Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File:                     7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier:          RsLR7xxqiSKfFmZwt+MhIONvgbibQ80PO+Uead0Il+w=
Subject key identifier:   E6:2D:EA:52:CF:6E:E1:A8:88:96:D2:71:B0:80:AA:EE:15:CC:9A:43
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer:       /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial:       01962E61EEB3563859D46232EF0787000A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number:          5D
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: QN1oWVl/YQ5SZVyfXTV5xPHdNRmiFi4mtdgTDgO8vq8=)
                          2: xmQ5skD8YtPqUxW5yzoA6bHhREg.roa (hash: JOTsRiuQWzCXcl+Wr2hE6xVJO7LXDTormwzqqmVX6eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ee:b3:56:38:59:d4:62:32:ef:07:87:00:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=e62dea52cf6ee1a88896d271b080aaee15cc9a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:e6:df:5c:f7:60:fc:d3:21:1e:c7:66:02:
                    ad:6f:8f:d6:ce:dc:8e:83:49:a7:31:ee:dd:90:cb:
                    9f:e4:a7:d8:0f:34:38:e1:76:32:9d:50:c8:a6:c4:
                    a0:be:d0:0a:19:7c:6d:1d:7f:3b:e2:52:7e:a6:f7:
                    80:68:55:29:5d:a9:ac:c5:f7:a3:8d:51:0a:7a:06:
                    4c:ae:b9:0e:32:9c:40:b7:36:6b:f5:b6:cf:19:53:
                    2f:ef:7e:98:30:31:64:cd:a2:fe:ed:46:0c:39:b1:
                    a2:5a:42:48:bb:2d:0a:58:44:4d:53:97:94:25:6b:
                    bf:24:9e:90:e9:d7:14:9f:ba:dc:fe:75:0c:bb:ef:
                    c7:37:19:9b:2f:fc:6c:13:e0:7e:80:6f:49:99:84:
                    2c:7f:61:ec:f8:19:ea:22:8d:07:9d:8e:e6:55:df:
                    a2:2a:ff:63:9f:cf:44:fe:68:36:6e:39:f9:0b:64:
                    13:ee:6f:e7:c7:25:14:11:f3:7b:c1:fc:3b:21:c5:
                    ba:b8:55:d5:82:28:a7:f9:45:46:62:8e:b1:de:8b:
                    dd:f6:30:f0:41:0c:c2:ff:d9:0b:83:aa:8a:f1:50:
                    ab:32:9d:74:7f:49:39:c0:13:df:5e:0c:bc:51:da:
                    b7:2d:11:f5:80:26:44:d2:fd:6e:29:40:52:58:31:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:EA:52:CF:6E:E1:A8:88:96:D2:71:B0:80:AA:EE:15:CC:9A:43
            X509v3 Authority Key Identifier:
                keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:95:d9:df:27:f4:6c:4d:d4:1c:dd:ab:34:30:a3:56:27:62:
         4c:ab:ab:62:d4:fe:16:56:5b:bc:ab:06:6d:ec:39:fa:01:b6:
         24:e4:7b:1d:37:b5:a2:d7:89:c6:66:ba:c1:cd:3f:e0:08:b0:
         62:c1:d3:90:65:75:78:f8:9a:02:24:30:74:17:08:49:1b:98:
         2b:ed:52:21:54:11:3e:26:1b:b2:4b:21:28:14:51:4c:6b:7a:
         dd:5c:5a:dd:b3:49:8d:6a:54:4f:47:0f:36:19:9c:78:7f:9e:
         ac:57:54:fc:19:65:11:37:57:28:1b:52:79:bb:b1:77:ec:26:
         14:7e:c6:4c:2e:c2:25:93:6a:04:68:20:54:df:4d:bf:eb:c2:
         7a:42:73:db:7b:2c:69:f9:63:8c:44:5e:ab:af:45:8a:62:56:
         63:d9:19:99:26:bf:68:63:f2:55:7e:77:28:92:9c:57:af:07:
         3a:38:ea:29:29:10:42:c2:b2:c2:58:86:dd:8c:1b:e4:54:8d:
         07:3d:cc:ab:d8:f8:bb:94:fd:b3:cc:eb:7e:a0:48:98:9d:8d:
         5b:c4:2a:d8:aa:2b:71:f0:c1:06:ba:13:fd:76:59:18:fe:88:
         6b:0d:66:d8:82:f4:eb:62:12:6f:3a:f4:2f:e9:d9:68:33:28:
         dc:48:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----