Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          wQ4DbdUBdQA3e0WuXN9NrPxEG+A5wHhlIBrAxuRT+gE=
Subject key identifier:   27:59:FB:B4:A0:F9:05:69:33:52:CB:6C:5B:7B:A9:F9:B4:86:DC:4B
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       01962DF4052A6C5E5CC0DDC8901775E1E524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: VSKxrf3pXXGOHrfIWh5JtOxJq8RownbyXcy5J3mn4Tg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:05:2a:6c:5e:5c:c0:dd:c8:90:17:75:e1:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=2759fbb4a0f905693352cb6c5b7ba9f9b486dc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:f1:92:f0:d2:6d:e8:52:86:ef:32:ff:35:
                    10:f5:d1:ee:08:db:96:6b:e3:fa:8a:1e:7e:50:d4:
                    9d:4d:95:6f:02:95:c0:6d:da:4c:ce:ec:61:c6:7e:
                    3b:95:cb:ef:40:f7:14:b6:c3:2d:83:1f:a8:01:fb:
                    75:55:fd:6d:66:22:30:2e:a6:bf:48:15:3c:14:1d:
                    32:0d:94:3d:99:a1:5b:c4:18:11:5d:1d:92:ba:5b:
                    b1:b9:a6:d0:be:5f:46:ed:ba:b0:45:d0:e7:f1:fd:
                    b5:3a:95:75:f3:f3:51:da:b1:8a:c1:bd:42:a1:55:
                    85:20:6e:bf:23:64:4f:ca:c6:46:26:52:40:0f:60:
                    84:c7:8e:06:68:17:7d:8b:fa:30:1b:4a:69:9f:56:
                    1c:74:a6:2b:9f:b3:25:5b:f4:8f:71:aa:b9:3d:e4:
                    8e:07:cf:a8:5c:36:cc:24:7f:9a:86:46:2e:8e:a9:
                    ff:e7:0d:a2:e0:27:12:3d:a5:60:f1:ff:e9:2c:e7:
                    21:3f:7a:61:1f:0f:a8:12:7e:fb:f9:5a:62:d9:fb:
                    c1:c6:2d:e3:be:0b:88:38:8e:97:a7:db:9e:8d:4f:
                    42:f7:2c:3b:75:c1:f7:30:8b:96:7a:66:6c:de:55:
                    91:5c:41:13:ea:1c:ac:7e:83:ff:36:a8:2d:c4:c1:
                    9a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:FB:B4:A0:F9:05:69:33:52:CB:6C:5B:7B:A9:F9:B4:86:DC:4B
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:6d:e7:fb:94:5d:d2:d3:3e:96:06:38:17:66:f5:3c:7d:
         af:26:05:ac:38:a3:b5:0f:7c:6e:9c:48:e8:66:05:42:11:e8:
         4a:2d:af:47:13:30:15:23:cc:48:fa:28:5f:54:28:d9:a5:f3:
         dc:ba:b7:72:40:ee:72:53:08:9e:ef:57:47:14:75:b8:c8:35:
         23:0a:9e:41:07:40:2f:b4:62:8c:3b:2a:18:9d:31:7f:24:a1:
         69:bd:86:79:2a:20:94:46:98:30:41:d8:d8:d0:8c:1d:f4:ea:
         f9:fb:f7:67:46:eb:67:8d:3e:88:97:ef:80:e1:f2:03:13:5a:
         97:1d:a9:15:9c:0d:1f:6e:63:2f:a6:94:e3:d8:b8:18:c7:f8:
         cc:f7:db:d0:c4:ba:6c:35:a7:6e:80:67:d1:25:b9:6a:8b:00:
         93:b5:86:e2:34:0f:5b:4b:d9:f1:af:77:c5:02:39:15:61:53:
         6c:b4:41:35:0d:f2:ce:32:0e:38:42:a2:de:e0:e2:48:de:3f:
         a0:32:95:cb:9c:b4:62:f1:f0:43:93:d4:e4:0b:fe:89:6d:38:
         78:ec:26:a6:7c:0d:0a:21:48:22:bf:bb:55:3f:e8:26:cb:f4:
         81:60:88:c2:22:0b:e5:b3:8a:f4:4c:48:9d:09:06:b2:74:3d:
         77:74:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----