Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File:                     7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier:          RoX85+Y0xeDIkCReZaeeJwBk1vzhnAiGnwWC84HcAgI=
Subject key identifier:   BA:AE:6F:9E:CE:EB:DD:49:49:52:75:53:CD:3A:00:8A:33:60:D1:92
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       01962ECFC62E99EC26DA286FE6184F993C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: YeCwS3Cp2RA3+lnJqI2/pviyTOzAmnKYoZblJeuTOhw=)
                          2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:2e:99:ec:26:da:28:6f:e6:18:4f:99:3c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=baae6f9eceebdd4949527553cd3a008a3360d192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:f4:5b:59:8e:31:6b:b5:11:ee:80:59:2d:
                    16:3d:98:26:66:bf:f2:10:5d:2d:e3:ff:e2:42:45:
                    c9:cf:bf:e8:2d:d5:7a:2a:c8:36:2d:17:6c:55:76:
                    c9:1e:d6:ac:5f:c2:a0:b7:3c:07:e4:32:71:72:35:
                    34:8d:02:e8:3a:ea:33:eb:bd:e0:f5:d1:20:c0:89:
                    42:a1:6a:ed:c7:d0:e6:54:f7:5f:49:c9:1c:76:cc:
                    ce:e0:ef:52:1c:bf:c0:05:5f:69:5a:ed:16:e3:7f:
                    17:e1:6f:3b:51:d3:66:65:55:e5:1b:b7:b3:23:56:
                    db:55:3e:8a:af:be:98:ec:ac:40:b3:0e:ad:a6:19:
                    5a:cd:97:fe:a9:26:7d:3e:d1:f0:53:b3:b9:74:2d:
                    c4:32:90:b2:ad:a5:4b:48:9a:47:63:fe:8a:f3:84:
                    a2:2e:7a:2e:c0:b4:79:d5:6d:57:a9:f6:4f:2a:d2:
                    7d:0d:b3:ea:22:5e:0d:96:52:d7:88:c0:1e:12:36:
                    01:da:58:b0:53:47:34:9b:ec:05:12:59:56:d5:06:
                    82:ac:c4:12:87:0a:69:7a:3a:4a:28:b7:9b:ea:0d:
                    ad:b8:0e:b7:12:2f:0a:3b:04:dd:f2:67:21:49:de:
                    9b:99:c0:41:82:d5:6f:9f:50:6d:b0:0a:69:89:fa:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:6F:9E:CE:EB:DD:49:49:52:75:53:CD:3A:00:8A:33:60:D1:92
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:1a:b8:74:b0:35:93:37:80:96:d0:b2:2d:f4:a2:73:ef:
         75:36:4a:47:ed:9b:c0:9e:6e:d7:09:d3:2e:05:4d:aa:3c:02:
         69:56:93:5f:09:83:91:75:2d:82:df:c4:f9:93:d6:b2:70:77:
         05:3c:03:ae:63:73:a2:6a:94:78:75:c4:e5:e9:8c:94:cf:b3:
         b1:1c:68:af:56:17:55:27:19:88:ce:c8:b4:e0:49:8c:36:cd:
         d9:65:eb:2b:7a:99:52:ba:11:bf:a8:f1:18:4e:17:34:d9:9a:
         fe:0d:4b:26:69:da:ce:2e:ba:6e:70:5f:56:c1:f8:65:64:19:
         a5:b7:19:1b:87:d8:d5:5f:a6:fd:45:d7:38:30:62:bb:62:5f:
         9a:a7:75:fa:eb:d7:08:3d:de:87:0a:e1:88:8a:04:c1:4b:4f:
         dc:41:57:2a:1e:48:ed:f4:00:d0:2c:23:d6:88:7f:b0:02:48:
         98:4d:9f:ac:42:1e:12:e9:b9:8a:7b:45:4b:a6:29:ef:71:54:
         93:08:29:3e:c4:b1:57:84:49:b6:45:53:07:82:d6:7d:df:99:
         5b:15:04:e4:a1:cb:96:f1:35:36:75:59:25:f7:2f:15:50:76:
         83:b9:18:9b:6c:8d:9b:09:03:c8:df:39:17:45:f0:b7:d5:9c:
         df:1a:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----