Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File:                     53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier:          iKeTDeIMMMoOgtzbWUqmKBIKEMQmQWiVhT5OLbXbgx4=
Subject key identifier:   E7:62:78:7A:B3:A5:38:05:57:B7:EA:33:3E:FF:B0:09:68:47:B7:2B
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer:       /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial:       01962E9987FECFD3A01BD575DC0DF9F3841B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number:          0A07
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: xCk7qbqCeWfGiU7CLBb54JaojkRDdEAB6Hn8ssGFFgg=)
                          2: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:fe:cf:d3:a0:1b:d5:75:dc:0d:f9:f3:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=e762787ab3a5380557b7ea333effb0096847b72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:1e:cd:28:97:eb:1f:ab:89:18:ab:ec:4c:
                    1e:e3:3f:8c:8a:d5:cb:75:8c:09:61:73:a6:2a:31:
                    ea:df:79:7e:0d:c7:c3:17:a1:a6:6b:7f:53:f9:92:
                    f8:4f:e7:1b:59:18:30:cd:f8:f5:34:29:73:fb:36:
                    cc:15:7c:2b:87:d2:5a:0b:42:e7:ee:f3:09:30:92:
                    1b:ae:57:d5:b3:2a:c2:b8:fb:69:28:2d:f8:c2:0d:
                    72:ac:62:7d:c8:80:f1:51:11:57:ff:0c:42:14:58:
                    0c:ae:53:b0:b4:7d:0f:32:5e:b5:7c:6e:e7:0a:bd:
                    e9:00:50:01:81:e0:90:02:71:94:fa:47:1c:b4:6c:
                    ca:f2:89:46:2f:42:c7:b0:88:61:4f:ba:50:dd:96:
                    6e:1c:a0:97:86:56:45:0b:91:bd:b6:b7:7d:fa:9d:
                    67:b4:21:ad:0b:0e:26:5f:db:29:10:4e:97:fb:71:
                    e0:d8:67:a5:ec:89:52:62:20:85:94:8f:b0:77:9f:
                    06:ad:5f:3a:59:6b:31:95:34:e1:6e:0f:29:57:ca:
                    00:45:0e:0f:71:61:f1:d7:5c:c6:40:cf:46:df:30:
                    30:a8:e5:c7:de:ec:b4:71:da:4c:99:d6:44:d8:22:
                    11:6b:bb:fc:25:92:46:70:da:a8:16:90:d9:cd:a2:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:78:7A:B3:A5:38:05:57:B7:EA:33:3E:FF:B0:09:68:47:B7:2B
            X509v3 Authority Key Identifier:
                keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:96:06:54:ff:8c:f1:33:12:55:bf:4b:8c:45:cd:51:a7:0c:
         bd:88:f3:64:b3:cf:a8:bd:5e:91:cf:c6:71:89:45:96:4c:03:
         81:e9:f5:2d:0b:fc:99:ca:9e:a7:9a:fc:b1:83:bd:62:5c:ad:
         ea:0a:76:22:d3:87:3a:69:ec:c3:96:2b:21:9a:c0:ed:af:8b:
         27:ee:9a:9c:6b:3c:a7:3c:d6:b0:9f:04:f4:c1:5e:7f:1c:d4:
         89:a0:e0:5e:11:86:88:7c:f5:3d:db:9e:f7:f3:8e:e6:a1:01:
         2e:16:51:82:14:a4:00:75:2a:5b:e6:fb:28:4e:9f:4d:90:9e:
         32:88:41:fb:b6:24:d2:84:a3:cb:4d:5d:15:89:b7:dc:37:ce:
         2a:00:d9:b1:04:8f:85:90:45:b8:cc:2b:3b:17:18:ec:e2:b5:
         3c:00:52:c2:f7:da:25:c0:6e:1a:e6:1c:5f:39:59:12:d1:e3:
         fa:7e:50:d9:88:82:89:a9:f9:88:46:c6:94:8f:4f:49:99:18:
         1e:fa:be:0c:3d:62:98:eb:42:9e:62:76:04:70:93:6c:b5:cb:
         03:65:66:62:60:c6:1a:94:28:33:2d:60:40:4c:c7:f7:fe:ff:
         83:cb:8b:bb:92:02:31:a1:5d:eb:b0:5c:b0:28:e8:a8:2d:8c:
         f8:88:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----