Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File:                     7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier:          bGQ6SfLyVCYlYjJ0BLwn56+oOEgBNMjehG7J7RnIPV4=
Subject key identifier:   0C:7A:E2:E3:72:82:31:EB:38:E3:8F:9D:E4:ED:EA:1D:A1:45:65:59
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer:       /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial:       01962ECFE2CA41117370C2340E276179D00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number:          013A
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
                          2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: w1L2GvkhEJh6VhsRqOywLo6LJy1AFdElqjJIk58qbrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:ca:41:11:73:70:c2:34:0e:27:61:79:d0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=0c7ae2e3728231eb38e38f9de4edea1da1456559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:36:58:f7:82:95:78:b1:3e:d6:d8:0f:7e:
                    a7:a8:b9:ce:94:84:64:a2:f9:9a:a3:de:b4:30:30:
                    6a:5c:1b:50:50:6b:d3:c2:9f:d5:05:5b:01:73:83:
                    34:52:5f:48:b0:a1:78:aa:ef:46:1b:bf:8f:da:43:
                    5c:75:22:c2:40:bc:54:0c:b7:bb:08:51:27:88:6c:
                    12:da:3d:d7:ed:e2:a4:be:22:26:77:73:3e:59:4f:
                    4c:2c:37:0e:7d:ce:bb:1a:b2:37:26:7a:62:a3:34:
                    e9:c8:a9:5c:68:3e:fe:6f:5f:c5:9f:bd:54:99:3c:
                    6d:d6:87:d3:02:90:ba:91:54:eb:f2:5f:07:58:80:
                    30:ec:e3:bc:bf:e5:90:7f:74:56:b3:07:2e:e5:50:
                    08:62:36:8c:81:64:df:98:30:49:74:1b:9a:e4:73:
                    6c:3c:b8:c2:33:5e:9d:57:a4:95:3b:f1:47:39:32:
                    a3:0b:af:f7:b8:b7:8f:78:47:48:06:16:e2:63:31:
                    62:4d:d1:c7:aa:bd:e2:e1:96:14:9c:bf:1f:ea:f8:
                    22:be:47:bf:d4:36:8e:a8:f0:43:e5:f1:1f:f5:a6:
                    9c:af:12:c0:ed:4d:ff:ac:d5:6d:9a:ce:ed:21:68:
                    74:1b:8a:bb:de:7a:06:3b:cf:dc:39:34:02:72:8f:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:E2:E3:72:82:31:EB:38:E3:8F:9D:E4:ED:EA:1D:A1:45:65:59
            X509v3 Authority Key Identifier:
                keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:32:fa:75:0b:90:7f:bc:be:01:b4:1b:6d:ec:09:55:76:
         fb:47:1a:85:2e:b9:49:23:87:5e:5b:89:2a:4e:ba:ee:34:b6:
         06:92:70:28:ed:fe:ee:b2:95:72:ee:6e:70:86:8c:11:11:28:
         3f:34:48:64:71:93:54:50:0a:d1:dd:fe:00:66:b4:d1:61:e6:
         38:26:50:e6:85:1d:33:9a:a5:ca:6e:b2:7a:e9:9b:ef:82:9d:
         56:15:26:6b:3d:f1:9e:01:61:4d:1f:88:85:b5:b2:7b:87:6d:
         d2:8b:cd:4f:b1:6e:c8:56:40:b3:5c:4f:b8:71:31:da:1d:0c:
         a1:9e:46:8a:a5:f9:9a:d8:d9:48:41:fb:74:81:b7:3a:dc:fc:
         15:ac:fb:52:fd:2a:70:b0:59:b4:41:b7:fe:cd:07:31:f8:54:
         46:2f:65:91:d0:d9:46:f3:f4:84:cf:da:59:14:aa:bb:e7:7f:
         ea:19:05:8a:55:89:e9:69:50:08:15:ba:08:e2:aa:68:5f:96:
         7b:8e:46:0b:fa:38:73:31:3c:ed:24:07:ba:18:0b:99:37:36:
         9c:29:4f:f0:f8:97:0b:c0:91:10:3b:90:40:64:ea:36:bc:bd:
         e9:53:6e:d4:70:f5:9a:11:00:ac:f5:6d:da:5e:96:5d:68:1c:
         45:eb:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----