Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File:                     epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier:          BYo9BDI5dPa5mc2YDuf8/kcEputfBnXVEWLsJpxLZNk=
Subject key identifier:   C7:28:D8:58:72:8F:76:3E:10:B9:73:70:6B:66:D8:2E:BF:B8:77:CE
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer:       /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial:       01962F06A6F824A1FFD0FB966BCDD1556BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: YbDpVOtAHI2li6e3EYY/MiMm+vDdZb8KJ78X99L6WP4=)
                          2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:f8:24:a1:ff:d0:fb:96:6b:cd:d1:55:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=c728d858728f763e10b973706b66d82ebfb877ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b6:0e:3c:f0:7f:69:36:3c:65:5b:40:86:62:
                    0d:76:cd:36:54:ab:74:f2:95:df:1d:f3:54:bf:97:
                    73:ee:ca:18:89:90:3e:78:82:e4:13:09:81:e4:0c:
                    71:5b:0a:04:99:c5:c1:11:fe:e4:d4:f3:75:3b:45:
                    ac:cc:2f:65:a2:d6:1e:b9:1d:3b:b9:87:ab:f4:7a:
                    43:38:ca:56:0a:6c:4b:32:6a:ca:fc:97:4d:7b:7a:
                    08:fa:fa:b5:6c:d1:2a:ec:65:c7:5a:12:70:84:7d:
                    59:dd:cd:b1:d0:f5:0f:9c:86:3c:7e:07:47:9b:c5:
                    98:ee:e1:d7:b2:4e:27:0d:3a:bc:00:ae:1e:af:df:
                    4c:ff:50:c0:60:84:d7:35:53:00:58:0e:72:38:bd:
                    83:4a:5d:54:20:62:52:f1:9b:da:8c:94:bd:5a:9d:
                    22:a2:0e:43:41:0b:d6:89:7e:5a:4c:32:6b:ed:23:
                    52:a8:e1:dc:04:ad:5f:58:d7:b3:87:7e:10:2d:61:
                    07:9e:75:f6:b1:db:51:99:79:9e:87:e7:04:12:d1:
                    cf:91:24:cf:29:68:d7:ff:36:f7:08:dd:d2:e1:65:
                    ac:4c:28:58:67:da:f8:5a:eb:ca:95:c8:b3:94:d3:
                    83:bb:82:cf:53:c2:7b:f2:a3:bf:ef:3b:44:9b:d1:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:D8:58:72:8F:76:3E:10:B9:73:70:6B:66:D8:2E:BF:B8:77:CE
            X509v3 Authority Key Identifier:
                keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:31:73:31:46:f7:46:11:05:2b:c8:2a:77:84:41:d6:30:
         6e:c5:c9:68:0a:d0:bb:f1:39:7d:9d:48:78:9c:0c:fd:76:52:
         b0:f6:5f:87:b0:19:42:19:d0:f8:9c:06:44:22:09:7c:41:40:
         65:6b:74:ca:a2:9b:df:56:91:ce:2a:ed:22:27:01:f2:a2:da:
         8d:8b:ab:9b:7b:d2:95:86:be:6f:7c:19:49:6c:5a:cc:00:47:
         1e:c6:32:6c:cc:77:38:7a:db:66:ef:8f:1d:f4:27:29:33:ce:
         b5:0b:0d:97:f2:a9:db:34:48:3c:ff:42:0c:d9:d2:c6:57:64:
         09:dc:64:ad:3b:b6:32:fd:c6:f6:9e:c3:db:56:ef:25:d2:e6:
         5f:5c:29:1f:1e:a6:ac:ec:eb:3d:07:1a:2d:74:8b:d3:d2:10:
         e3:aa:4b:a8:92:79:05:d2:00:f6:82:4a:92:26:6f:56:42:87:
         f2:f2:6b:6a:64:a1:c9:b7:7e:88:50:5d:3b:5d:43:f4:7f:55:
         89:3b:7d:f8:43:9c:af:28:10:69:e9:95:c6:cd:5b:07:94:a3:
         b0:1e:30:0d:9c:11:c5:ab:d1:cf:ba:3a:3d:63:7e:e2:eb:8d:
         21:9e:3c:24:e5:ae:6a:7f:07:f1:1b:0b:c5:29:4b:de:0b:e2:
         ab:ec:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----