Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File:                     7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier:          mv8yygGE1JfvJN4vJe6dWJb1ZO2FB+uLjpmB3ebkipQ=
Subject key identifier:   48:AC:2A:5F:BA:6C:B9:22:5D:3D:90:57:65:88:DC:5F:8B:F3:2C:AD
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer:       /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial:       01962DF39CB29C6C83EB7F6E425960F56D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number:          0C59
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: OiER9/HFjQDbsH00TL4IlWVgGCWjSvrgIcx5MlVL5qs=)
                          2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:b2:9c:6c:83:eb:7f:6e:42:59:60:f5:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=48ac2a5fba6cb9225d3d90576588dc5f8bf32cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:73:0e:7c:31:2e:f9:e7:fb:1b:7f:dd:e4:
                    ab:bd:9a:12:81:81:26:a4:bf:91:9d:f4:ea:3c:20:
                    b6:d7:e8:20:4a:94:29:ac:a7:da:29:0a:ec:5c:5c:
                    1d:13:fc:f1:56:ee:61:06:aa:ee:f9:41:80:b3:11:
                    5b:d4:4d:61:ba:24:ee:8b:d6:77:13:cd:21:ae:d5:
                    86:0f:da:b8:59:5d:4c:e8:03:67:80:0e:f7:e2:b7:
                    60:13:b5:73:49:e0:05:80:56:42:8b:c8:b4:7f:1f:
                    70:27:f5:14:bc:73:1f:5b:c8:21:41:4c:a7:78:05:
                    12:31:f1:f9:94:7b:a5:c5:40:ed:fd:be:3c:5a:13:
                    4b:b8:90:b7:0c:ce:8a:3b:13:4b:1b:ac:25:01:7d:
                    04:55:43:3c:e6:f4:9a:46:c0:89:77:3c:cd:20:ea:
                    24:2a:5a:9f:c1:ee:0b:a7:04:ef:85:28:8e:4b:a8:
                    4d:4b:a5:0d:48:af:23:8d:a0:6f:af:8a:ca:a3:65:
                    68:4b:30:d0:2b:ad:5d:0f:30:1b:d6:d9:e7:f9:70:
                    64:2f:0c:e8:78:f5:3d:02:82:c7:ae:6e:f3:f5:f0:
                    fb:26:82:c1:43:01:5e:d3:b8:72:09:5e:5c:64:b8:
                    2d:51:58:c2:0d:c9:6e:c2:ed:f4:89:80:b9:0f:3b:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AC:2A:5F:BA:6C:B9:22:5D:3D:90:57:65:88:DC:5F:8B:F3:2C:AD
            X509v3 Authority Key Identifier:
                keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:66:e4:02:db:ed:9c:90:7b:5b:78:57:19:a2:21:51:7c:74:
         92:b8:66:b2:44:e6:06:b1:28:a5:84:e4:c8:8b:22:69:6d:d5:
         0e:3a:12:db:95:47:b7:54:7f:92:f6:af:1e:54:da:cb:69:cf:
         e8:d3:b6:89:3b:68:21:e2:27:81:6e:25:54:60:f9:3c:8b:3c:
         c8:86:dc:13:e6:5e:5d:d2:1a:66:c0:40:8f:32:78:3d:f5:e1:
         67:62:ad:3c:4b:25:06:59:56:62:90:31:fc:b6:92:87:e2:45:
         22:f7:be:82:5e:99:49:7f:a4:fb:2e:72:02:7a:c5:d6:db:33:
         22:a8:c7:36:f2:df:56:74:05:fa:58:fd:ea:e2:87:e4:65:19:
         79:c7:32:f1:b2:f2:1b:6e:9f:8a:1a:5d:5c:07:4c:12:14:58:
         82:8f:d0:c1:50:25:1f:0a:6c:ff:40:a7:1c:6f:fc:11:67:44:
         b9:38:fd:bc:c7:e7:2a:85:01:9a:cf:7a:de:f1:10:70:ca:2c:
         6d:d1:ca:7b:cc:e1:bc:55:ce:db:47:29:7a:4c:66:7a:e7:f2:
         eb:33:34:ec:65:bf:79:af:0a:57:75:12:1d:dd:a0:07:1e:04:
         11:ff:e1:8f:67:be:51:01:8e:39:05:8b:27:53:7b:ab:03:00:
         1f:fe:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----