Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File:                     k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier:          ctNLT/HxsRyDv+ctRBYsj27DThVHWItfbGx2jWZFJR8=
Subject key identifier:   59:02:B1:7E:48:40:0F:66:A3:83:CE:F5:BA:0C:06:F6:17:1B:2A:7E
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer:       /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial:       01962E991BDA3B5485C409772655B09A76C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
                          2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: iz5xNWTAPCI5CClrnZ/uJkJr1ZtiR7HRyPsPeZY+KY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:da:3b:54:85:c4:09:77:26:55:b0:9a:76:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=5902b17e48400f66a383cef5ba0c06f6171b2a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:04:cb:81:a3:81:df:25:fd:e5:96:33:f3:
                    9a:1c:5e:78:c6:e8:17:38:64:a3:08:af:77:d6:a7:
                    5d:69:a1:1a:5f:16:26:84:e9:36:19:06:27:92:92:
                    69:98:a2:ef:77:91:97:c6:d5:11:33:a6:f3:8e:7c:
                    1a:19:72:c0:b9:da:bc:22:8a:84:71:44:f5:22:d9:
                    bc:50:1e:47:d7:72:30:26:53:a3:7e:f1:7f:8f:26:
                    ed:ff:04:07:ed:60:da:04:77:74:9c:1a:01:88:0f:
                    06:7f:d5:01:c5:4a:e6:f1:4f:e3:35:65:4c:14:61:
                    a9:ce:ff:9e:72:f0:1f:fa:aa:3d:25:b7:f5:73:d9:
                    44:5d:5c:be:16:12:c0:81:b5:52:51:2b:6b:44:06:
                    05:40:8d:5c:13:6c:01:fe:8c:7d:4c:d2:ae:46:68:
                    30:78:ad:d2:66:85:33:1e:52:9d:b1:12:d5:77:8d:
                    56:22:e8:f5:50:e9:b0:f3:fc:c5:6f:8d:a6:d1:aa:
                    c4:f9:8c:fb:09:01:0f:ad:96:9e:24:ef:06:fb:88:
                    f5:6b:a3:33:41:3d:bd:31:cd:32:ee:ad:2c:7e:33:
                    cb:58:f3:39:74:ce:26:04:c3:d1:a1:90:c2:8f:d9:
                    4d:b3:8b:03:e2:73:ab:29:47:20:fb:e9:b9:30:45:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:B1:7E:48:40:0F:66:A3:83:CE:F5:BA:0C:06:F6:17:1B:2A:7E
            X509v3 Authority Key Identifier:
                keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b0:b3:30:57:7f:99:f5:09:c3:47:1e:43:bf:37:f6:25:c9:
         26:90:5f:d0:35:c4:af:66:88:fe:b8:fa:3e:9d:36:21:8a:87:
         5d:20:98:04:7d:77:96:7e:f5:7c:5e:73:0b:e0:f9:f0:4f:9e:
         7c:c2:37:9d:c8:bd:b0:c0:5f:f8:fd:51:d4:4d:49:1c:07:79:
         e4:84:ed:bf:3c:98:71:78:01:5c:e0:36:f8:0f:c0:25:a9:ea:
         11:93:00:38:ba:dd:86:81:e5:e4:76:c6:96:ce:1d:5b:da:58:
         a1:af:8a:48:d0:5a:79:86:0c:0c:65:97:7b:03:84:71:19:ce:
         27:1a:14:89:16:f8:f3:80:24:8a:09:1b:e8:0f:c5:f2:74:fc:
         43:29:48:ee:1f:80:bc:69:c6:a2:f7:39:45:ef:d0:20:fd:c8:
         e4:5b:56:e7:6e:b8:a9:e2:ff:99:53:2a:07:9f:50:4b:54:09:
         b3:72:fb:e6:90:a3:54:d3:c0:b1:d6:fb:e9:e7:36:18:04:d6:
         e2:53:f4:bc:0c:cf:6d:43:33:89:97:b5:dc:59:69:9a:46:1d:
         55:ae:bd:91:8e:3e:0c:02:9b:88:18:d5:e0:cb:34:1f:5c:f2:
         27:22:6e:c2:2e:fc:d1:12:2d:d8:31:35:3d:ac:76:3b:45:a0:
         86:d6:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----