Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File:                     7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier:          y7pDwLeiwQSpFxRoSRkt20oyHqvOjPpS7o49Ko0gQ8U=
Subject key identifier:   E7:E9:F7:90:2D:0E:3A:03:1D:0A:EE:94:B6:C5:86:03:53:00:D0:B9
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       01962E993C2DD3BB175952F408F11A3C8164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number:          07A9
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: N6iPQiJmh4VS8Y2iatwUdYVDGHUUhNAkmi9PwcPcoWc=)
                          2: Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa (hash: 2wr8T0grb9p6jSoZGL4iOk6puHmWjQj/8ATxJRocBJM=)
                          3: dV2OtRjSyQPY4YCyr9lFdLU27E8.roa (hash: eomTnqbffaVsgF38WkF2EttPiM+DiZupJiWYxVCsPt8=)
                          4: xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa (hash: 476qF8QW7rlffGimT6vIV2UtU8yiqDsBP0tdI7yQI0M=)
                          5: yw6X4fanN8KY91uH96jddlevGXo.roa (hash: kgMdFQOHRL6TCI+SfQlFblY28F8TUhxl1fkSEaUx52Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:2d:d3:bb:17:59:52:f4:08:f1:1a:3c:81:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=e7e9f7902d0e3a031d0aee94b6c586035300d0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:d4:aa:37:c3:9e:37:79:17:94:ad:b7:39:
                    0d:24:23:a8:9b:ce:e9:40:0b:eb:eb:63:7e:f3:db:
                    1b:8b:6b:2d:f8:ea:34:5c:9b:e3:66:a8:8f:d9:9b:
                    79:8c:67:71:2a:ff:f4:7e:f8:b7:c6:d1:f9:34:aa:
                    d4:dd:cd:16:f1:a2:11:03:f2:44:b5:22:6a:0c:c9:
                    e0:f3:a3:24:47:13:34:73:cb:98:ae:c1:7e:10:dd:
                    47:de:e8:fe:f2:df:b4:d1:a4:02:01:9a:08:35:a3:
                    1e:ce:17:00:9d:34:37:69:cf:77:bd:1f:7c:e7:39:
                    65:5a:10:f2:6f:52:42:6c:6c:91:dd:e1:f6:27:f3:
                    bc:d3:88:8a:53:93:0f:ab:c4:94:f7:78:38:ff:f9:
                    1e:78:9e:40:f0:b2:36:e2:f7:f9:c6:24:50:a7:32:
                    1d:bf:fb:bd:0e:9b:7d:d0:58:8c:74:a0:40:e3:7a:
                    4e:1d:94:66:93:82:80:2a:40:6b:7b:d5:61:7f:e4:
                    3d:f7:27:e0:ad:09:6f:e1:1d:01:5e:67:07:3b:71:
                    09:15:04:5d:f4:98:bf:24:1c:73:5a:d2:47:d1:b5:
                    77:47:6e:d0:ee:65:30:b6:fd:38:82:ff:a3:61:b0:
                    c9:fa:ae:4f:db:e6:35:b2:31:1d:8a:c0:93:ba:6c:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:F7:90:2D:0E:3A:03:1D:0A:EE:94:B6:C5:86:03:53:00:D0:B9
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:93:5a:e3:02:3a:b1:b5:c5:df:b0:59:48:6a:3f:19:c1:
         65:d1:59:38:72:3d:ca:e9:55:40:7a:14:e3:f6:67:32:f5:72:
         b1:57:25:bd:19:a1:f3:ae:26:28:97:e0:fe:1c:dd:8c:99:27:
         ec:4c:2c:3f:c0:9f:3e:e4:7b:2d:fc:6d:4e:da:5e:7f:bf:2c:
         69:cc:44:a3:5d:66:39:99:3a:4d:09:b8:e1:3d:bd:72:eb:f6:
         81:46:1c:11:c6:a3:74:09:93:26:7b:54:ec:89:c0:6a:e6:a9:
         ce:4e:2e:d8:2d:eb:32:7d:0e:f1:a3:34:d2:ff:b5:da:e8:9a:
         eb:0a:2c:e4:c3:e0:02:28:f0:21:31:11:9b:0d:38:be:98:1e:
         39:3b:e5:38:ea:6c:f4:4e:3e:c4:ef:16:77:89:79:85:10:b5:
         15:63:0b:b2:92:b0:7d:c0:1b:d8:48:f2:87:4f:b3:df:95:ba:
         cd:b1:1f:fb:6c:8b:ce:3b:a5:a2:89:52:f2:c7:8d:bd:b4:2f:
         b3:9a:66:12:b1:c1:6d:4b:2b:74:c2:d4:5e:6d:9a:7c:39:1d:
         f4:1b:21:c8:aa:1f:dd:e4:69:82:da:bf:14:6c:6b:0a:86:df:
         54:25:4f:b8:f1:df:de:96:84:23:a7:cf:cd:f4:7c:2f:6b:af:
         15:e4:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----