Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File:                     fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier:          f2N0paChiv940DWxtPXfEJd4dVpgbH45UtRc43oVJ1E=
Subject key identifier:   03:D7:E1:F2:6A:B2:A0:D1:E7:42:59:DC:A9:51:B1:60:1A:80:E3:09
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer:       /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial:       01962E98604F49AC26FACB2E7EFBB22E1879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: 85F2ikXLyqzOcFH3QmQBZUfS7L3n4UdC+9vRtKIYVKs=)
                          2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:4f:49:ac:26:fa:cb:2e:7e:fb:b2:2e:18:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=03d7e1f26ab2a0d1e74259dca951b1601a80e309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:cf:9a:4b:c9:3e:c7:58:9e:94:93:6b:01:
                    f4:16:6e:17:f7:7d:82:ff:51:1e:2e:f2:94:3e:7b:
                    74:d3:b9:b2:9f:3c:9f:02:0e:37:36:9e:37:ff:5b:
                    12:21:7d:c9:8b:60:2a:86:98:f3:4c:16:7d:2d:09:
                    28:3b:d8:f5:8c:66:00:5b:0e:51:63:92:ac:91:9b:
                    bf:37:7d:4c:c8:71:2c:b9:d0:e8:70:c6:9a:dc:1f:
                    6b:39:7a:2b:f8:68:50:52:14:c6:4d:83:76:7a:0d:
                    0d:c3:e6:a5:40:8d:1b:0a:fd:92:13:01:04:ac:fe:
                    01:52:cb:e4:f9:ab:11:46:99:7e:9e:4d:6d:6d:8e:
                    a2:15:09:65:34:34:45:58:78:9a:06:eb:8c:b4:5b:
                    52:4a:f7:05:20:3c:34:e0:89:ac:2c:4b:53:c0:24:
                    15:e2:43:9c:d4:67:3e:cf:52:f5:ea:96:4f:62:a9:
                    d0:02:19:90:23:a4:d4:80:17:9a:70:0d:d3:da:d6:
                    23:40:3d:ea:a2:03:68:ca:94:fa:f0:b2:3d:15:0b:
                    18:70:a9:3d:4c:ac:af:36:9b:fb:27:e0:9e:f4:44:
                    1e:41:7a:26:8c:06:d8:77:47:0a:58:d0:29:e2:5c:
                    0d:84:6b:f9:2e:59:b1:a7:ce:65:9e:a2:a0:8f:5f:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:E1:F2:6A:B2:A0:D1:E7:42:59:DC:A9:51:B1:60:1A:80:E3:09
            X509v3 Authority Key Identifier:
                keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:5c:71:9b:6f:ba:73:9c:e7:c6:14:1f:71:00:06:d6:5c:
         2b:7c:c4:17:2d:bc:62:51:ea:4a:b4:cf:b1:50:2d:fb:4c:fd:
         c4:ca:db:cc:f7:d6:d5:aa:ce:13:d0:94:52:50:ab:74:c6:ee:
         8b:9d:37:cc:03:ee:7e:6c:fc:b6:fc:fd:fb:32:93:63:89:7b:
         60:7a:f1:cd:f5:26:6f:58:4c:84:0d:0c:b2:fa:d8:1a:46:52:
         ba:ae:b3:c2:7f:e0:28:e5:aa:a5:d8:68:aa:71:26:e9:48:a0:
         8d:76:5c:f9:c5:97:1f:15:b3:2a:eb:39:19:86:22:93:db:3f:
         35:a1:02:68:88:0b:27:69:8d:ff:5a:e6:ed:48:47:1c:dd:38:
         c4:60:3a:43:57:aa:3f:6c:d9:09:43:94:6a:1f:07:cf:36:17:
         44:fc:c9:32:ce:4e:b0:3e:20:aa:43:b9:2f:c6:0c:24:a7:bf:
         a1:3a:f5:d6:ee:64:42:8a:98:49:5d:af:b5:76:93:a6:53:f0:
         47:0a:ec:08:3c:ac:8b:f1:82:9f:57:96:cc:27:20:1f:89:1e:
         cc:cf:58:95:05:5b:61:e5:41:7e:96:d8:38:a8:58:b8:ab:3d:
         01:dd:8a:b0:79:ed:56:09:a4:cf:40:f5:cc:64:66:38:8c:8a:
         1e:a2:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----