Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File:                     7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier:          k9HEiYSWWgeJ65O9PNS8EpLAZ/bm0OtseUnclkkyXYc=
Subject key identifier:   A0:A5:AA:DE:78:FA:2E:F0:00:EA:D7:B6:18:BD:FE:F6:1B:84:59:28
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer:       /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial:       01962E999AF560AE0F1AD5F3A9D0C2959BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: BmCtt3RRIfIx9DNdlsJX3mrWBB3qp0WtySI30IAkOww=)
                          2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
                          3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:f5:60:ae:0f:1a:d5:f3:a9:d0:c2:95:9b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=a0a5aade78fa2ef000ead7b618bdfef61b845928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:d4:e4:48:b6:ec:34:d0:b1:32:2d:be:85:
                    b6:f4:40:5a:8e:f6:76:eb:41:f8:e8:07:f9:c9:74:
                    49:dd:d0:65:46:6d:c5:25:8e:c4:ca:66:99:ff:00:
                    c3:2a:11:a2:2f:3d:d7:92:21:39:1a:87:39:8c:dd:
                    be:88:2f:fe:c8:95:e3:0b:d1:02:16:df:11:57:3d:
                    ec:20:26:6f:90:09:f5:e7:20:44:c6:3f:86:ea:bc:
                    15:2a:a7:ba:14:0a:51:47:6d:e9:84:0e:0a:43:d8:
                    7e:8d:4e:c5:41:85:99:02:70:10:1d:22:e0:fd:3a:
                    28:96:55:19:a2:33:51:51:1e:14:75:36:e8:90:c9:
                    43:38:d1:b1:76:35:81:14:d3:90:74:de:11:3a:24:
                    d4:c1:9c:96:e0:25:dc:2f:dc:72:98:58:cd:a1:e6:
                    3e:8b:bc:37:ad:d6:06:22:9c:69:1a:b4:f3:ff:8e:
                    6b:7c:8d:82:48:fa:a2:ec:6c:c2:a0:09:70:01:29:
                    09:94:b7:6b:ba:27:a1:ef:ea:0f:5f:59:81:bd:14:
                    5c:01:72:e3:b6:4f:6a:a9:7a:64:c7:f1:c1:e3:d2:
                    b8:6a:a4:ab:92:72:bc:df:cd:41:5b:31:ff:7f:d6:
                    99:b8:87:81:a3:3e:26:ba:50:60:63:6c:3b:9b:23:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:AA:DE:78:FA:2E:F0:00:EA:D7:B6:18:BD:FE:F6:1B:84:59:28
            X509v3 Authority Key Identifier:
                keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:1b:e1:5c:ee:32:85:d6:7c:c9:21:81:1d:f8:46:1a:7e:
         d6:c5:b3:a4:03:94:62:4d:2f:38:67:94:35:93:f1:00:07:11:
         53:88:21:6e:1f:b6:25:94:f4:c3:97:88:07:0d:9b:13:b6:6a:
         d8:ed:a2:dc:13:1b:8c:d1:0c:b1:02:8e:c6:1f:75:35:46:17:
         2d:ce:1c:08:7a:54:37:ac:b8:2e:5e:e7:1c:1b:63:62:16:89:
         c6:6b:5c:3b:e7:36:d4:51:2a:f6:fb:b0:f0:1a:98:1c:e4:c9:
         40:e4:fe:2a:07:ce:36:86:75:6c:81:71:1c:28:21:62:20:51:
         39:51:bb:75:9f:13:9c:64:7d:7d:44:05:0e:f7:10:3a:6b:aa:
         c3:e8:7b:88:4e:8d:4a:23:23:71:df:c4:84:d3:93:7e:48:31:
         70:da:2e:16:30:07:91:24:98:48:f5:fd:87:08:c3:e3:cb:a7:
         06:0d:5d:68:3b:48:ef:2f:98:c3:59:7c:a9:dc:b2:b9:54:c8:
         ea:e8:20:ab:d5:df:9c:50:af:dc:12:9b:7c:d4:c1:63:86:40:
         f2:ac:88:62:ed:b9:c3:cd:8f:15:ea:bc:6f:8a:1b:d7:8f:f1:
         8e:67:b7:47:7a:61:e3:4a:36:31:66:0b:12:e3:43:21:2c:38:
         e9:1d:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----