Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File:                     7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier:          u3gtReW6MeW3LBjo5Gx7F+EzGGfEBs2XlUs+/RuO1WU=
Subject key identifier:   E0:E9:A3:F7:4F:DC:21:27:4C:2A:32:46:8C:ED:BF:3C:D1:E4:23:97
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer:       /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial:       01962F06EAA22E7E522416964DCA7C16B825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 4MUCYAZCB6NVOKQFb7pDQIHNpgE.roa (hash: J62BqBqvWBCAmGxGxzXNfz9RxMyKPvmpSv0G2g6PRts=)
                          2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: awPlxJxdO+6tZT8YiFy2/Jrk7NEF6OUceDkX60PyJm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ea:a2:2e:7e:52:24:16:96:4d:ca:7c:16:b8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=e0e9a3f74fdc21274c2a32468cedbf3cd1e42397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:38:ab:ae:b4:72:d0:cd:95:57:57:9b:79:c6:
                    3d:57:7d:8e:f2:37:33:1e:b5:f8:94:4c:18:25:bb:
                    b9:d7:5b:8d:65:c0:48:95:61:2f:d5:d3:6c:8c:24:
                    f4:be:31:44:08:9a:87:49:4d:1d:c5:10:3e:27:4d:
                    5f:ba:80:67:e6:28:35:c2:b3:e5:9a:63:f1:57:a2:
                    46:d4:0a:3c:2b:cb:dd:2e:91:f9:09:e0:95:1e:b4:
                    7a:4b:70:4e:65:ad:fe:76:a8:11:de:3a:0c:68:d9:
                    94:fb:63:63:3b:19:2f:28:f7:12:0e:b9:02:99:31:
                    d3:67:3f:3e:9e:ca:df:97:09:4f:96:60:b0:d7:f8:
                    0c:bf:f5:92:1e:c5:d1:c1:2a:a0:c0:3e:26:d6:03:
                    6d:f9:cb:b5:94:6b:0e:6e:2e:cf:2b:e5:a1:7e:eb:
                    1f:cd:31:70:20:b8:08:b1:b6:aa:1d:da:2a:b4:da:
                    c2:5a:ff:b8:8c:53:59:f2:d8:ec:23:06:1e:62:ba:
                    71:d5:0b:04:1d:97:63:d5:16:3f:52:27:25:52:50:
                    e6:79:4a:67:30:e1:f0:c8:f3:20:57:a8:5f:9f:9b:
                    bf:31:4e:96:13:47:a2:17:0a:d8:fc:12:a6:6a:16:
                    f8:93:40:52:89:3a:18:1d:c7:79:d6:ca:c2:54:1a:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:A3:F7:4F:DC:21:27:4C:2A:32:46:8C:ED:BF:3C:D1:E4:23:97
            X509v3 Authority Key Identifier:
                keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:71:b5:1f:ff:d0:59:92:1e:c5:ac:72:eb:38:77:6b:49:
         0c:39:57:11:17:a0:71:98:bf:8a:52:1f:23:f8:f3:47:da:47:
         b5:60:73:63:65:dc:60:20:49:26:6c:75:66:d3:67:2b:d9:26:
         b3:b2:c2:5b:15:11:f1:e0:ff:d5:42:e0:d4:18:62:71:d5:82:
         66:98:0c:68:95:7e:49:31:b0:13:59:84:e4:ba:90:30:bc:e9:
         59:77:74:88:3c:f7:75:37:4e:06:c4:9b:e5:31:39:72:f0:b6:
         78:2b:55:2c:ad:86:c2:63:b9:64:95:d0:f5:24:b6:a0:36:5e:
         d4:7f:b5:db:3d:bc:34:97:0e:a2:99:ac:d4:77:3c:7f:6c:45:
         67:a5:1c:b6:71:38:67:47:bd:59:11:ab:78:52:2e:a4:7a:b9:
         e2:0e:a6:c4:01:a9:1b:dd:3e:df:14:c4:26:16:81:c7:96:d6:
         dc:1a:1a:4d:7d:78:52:83:47:be:03:0c:15:d1:a3:c7:55:f2:
         8b:58:e7:3c:5e:dc:28:05:9c:6c:18:ec:06:e4:c8:d2:9b:01:
         54:14:7b:37:22:be:6d:fc:66:d9:cd:dd:a7:f4:d9:26:9d:21:
         b8:0f:96:64:34:c2:9c:54:4c:dc:be:9a:ab:d8:0d:d4:b1:86:
         55:98:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----