Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File:                     98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier:          pR1kzoRdS94VYsKza+CGQiaZb7zZ24Fao57ZPUIUJ+o=
Subject key identifier:   7C:3B:E2:D6:E3:5C:48:42:AB:94:19:2F:95:C6:18:6F:50:3E:89:DE
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer:       /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial:       01962F071961F21F10FFDF6CBADAA39BE515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number:          03D8
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
                          2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: MtyBWTW6yTJ3M8cYcQ/Nck/9KEbk9ATyq6kwxINmPvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:19:61:f2:1f:10:ff:df:6c:ba:da:a3:9b:e5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=7c3be2d6e35c4842ab94192f95c6186f503e89de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:79:fd:a6:11:6d:d8:dc:90:e0:ba:b4:39:
                    37:e0:b6:8e:39:02:12:12:00:9c:15:48:1d:ab:b3:
                    42:01:8b:3c:45:13:67:40:36:e6:9c:1f:b1:0a:02:
                    76:56:df:08:ab:4e:dd:68:b5:c7:50:f9:ba:8f:89:
                    05:80:c7:8e:ca:3a:3f:14:35:95:3b:9e:79:e7:5f:
                    7c:62:cc:af:55:50:8d:85:a5:7a:dd:1c:0f:36:cb:
                    c2:47:6a:93:f2:44:60:0e:ef:74:44:c6:bc:6c:1a:
                    3a:f9:68:40:6a:77:5e:bd:6b:bc:f7:ed:3c:c9:60:
                    3d:9c:5d:c0:a0:e5:13:26:ba:25:3e:a4:ac:e5:c0:
                    d3:58:e7:7e:05:ab:16:eb:f9:8c:01:c8:88:0f:c4:
                    6c:a8:04:da:30:e0:1a:d4:87:02:7e:57:8a:9d:9b:
                    e3:28:06:3f:e7:4c:85:ff:a8:e4:80:eb:46:2b:28:
                    33:46:e4:a2:14:01:39:e0:03:eb:2b:79:da:f1:6d:
                    5b:21:5f:24:39:62:0c:ba:20:f0:c0:7d:c6:7a:10:
                    3b:a5:73:c4:94:5a:d3:b3:1b:1b:6e:99:00:aa:7d:
                    24:db:73:33:79:d2:b7:4e:ba:b7:6f:c2:63:8f:de:
                    8c:d1:41:df:f4:51:c9:05:bc:e8:16:32:ae:e2:5d:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:E2:D6:E3:5C:48:42:AB:94:19:2F:95:C6:18:6F:50:3E:89:DE
            X509v3 Authority Key Identifier:
                keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:6e:40:2d:e5:2b:aa:b7:77:75:81:15:29:e6:73:f4:5c:
         b0:2f:26:81:ea:1c:85:0d:a4:bb:44:a0:42:24:9b:3f:db:b8:
         b2:f9:4a:b1:10:62:3e:5e:cc:bf:da:6a:1c:86:a9:db:fc:d7:
         fc:54:4b:4b:93:00:17:e2:ee:45:da:59:7e:a3:ad:06:08:6f:
         06:ef:0d:3f:18:71:54:b2:24:8a:d6:9e:95:96:36:25:b5:01:
         61:06:3c:01:71:a3:9c:45:3e:a2:2b:81:79:12:b3:ad:08:64:
         01:06:ef:d6:bd:c5:79:1c:d7:20:a9:4d:d4:c6:8b:2e:be:08:
         72:5d:00:1d:f0:b6:21:15:47:ad:f6:91:68:06:03:72:b7:ca:
         11:04:85:b1:07:58:14:a7:71:38:44:4a:df:20:4f:09:80:cc:
         fc:92:8b:2b:82:e7:dc:b6:1e:e3:b0:dc:23:49:cd:22:fa:f6:
         a9:31:c9:43:78:31:46:91:34:31:3d:a3:3c:0e:9d:e5:18:0c:
         93:cb:44:80:67:f1:39:0d:95:3d:06:78:f4:e1:9f:1f:11:be:
         18:f3:48:90:a1:b9:60:52:14:31:63:b5:8f:ec:89:6c:09:80:
         e5:1f:73:e6:79:92:75:c1:38:b1:81:a1:49:7a:8a:8d:b7:57:
         4e:22:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----