Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          l9qLtC7RgHCraVuF8joLWlAqfiM1B0aMNcwkM0TnB3s=
Subject key identifier:   2A:28:59:2A:A8:6A:18:52:6D:BC:04:0A:A2:1D:49:0A:9B:8D:13:32
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       01962ECF5A70DFD76C947EE34FBFA460C892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1527
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=)
                          2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=)
                          3: 6cgyQw3c6pwtU4O5qiL8so1iLO0.roa (hash: RrJ/CIW7j+YCVbEs17TVrQYeU0kZt0hrM4cIT1zfgiE=)
                          4: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=)
                          5: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=)
                          6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: cESmf/uIWiXCjSB5LF5wUc8TFRu7J5ILQeqZ2qz7MpI=)
                          7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=)
                          8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=)
                          9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=)
                          10: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=)
                          11: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=)
                          12: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=)
                          13: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5a:70:df:d7:6c:94:7e:e3:4f:bf:a4:60:c8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=2a28592aa86a18526dbc040aa21d490a9b8d1332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:b2:b5:92:28:96:72:d7:85:c0:4a:ad:92:
                    b9:bc:c6:1f:cc:91:d2:fe:74:83:07:0f:df:13:18:
                    7c:c7:4b:60:84:f0:ca:52:e9:f6:db:a6:97:41:0d:
                    f4:83:82:7d:61:53:55:6d:d5:e8:21:5b:ac:ce:08:
                    d8:f6:55:b9:5c:47:63:51:f8:05:77:73:12:3e:ab:
                    52:4a:7c:ad:de:76:ff:d1:19:c7:18:fe:ae:51:4f:
                    a2:b5:97:bb:61:a4:3a:ae:43:d8:e3:01:af:fe:48:
                    8f:5a:45:2c:57:20:e4:e1:5e:a6:b6:6d:6c:27:0c:
                    fb:eb:e9:24:c0:70:27:0c:4b:b1:a8:99:dc:3f:e2:
                    eb:c8:02:b4:a0:2d:b3:44:f8:73:02:2d:b7:9b:7f:
                    df:f5:6f:24:90:cb:2f:e3:0c:f7:f7:1b:87:9a:9d:
                    5a:92:9e:49:fe:35:2b:4e:37:2d:d6:ed:61:25:a1:
                    49:15:f0:db:9f:4b:d7:b8:00:48:99:67:9f:ae:ab:
                    92:1f:05:88:36:88:3b:2c:3d:da:75:9a:2e:08:d5:
                    a8:67:ab:c2:29:ca:ea:c3:fb:bc:5a:38:33:e5:c1:
                    af:80:7a:d5:46:92:29:f5:47:9b:17:1e:c4:f6:70:
                    fb:ac:5e:e3:7e:f4:73:b9:a1:ea:4c:8a:51:6e:85:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:59:2A:A8:6A:18:52:6D:BC:04:0A:A2:1D:49:0A:9B:8D:13:32
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:87:38:78:24:8a:6d:0e:b8:3f:19:5e:26:d0:f5:68:8d:
         a4:e4:03:c9:f4:8e:0d:22:8d:b0:72:bd:ab:9c:41:3d:72:75:
         75:1b:aa:58:59:ad:1b:ec:de:7a:0e:3d:57:1d:87:45:78:ee:
         31:1b:0b:da:c5:f6:d0:b2:dc:65:cf:d3:a9:ea:a4:81:19:52:
         b8:31:77:16:81:81:9a:52:80:fb:c6:47:b1:85:d2:09:28:72:
         b8:9d:87:a1:fc:d9:ee:36:44:6e:47:f1:cf:ea:93:16:7f:7c:
         94:44:47:10:66:da:29:14:7a:74:43:1a:5b:52:36:8f:b6:76:
         c3:ad:e4:ce:8f:4e:a5:60:ab:19:fd:4c:ed:46:81:da:0e:e5:
         16:da:51:78:9d:ee:95:88:69:ad:04:02:6c:d7:5f:85:76:a2:
         94:5f:a9:9a:1c:74:18:81:64:e5:65:93:48:e9:f5:2f:00:ab:
         a4:55:d6:91:78:63:ae:8b:1a:c9:9d:fd:c9:88:00:06:ce:0a:
         0f:ad:c9:af:41:9f:c2:ab:1b:39:e4:a1:ed:59:77:2e:63:76:
         77:2b:61:57:2c:90:50:8b:4e:02:f3:22:b7:40:74:9b:b8:1a:
         60:1a:ff:69:1f:4b:94:0f:80:03:35:7e:4f:6e:de:b9:f7:2d:
         3e:39:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----