Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File:                     7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier:          r4V/TkM04jJTGYu1okVpa72qVNJSiN6VY8xZ1MgAa2I=
Subject key identifier:   47:2F:C6:D7:AC:62:E7:F9:0E:AA:D9:F1:44:29:0E:A3:D4:59:DE:93
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer:       /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial:       01962F74219A096B7775845D74FB61D712CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number:          0950
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: DvK/p05Ke5nW5zH2bRnAtIoznD1V0SQB3UiPcXSdmYY=)
                          2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:21:9a:09:6b:77:75:84:5d:74:fb:61:d7:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=472fc6d7ac62e7f90eaad9f144290ea3d459de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:13:ae:5f:00:91:b9:d0:1f:89:83:38:a7:
                    2d:fc:32:98:78:9e:2f:1a:87:87:c9:14:23:f1:d4:
                    2b:e4:85:fd:32:99:55:78:19:0d:f2:5d:2b:09:36:
                    73:56:9a:dc:78:44:8b:6f:45:0c:a2:51:5f:79:96:
                    c7:11:7b:84:16:85:bf:36:39:dc:12:a6:30:6d:93:
                    4b:4c:f0:e9:06:67:5a:4d:95:8f:c4:42:0f:ed:54:
                    c8:40:73:d3:37:11:3c:ce:5d:2a:4d:89:a6:d6:68:
                    eb:d9:59:ec:e5:e6:ff:91:0e:ce:8b:76:d2:c2:62:
                    86:16:c7:a3:27:dc:93:e6:bc:f7:48:00:3f:f9:b9:
                    7c:db:f4:6d:d6:f7:cb:28:d8:a7:50:b0:f3:0d:18:
                    51:d7:89:64:e4:a3:f2:fc:cf:99:3d:84:bb:51:05:
                    80:8f:45:60:c2:09:fb:28:74:bb:42:77:93:85:58:
                    36:80:2e:36:64:60:71:6d:5b:17:19:98:1d:57:c7:
                    07:b0:3b:63:f6:87:93:75:c8:83:6c:e8:ef:26:f0:
                    56:72:85:3d:0f:1e:44:74:20:11:99:2d:55:f6:3b:
                    4d:9a:c3:b7:0d:8e:42:56:7d:1c:05:8a:f0:cd:e2:
                    29:24:63:89:88:97:19:7c:01:7f:96:d3:2e:97:18:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2F:C6:D7:AC:62:E7:F9:0E:AA:D9:F1:44:29:0E:A3:D4:59:DE:93
            X509v3 Authority Key Identifier:
                keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:3c:46:8b:8b:9e:ca:75:a4:4b:3d:e1:75:1d:d4:8a:41:
         12:98:01:3d:a1:bb:f5:f8:99:4e:20:c4:2d:12:ed:62:e6:05:
         01:ab:f5:cc:05:a6:8a:78:0a:34:57:66:ba:d2:b5:20:96:9a:
         b7:47:aa:d2:9b:86:a1:de:fd:69:4b:fa:a7:d8:1a:4e:0f:6d:
         ba:c5:e4:58:2d:4e:d0:9d:dc:6f:e2:af:49:90:e2:3e:c2:5e:
         42:96:fe:2d:42:48:f1:36:86:1e:61:fe:d2:d4:07:26:47:20:
         3f:1d:cf:fc:a0:5c:5f:91:3f:f5:da:24:5f:cf:1b:d3:fa:91:
         2f:01:0e:13:36:61:d1:3a:7d:9f:cf:e5:21:02:eb:86:4f:e9:
         a1:0a:24:e2:08:e0:8c:47:31:ed:9f:15:f7:3a:58:f3:de:dc:
         df:fe:a7:fa:3e:4b:1b:c7:c9:73:4b:05:24:a9:4a:c8:bd:65:
         ae:bf:37:ac:5d:93:4a:a1:b0:ba:bf:49:e3:c5:7f:6d:ff:70:
         17:1a:af:8a:41:4f:15:77:55:8b:97:6c:14:b7:ee:32:e7:af:
         28:fe:e7:91:53:36:1a:31:61:c7:70:8a:f9:a4:2a:da:0e:0b:
         91:99:06:5b:22:1f:f5:a2:fe:1d:da:33:d4:c0:67:f4:fa:38:
         46:6f:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----