Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File:                     eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier:          1bM3wgJVtFEs1uAfMQu56Ud13zjHRn6mbbGzkMw+0Bo=
Subject key identifier:   33:0D:4F:0C:FC:BE:22:55:FE:FF:C5:00:25:A4:F8:67:D4:2D:00:1C
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer:       /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial:       01962ECFC76D2D505F4125C06E0CFA388DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number:          0747
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=)
                          2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: ucwcY78ZNEoKTWRxsIcDbFuCTb5VHtBm+dFQ/vjIwY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c7:6d:2d:50:5f:41:25:c0:6e:0c:fa:38:8d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=330d4f0cfcbe2255feffc50025a4f867d42d001c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:be:53:3e:93:d4:58:cc:e4:1e:5f:28:20:
                    6c:d5:20:18:02:aa:4e:28:b1:84:ad:0a:f8:a3:f0:
                    ad:ce:9f:f4:50:b7:6c:ee:cf:fa:c4:59:60:bd:16:
                    2b:d7:60:82:95:1d:74:7e:ee:04:de:e0:07:ee:2f:
                    84:8f:6b:79:a3:c9:a1:0c:1c:d4:85:09:e8:21:0c:
                    37:0b:a2:6a:55:48:93:27:10:cd:df:33:4c:13:af:
                    b4:c0:6c:aa:a5:ed:9e:b0:70:e0:bd:95:ca:ee:85:
                    c8:cf:3e:59:fc:14:c8:57:28:58:1d:66:15:e9:d2:
                    69:89:48:8d:7e:23:1d:e3:53:b7:e1:49:3e:53:1a:
                    f9:87:58:6a:dd:59:ce:21:84:28:21:0f:6b:f0:51:
                    bb:35:57:da:ba:ab:3c:13:7b:68:30:30:88:ea:cf:
                    a1:5d:91:b6:fe:e2:9c:c3:8e:3a:18:3f:69:dc:25:
                    97:a6:67:65:3c:4a:8d:aa:33:bb:dc:bf:2b:0f:6f:
                    61:4d:67:a7:af:ce:b3:79:69:d4:a1:d6:57:9c:e3:
                    fc:a0:e1:d9:2d:7e:23:aa:b2:4a:bd:72:37:20:63:
                    43:df:d6:29:9f:02:10:30:13:70:0c:27:6f:2e:d7:
                    cb:b3:4e:40:c6:bd:32:b9:76:d5:5e:5f:13:ef:74:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:4F:0C:FC:BE:22:55:FE:FF:C5:00:25:A4:F8:67:D4:2D:00:1C
            X509v3 Authority Key Identifier:
                keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:37:79:e8:76:e9:63:71:16:1b:43:34:ec:79:42:29:57:fb:
         4b:a3:c5:b4:4c:71:f5:28:6c:e8:9f:22:77:c9:cb:5e:14:9c:
         98:6b:04:c6:40:df:58:bd:ef:ab:90:0a:23:2b:e9:0e:02:b0:
         1b:25:d0:64:eb:0d:81:0c:6b:79:f9:cf:05:a0:46:aa:78:c0:
         5b:6e:39:7c:7f:7a:ce:cb:d7:b9:8f:e6:31:1e:74:cb:1a:cd:
         3e:6c:95:72:4d:bb:49:10:65:18:05:81:82:ec:0d:81:01:9a:
         0b:96:e6:84:92:90:5d:e0:08:51:c5:ef:f4:11:de:ad:e8:ef:
         20:ee:6e:96:8b:43:fb:89:f4:ea:c3:57:41:21:fd:bf:9f:3b:
         dd:17:5e:ed:17:5d:95:9c:a7:4d:27:14:aa:8f:09:36:2a:85:
         20:44:fd:59:a3:98:f7:f5:0e:87:0d:91:88:6c:30:fd:8b:81:
         9c:64:5b:0c:cc:cb:70:b8:53:f3:55:6b:53:a6:dd:9e:51:97:
         a8:a4:e3:ac:2a:50:25:49:25:c4:52:1e:97:ec:6a:7f:bf:72:
         d2:e6:ed:fc:22:1a:97:4d:92:62:d2:4d:4c:c2:e7:8b:a3:e9:
         e2:52:cb:3a:e8:01:89:fc:6d:c4:73:fe:aa:1d:ac:66:7e:a4:
         a8:16:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----