Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File:                     d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier:          XF+qURQFB1SGXTGOsfIIFGUT/CdVI5LJTjvmOHzo4ps=
Subject key identifier:   22:7C:11:30:F9:1C:C8:E7:A2:4B:F9:39:CE:71:EB:4B:26:BD:16:57
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer:       /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial:       01962E62142D3CD28AB742D54BB502A61185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number:          10F0
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
                          2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
                          3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: vPS6aaDWPPiAcYsUgWP9JmbBqhSEc5+lcBegr9sOj2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:14:2d:3c:d2:8a:b7:42:d5:4b:b5:02:a6:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=227c1130f91cc8e7a24bf939ce71eb4b26bd1657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:94:95:ad:2c:7c:9e:bc:6f:88:91:42:13:
                    ef:f5:88:e3:15:82:83:7d:eb:e5:69:d6:35:d7:a8:
                    d0:9f:d4:e8:cb:08:22:35:34:c4:58:2c:3b:8e:68:
                    28:97:f2:c4:5a:7a:06:be:cd:70:ef:84:14:6c:95:
                    dc:90:d7:ae:44:55:33:df:e3:75:61:11:40:96:f6:
                    37:49:d3:3d:66:11:ad:fb:ed:a2:e9:ed:df:6b:7a:
                    65:e8:48:6b:a6:a2:11:00:4c:2a:9c:37:1b:72:47:
                    5a:58:3d:e3:2c:86:ab:42:ff:11:9e:ac:32:44:91:
                    eb:3d:cb:6d:17:cb:95:2d:43:5b:7f:ed:16:24:56:
                    8a:11:3e:7b:82:cd:09:62:fb:ad:84:d8:b8:15:5c:
                    a8:35:f8:78:9d:0b:59:da:22:e6:70:dd:09:ed:f3:
                    4a:85:00:94:f9:3b:2b:6b:92:84:83:4f:aa:c7:0b:
                    77:37:78:ed:93:96:1b:43:a5:a2:d2:c3:a3:5f:c3:
                    42:e2:16:81:61:97:e3:c8:80:b4:8c:ba:7b:d4:48:
                    0a:9c:ea:73:95:fc:54:30:6d:ae:30:7b:cc:87:46:
                    8c:b4:6c:4d:7f:28:c0:29:6e:c8:98:e8:41:89:15:
                    e0:1b:a9:7d:da:0c:92:d5:91:e2:09:d5:46:35:bf:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7C:11:30:F9:1C:C8:E7:A2:4B:F9:39:CE:71:EB:4B:26:BD:16:57
            X509v3 Authority Key Identifier:
                keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:16:c4:9c:0a:34:37:a1:e3:c0:40:46:74:f2:40:51:6d:
         23:e8:b7:8a:01:60:c8:b7:1e:f1:b2:2a:e0:30:a5:a6:ad:e1:
         ae:1a:1f:eb:cc:6d:8c:52:0c:80:f3:7c:48:7c:76:52:3a:21:
         73:47:c6:24:95:20:e4:4b:11:ee:ca:4e:7f:bf:80:56:d2:57:
         a0:61:1a:85:75:83:ca:cf:bf:14:e6:11:e9:a8:ec:bb:db:51:
         a7:50:48:d7:2f:b1:4b:b5:3a:0e:60:d8:ff:31:77:26:ba:05:
         da:d7:d1:7c:b0:35:23:28:22:2f:b8:8e:6a:99:e6:9e:de:13:
         86:fd:66:bf:a7:3f:ab:ff:78:ce:fb:68:fb:bc:66:78:27:08:
         5d:c7:c6:c8:c4:f4:6d:ce:48:6f:55:e0:7f:b9:43:fe:c4:34:
         7f:54:ea:10:4c:7d:d1:20:18:f9:88:dc:7f:1a:58:d5:c3:b3:
         9b:90:ad:59:1b:ec:5d:63:1f:b9:05:4e:cb:80:8c:6c:10:16:
         18:9e:03:e5:f9:d6:4b:67:fa:9e:1a:72:f1:31:2a:0a:bf:38:
         20:12:e9:2f:b5:9f:cb:77:25:42:98:c3:4b:f7:c9:9f:f0:1a:
         4a:53:99:6c:2f:28:a0:ff:40:b8:95:7b:68:21:da:1a:f4:e8:
         81:ee:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----