Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          Y8L++eOATze+FFAvYS2sXu1UPcfBzxhBu/5zZb+EETE=
Subject key identifier:   91:E7:D2:CC:5A:80:E4:80:08:7D:B2:C4:31:7B:3F:B7:4D:0A:B8:8C
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       01962E617E3E8E0A4E24CF27C04EF92EA45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: UhjzjFt0EEpIC1ay2/jb/i1uj6U0f/D8ZVkbTIlHQcA=)
                          2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:3e:8e:0a:4e:24:cf:27:c0:4e:f9:2e:a4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=91e7d2cc5a80e480087db2c4317b3fb74d0ab88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3b:ff:c1:09:a9:3c:48:5a:b3:dd:33:e9:af:
                    14:a7:c9:6a:22:42:c6:75:7a:ab:45:e7:fe:f3:d9:
                    92:2a:79:2e:89:a4:83:0b:21:c3:02:74:4e:6b:1a:
                    35:d4:88:c9:d9:5a:11:6b:ec:7e:41:a5:59:da:04:
                    bc:5e:be:7e:4d:d3:ba:42:08:8e:26:51:a9:ef:d6:
                    41:9e:ca:71:dc:87:a3:76:89:6c:66:36:1e:90:d5:
                    07:a5:b3:16:74:07:bd:45:a2:f1:a7:28:3c:4f:4f:
                    6d:f4:53:dc:a9:c5:5d:fe:2b:95:06:07:c8:f4:11:
                    db:9e:91:d0:f8:69:c8:fa:69:08:b1:87:8b:a9:99:
                    65:40:a5:c1:2f:ac:19:32:c4:ed:4d:26:bc:64:af:
                    e0:7d:ad:f5:73:85:7c:65:fa:8c:19:a1:1b:be:22:
                    c5:85:c8:63:5b:3b:5f:7d:88:c5:21:74:c3:83:23:
                    60:14:8b:58:a4:e9:06:bf:cb:5c:a7:0c:99:90:8b:
                    a1:ec:38:a9:ca:48:90:a1:46:60:31:ff:7f:02:a2:
                    4b:be:00:b0:2c:45:79:72:15:cc:f5:cb:01:af:fd:
                    2f:9d:44:65:ba:8e:2c:47:5a:08:1a:b3:d5:64:89:
                    18:78:3f:b5:24:fa:79:d7:14:0e:7b:70:a6:3a:23:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:D2:CC:5A:80:E4:80:08:7D:B2:C4:31:7B:3F:B7:4D:0A:B8:8C
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:80:02:0d:f5:96:39:27:ef:8c:6c:36:c0:92:32:0e:d7:e3:
         98:1a:99:68:cc:40:be:e2:b2:e6:6b:78:6f:9a:3d:4d:a8:04:
         a7:09:20:db:6c:ed:ad:b7:0a:46:70:34:69:62:66:6d:be:1b:
         73:d5:d1:43:08:2f:2e:f6:dc:f1:20:26:84:90:90:cc:53:24:
         c5:0d:be:6a:dd:1e:82:78:77:bc:d3:3b:32:ba:1b:ef:f6:3b:
         30:98:43:36:6b:fa:9f:21:ed:3d:c6:2b:d5:a1:e5:d6:0e:b9:
         51:ea:eb:35:69:63:6f:24:e4:fb:b1:91:93:a5:0a:21:db:1d:
         a3:eb:77:0c:b4:50:98:b8:08:03:2b:5d:b2:17:ba:72:f7:3c:
         26:de:84:1f:da:a1:88:c4:35:8c:bc:bc:a5:0a:7c:10:7d:51:
         84:8d:9b:c2:0c:45:bb:af:52:6d:0e:96:36:ed:83:e3:61:dc:
         16:19:97:b3:86:da:ba:ef:14:65:d3:d7:9d:26:92:d9:7c:14:
         03:ae:93:ab:c1:c3:e5:09:fa:81:8c:92:c2:3e:84:eb:e0:54:
         b0:10:e7:20:3b:fe:b9:c9:da:77:55:a5:fc:df:64:14:0f:3d:
         e8:44:7a:88:f8:7d:25:d2:d4:f7:d8:18:58:29:b5:0f:cf:68:
         9b:c6:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----