Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier:          nFeHi8RPGO2dk56s1+q0U6L5XhSs2k2pcg0IMap/PR4=
Subject key identifier:   7A:8B:7E:53:3A:1F:48:99:A6:C9:02:E4:5B:2C:3C:41:06:82:43:BA
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       01962F3DD14B81315A1D1F2786BB0D100474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number:          141A
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
                          2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: lRIWVpRQnT9IMWmpAPj14KelNffTVBfkwlXBSyMLhFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:4b:81:31:5a:1d:1f:27:86:bb:0d:10:04:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=7a8b7e533a1f4899a6c902e45b2c3c41068243ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:13:5c:af:f8:e7:79:86:e9:67:26:11:6c:
                    9d:58:98:3e:18:d9:22:80:a4:c9:01:f5:ca:36:9b:
                    a8:f3:4c:4b:e6:b0:39:62:b0:e7:5f:d4:5d:1f:46:
                    92:34:04:12:f7:11:57:fe:b0:f9:f2:2e:7f:88:14:
                    20:2a:f3:33:07:25:b8:1f:3e:26:a1:31:58:9b:a2:
                    fc:98:52:f7:9d:49:e5:c3:87:08:d3:5b:fa:47:af:
                    ab:81:2c:e6:c3:0d:c1:8b:ee:b1:5e:18:89:36:ce:
                    d2:96:90:05:60:3f:59:d7:e0:61:f2:c8:2a:45:87:
                    ee:09:f2:7a:35:fe:a4:7d:ba:6d:aa:ca:88:b5:55:
                    c9:80:9f:47:1b:11:90:67:be:6f:4d:e9:9f:ff:cc:
                    c1:fd:b1:fc:f6:2e:ac:4a:df:26:e5:19:6d:f1:02:
                    34:cd:3d:e8:1d:fd:30:dc:41:61:e3:0d:da:a7:b2:
                    58:00:7c:66:56:ca:13:12:a1:5e:32:60:c7:1e:0c:
                    dc:31:6f:a0:e2:ce:57:49:b4:6c:46:91:cc:be:c0:
                    3e:ca:b7:63:de:f9:da:be:61:09:61:0c:af:35:51:
                    70:5d:84:a6:94:b6:ef:31:75:c1:26:d2:9b:3c:9e:
                    86:d5:b1:be:2d:58:a3:fb:8a:e9:d5:90:25:ec:85:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:7E:53:3A:1F:48:99:A6:C9:02:E4:5B:2C:3C:41:06:82:43:BA
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:b1:e2:df:5d:4e:ba:de:9d:51:ba:b8:bd:c2:4e:3b:d2:
         1a:ef:c6:28:5c:f5:4d:9e:9a:05:c1:30:5a:ed:6b:e7:61:fb:
         0c:12:f0:96:a9:4c:8f:13:01:6c:37:15:09:c3:eb:65:0a:09:
         02:3e:c6:2d:ac:cf:45:12:d0:78:08:50:20:b5:6b:5e:35:13:
         90:41:24:6d:10:fe:a7:40:59:d1:c4:86:b3:99:ae:fd:99:8e:
         bd:0a:e5:9e:22:58:b5:6b:9f:5d:e9:62:a7:89:bb:60:f1:58:
         b1:46:f7:32:9b:83:e6:aa:c7:44:67:56:c0:36:08:43:b5:98:
         39:14:ff:c4:c6:fd:66:7c:e3:a5:93:b2:de:f4:72:dd:f1:a1:
         17:84:bb:37:6b:39:ae:5e:c3:6f:03:01:c0:40:09:40:ed:36:
         bd:76:c6:36:71:65:94:d8:06:bc:68:b6:9d:a9:1c:93:47:d5:
         24:2d:f2:9c:05:c3:b3:92:ec:26:f6:e8:19:c0:cd:87:70:be:
         2a:3a:ea:74:39:c6:b1:e7:27:df:10:ef:5d:ef:14:4b:9b:fa:
         9d:88:12:4c:7d:b7:81:b4:f6:5d:89:e6:39:74:2d:c1:0b:67:
         4d:2b:bb:f0:17:0e:dc:fd:a0:80:ac:46:e0:03:37:01:81:8a:
         72:b9:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----