Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          VFcxOQXTeDhODNjlPd2G9UHLLwmfixga1s/bhO4gbm8=
Subject key identifier:   41:1B:7F:AC:03:76:0D:2A:13:7A:50:72:85:1A:F2:B7:97:13:DF:98
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       01962F74E1624455DF126E412BA551093B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          0841
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: jqmcomyySl7y2b6S3JidUgWiUyhFZJxrbuy9LVnSqi8=)
                          2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:62:44:55:df:12:6e:41:2b:a5:51:09:3b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=411b7fac03760d2a137a5072851af2b79713df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:1f:4d:87:e0:e1:e5:c9:86:a8:34:70:7f:
                    ab:dc:67:ae:9f:24:7a:d8:ac:20:28:1f:9c:65:ea:
                    f4:19:0f:2f:9e:bb:64:88:98:d1:fa:62:c1:2e:a9:
                    c5:4c:1e:8c:41:60:4a:3f:aa:e0:64:be:84:36:6c:
                    67:53:ac:f5:1f:a7:31:ab:da:25:b4:9a:65:b5:16:
                    a9:ed:bb:30:70:95:db:5c:26:b6:80:07:bb:d3:7f:
                    d4:08:79:d5:b5:72:a7:1e:5c:96:ed:7e:ad:7e:bf:
                    18:58:7d:e8:23:39:05:1c:0c:e3:4c:2e:ca:8f:31:
                    b1:16:7c:47:ab:84:d5:2b:b6:30:ff:06:44:47:25:
                    65:c9:ee:34:58:cb:b0:a3:c8:cd:e5:fa:0f:36:b7:
                    78:ee:b0:8b:96:5c:d4:49:5a:9f:bb:32:3e:f6:cc:
                    0f:53:c5:39:4a:f4:84:ae:09:5c:76:a6:73:61:4f:
                    d9:0b:a1:12:25:8f:f7:28:55:17:4c:1b:1d:27:b5:
                    09:ee:39:c2:62:7c:20:5a:c8:ae:8f:85:b6:df:7f:
                    bc:ea:44:ce:a0:55:4c:09:12:34:78:45:4b:2e:39:
                    bd:5c:e1:00:ac:66:f5:bd:76:af:54:e2:18:e1:67:
                    71:28:69:c6:ee:70:5e:b1:5e:7a:cc:89:24:45:de:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:7F:AC:03:76:0D:2A:13:7A:50:72:85:1A:F2:B7:97:13:DF:98
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:3b:d6:03:f7:37:d0:32:4d:36:18:ee:52:41:f7:8c:21:
         f8:2f:d5:36:ab:61:19:ba:27:ef:0f:4c:ce:84:9f:ba:30:eb:
         cc:2c:51:ca:8c:01:19:68:63:c6:39:ee:40:7a:d0:97:54:d4:
         42:2e:7b:98:14:14:27:08:3c:7a:3e:f5:60:57:fb:1b:23:aa:
         b1:fd:9e:ba:f1:63:38:0f:b7:06:c9:db:5b:af:d3:ea:70:2b:
         8a:05:fd:04:18:96:51:d9:72:c7:ab:4c:55:0f:f6:1c:8b:6e:
         1a:fb:fd:93:d5:44:31:bd:ba:e5:ca:51:89:fc:d8:f7:2e:c4:
         c9:48:b4:0a:15:05:6e:23:15:1d:26:5a:f6:95:7a:8b:15:32:
         a0:3b:5b:0a:54:33:84:84:69:1a:f8:a9:ad:b8:37:e1:b5:c2:
         83:aa:e0:8a:6a:fc:be:70:41:b1:01:85:7b:28:74:e8:62:9b:
         ae:8d:97:30:95:a4:5e:05:07:76:29:f8:61:dd:76:ad:8c:b3:
         2b:c2:ae:61:b2:06:2b:4b:67:2f:c1:1f:04:4d:79:f3:ea:a2:
         c9:2f:0f:c2:27:8d:05:28:1d:d8:0a:04:ac:67:d6:bd:9b:14:
         c4:ae:30:19:52:86:a3:9a:06:b1:fe:b4:60:98:4f:76:c5:e4:
         7e:85:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----