6:0a:08:
         c6:97:ea:b3:a6:d0:30:71:c2:09:c7:18:46:3b:85:d9:d2:8c:
         56:d2:d6:b4:b6:c7:63:41:36:f8:30:d7:3a:bc:b6:99:95:a4:
         6c:3c:2b:51:37:cd:22:02:5b:7f:33:b3:1e:de:89:79:72:c4:
         db:46:93:e8:d1:91:2b:ec:4e:b9:8c:14:16:a4:de:2b:6f:f7:
         55:4c:c4:ad:6a:e9:ea:35:76:58:8f:6e:87:d9:93:40:b9:ba:
         28:9b:09:34:ea:80:2e:92:ac:9b:64:a9:31:af:aa:1e:71:32:
         d6:49:97:ac:16:89:19:38:6d:e4:78:29:d7:86:4b:22:99:3b:
         de:c1:04:41:16:dc:16:92:f8:37:30:24:c7:50:e0:e2:5a:43:
         dc:79:1e:28:5b:05:7e:a4:c4:b6:d0:eb:29:2c:ae:a2:27:ee:
         b5:2f:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----