Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File:                     71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier:          //e+EWARmW3VN57snkW22wcYeF/FVphf+RzpyyFrgeU=
Subject key identifier:   75:9C:C0:11:A9:0F:A7:0C:76:A5:EC:39:44:7F:5B:16:5F:E2:FF:A1
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer:       /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial:       01962DF3D7CF74C53D15D9CCBE2823D9796D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number:          0FB4
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: udwcE8ZOqWQxLZtn01W6LUYF/wGEqNu2VQyLdt9dS3E=)
                          2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:cf:74:c5:3d:15:d9:cc:be:28:23:d9:79:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=759cc011a90fa70c76a5ec39447f5b165fe2ffa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:40:f4:a5:4c:d9:f5:d4:86:71:78:16:62:
                    1b:ef:76:61:cf:c0:8f:2e:e1:d2:7c:bb:b8:16:2c:
                    60:47:b8:1f:04:78:a1:2a:1e:77:94:8a:c3:9a:fb:
                    15:94:a9:24:ca:f2:61:7c:cd:81:2a:16:0e:3d:27:
                    72:01:e1:17:ef:79:15:b8:f0:79:96:a9:55:e6:69:
                    9d:ca:88:d6:de:63:a7:f3:42:11:9f:c6:f8:82:31:
                    25:f3:f5:7c:4d:08:75:80:b4:57:99:e8:91:d1:45:
                    06:32:6a:c3:70:69:d5:f5:ed:98:bc:03:7e:b2:d1:
                    1f:92:81:b6:46:67:c0:77:d1:e2:60:17:5b:73:b5:
                    81:34:07:03:91:b0:e2:cc:e7:e9:ae:c6:e8:50:8c:
                    77:d7:1b:76:cf:d3:a3:73:4e:37:3d:74:32:28:99:
                    be:74:26:ff:03:fd:75:49:7e:a3:83:c1:c0:2a:7b:
                    d8:07:82:1e:54:96:59:c0:e4:dc:7b:68:75:16:d7:
                    04:dc:8c:6c:9e:10:48:57:21:35:2a:be:78:67:50:
                    79:ca:8e:5e:e8:4d:e4:9c:09:06:69:73:ce:9e:35:
                    8b:49:51:08:7b:ee:4b:fe:79:8f:5b:27:39:ec:87:
                    53:4d:14:05:03:fc:cc:0b:d8:53:74:95:a2:36:9c:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9C:C0:11:A9:0F:A7:0C:76:A5:EC:39:44:7F:5B:16:5F:E2:FF:A1
            X509v3 Authority Key Identifier:
                keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:a2:ed:29:d7:c1:a8:db:73:c1:25:21:91:ab:1b:ce:1c:
         85:1d:7b:01:de:e4:59:9a:43:b7:8a:1f:b8:d0:c4:58:f2:1a:
         d1:03:43:2a:46:bf:29:75:16:58:f2:73:8c:4a:61:a8:ea:34:
         c6:f7:17:49:e6:ac:91:2f:28:0b:66:ca:92:c0:9f:4c:24:51:
         9f:0a:f0:d7:5f:97:58:a5:39:a0:03:73:f0:b4:1b:45:d1:c8:
         c5:26:2a:f0:94:dc:77:6f:17:3a:ad:9d:8c:0e:99:3b:e1:84:
         6e:91:fc:1e:ea:b8:9b:9e:8a:08:20:31:e0:48:48:8a:e4:98:
         2d:67:f4:0f:f0:8c:ff:92:5f:ce:a0:48:c1:39:a4:1f:8e:81:
         73:67:1e:74:97:ac:f4:e0:96:6a:02:1b:da:dd:ef:1f:4e:8b:
         f5:dd:ae:63:9c:91:19:32:9a:43:c1:07:9c:2a:0b:31:0d:3f:
         3b:22:7d:8f:2c:86:78:31:9e:6a:b5:bd:08:1c:d3:9d:db:e8:
         7f:c4:bc:04:59:02:ff:b7:a0:50:d7:ee:51:50:bc:d3:e3:de:
         cc:39:10:79:07:ec:ed:30:c6:5d:66:26:ba:02:70:f9:b2:df:
         69:00:f1:84:04:f5:d1:75:1b:58:91:02:fa:a9:d0:ce:35:0a:
         df:87:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----