Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File:                     x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier:          Vxt8EFiBq2qv6Xwrni6gSmGoaEDmh9goLyRPsSCx+SE=
Subject key identifier:   EC:58:1D:C5:9E:C3:54:40:74:4A:5E:DB:78:56:7E:4D:88:BD:39:08
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer:       /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial:       01962F7497B82D2E7F0D55D2016D909AEC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number:          0FBA
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
                          2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
                          3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: zHVymO84YQ6RnGwBCVC2XQxu5DI5tfzk1e41g2YN9q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:b8:2d:2e:7f:0d:55:d2:01:6d:90:9a:ec:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=ec581dc59ec35440744a5edb78567e4d88bd3908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:b3:8f:51:c7:26:08:bb:c0:97:b8:a9:9b:
                    49:cf:6e:08:28:1d:b8:d6:9c:e6:7d:5e:fc:ce:37:
                    f4:71:9c:9d:e2:f4:87:8a:79:ff:93:56:06:ff:e4:
                    58:82:bf:44:83:c4:fc:ff:f8:92:f7:5b:77:62:7e:
                    f6:60:61:4f:ba:d3:4c:45:3d:0a:ef:55:da:03:e8:
                    76:b1:b0:38:8d:cd:5b:f1:7e:42:3c:d1:86:55:ed:
                    5a:fd:79:26:4c:d7:67:ca:43:36:31:7a:b9:c2:86:
                    9a:f7:9e:23:c2:8d:64:15:65:69:5a:90:ab:99:fb:
                    69:62:91:a4:e4:f2:a7:bd:a4:45:91:a0:47:7c:43:
                    c3:05:70:90:8f:97:58:96:44:60:c7:ba:07:a8:8d:
                    65:fc:0d:3f:46:74:a4:1a:65:2e:a2:bd:38:87:46:
                    83:49:b2:58:68:94:43:58:20:9f:d6:9b:84:3b:64:
                    52:e1:95:ed:d3:1c:10:c5:66:72:2d:4e:75:d7:46:
                    5c:45:48:ca:0c:c6:4c:e9:d9:d4:d9:d1:a2:a7:66:
                    2d:05:4e:c9:fb:4e:c3:fc:42:34:43:80:40:5c:ca:
                    3d:eb:59:3b:a0:6c:35:d9:1f:ef:ea:34:a7:01:20:
                    68:4f:cd:bb:2d:92:20:e6:94:d3:7f:6b:c4:ba:97:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:1D:C5:9E:C3:54:40:74:4A:5E:DB:78:56:7E:4D:88:BD:39:08
            X509v3 Authority Key Identifier:
                keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:e9:49:d0:ee:f1:51:ad:8e:33:49:05:c0:e2:4f:2f:b9:
         8b:9d:b6:7e:55:39:19:b3:2e:84:5b:f2:18:d9:d1:78:b3:c2:
         31:20:eb:a0:49:3e:ba:7f:80:fd:e6:db:86:99:25:38:2f:94:
         e8:a4:fb:52:5f:4e:ea:92:af:4e:ee:47:c6:50:5b:08:58:84:
         a6:e0:83:c2:87:fd:f6:2c:21:c1:e6:62:25:88:9e:d7:ae:c4:
         8f:33:82:e7:b0:0b:c9:11:24:c2:d1:e9:9a:c6:f4:01:7e:1e:
         0e:db:0d:e4:80:ad:86:c6:e8:a8:3a:51:4e:fe:0a:20:59:cd:
         19:7f:ed:e6:b3:31:a0:98:76:dd:95:f2:1b:10:4f:f7:07:83:
         65:14:87:ae:d1:14:7c:22:97:7d:ba:4d:0a:4a:4b:9c:f1:86:
         cd:1c:b7:d4:f3:eb:5d:07:b0:9c:17:96:5e:73:7c:95:2f:e5:
         18:cf:52:16:35:6b:a6:69:05:be:4d:00:2e:0b:93:e7:6b:f9:
         3e:e3:ab:e9:e2:f0:9b:47:cb:c2:8c:41:7e:25:a1:2c:74:a8:
         5a:4e:61:b3:f5:f6:a5:6d:03:c3:b3:05:5b:09:59:90:e4:ba:
         7d:44:62:9b:88:07:c2:c0:50:39:95:6a:88:c4:aa:3d:e0:a9:
         17:06:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----