Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File:                     7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier:          /KiYbZ13t0efz5Mw2IAh6sRG8NtDILpcjmO49zHq+Kc=
Subject key identifier:   82:95:1F:56:36:1E:8F:3D:F5:79:0F:6E:9E:B5:E4:09:9B:6B:AA:8A
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer:       /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial:       01962DF3C529B51CE3F8386A978DAB355A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number:          1448
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: 9DymHTU+w6+kkOu9XH7nkUDZaCVFIzW60dFeJMez1OA=)
                          2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
                          3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:29:b5:1c:e3:f8:38:6a:97:8d:ab:35:5a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=82951f56361e8f3df5790f6e9eb5e4099b6baa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:16:f9:f0:ae:6a:84:97:8a:60:1c:c4:49:
                    7a:08:aa:12:c1:30:08:62:bb:98:f3:08:b0:87:93:
                    a8:7c:a9:c0:2c:9b:d8:5c:70:d2:87:cf:9c:c1:a7:
                    c5:f5:06:f4:00:a7:ac:57:fa:03:db:9a:7f:5e:a4:
                    08:f4:91:ad:30:bc:7d:db:ce:c9:d9:f2:d6:1c:2b:
                    45:64:00:5c:89:74:14:44:13:59:a9:db:5a:3b:f2:
                    4f:97:0b:35:a7:96:71:89:d5:11:4c:cf:df:36:07:
                    74:b1:bb:b2:77:17:26:0f:7b:f0:54:fb:e5:38:dc:
                    6e:c8:59:d4:4a:9d:c5:7e:d9:02:85:a6:24:ca:8f:
                    cb:fb:fa:97:47:0d:87:e2:09:0f:2d:e0:ee:92:61:
                    36:21:26:b7:26:6e:c0:65:25:86:00:32:fe:8d:f0:
                    9c:d9:f2:63:5b:49:3e:a4:6b:b5:c9:c8:31:90:0a:
                    9d:09:7e:e1:4f:8d:d2:38:f4:de:74:a7:a8:61:fb:
                    d1:e7:03:84:65:da:7c:1b:50:08:36:24:51:a0:1e:
                    d2:fa:9b:1c:73:e4:0f:4a:e1:2a:f0:5f:51:93:10:
                    12:30:cd:bb:d1:fb:14:78:5e:19:7d:25:8b:cd:23:
                    7e:70:c0:25:3a:60:58:f8:92:52:82:2a:26:24:23:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:1F:56:36:1E:8F:3D:F5:79:0F:6E:9E:B5:E4:09:9B:6B:AA:8A
            X509v3 Authority Key Identifier:
                keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:79:aa:29:31:d6:b0:4f:e0:65:c0:b8:f8:a8:2c:8a:25:b9:
         c2:f1:51:0c:b4:d6:80:03:ef:08:fa:e1:90:2d:4d:79:ca:9a:
         29:bd:79:dc:4b:93:7d:cc:2a:68:d6:1d:1f:8b:da:76:3b:45:
         c3:9a:4a:c9:ba:1b:39:99:22:41:44:ff:ab:b8:d9:b6:b4:3a:
         94:c1:9e:df:bd:3b:9d:8f:4e:88:c1:7e:c0:d9:b8:9f:52:e0:
         f8:52:87:8d:d6:93:4b:c0:ad:9b:2c:7d:53:76:57:1e:fd:a0:
         18:f8:3b:23:8c:ab:03:f9:5a:62:9b:f9:f0:47:f8:ff:95:a1:
         8f:6f:50:32:40:e6:a9:da:5e:da:cf:c4:f6:87:f2:b4:73:1e:
         13:92:50:26:db:ca:8e:00:f9:a8:0c:55:27:de:65:6b:c8:a8:
         24:5c:db:c1:df:ae:6a:fa:60:a2:77:eb:49:fc:5c:a3:87:3a:
         85:59:8a:b0:2c:f0:1d:16:93:43:48:17:68:84:a8:f7:92:db:
         fe:6a:73:0a:62:ed:e6:81:ed:6e:61:04:70:f6:6f:58:1a:48:
         82:0d:bf:e3:16:25:2a:3f:26:83:a2:83:bd:41:98:90:0c:3a:
         0f:26:89:34:28:f9:22:6b:f0:1a:e9:3f:92:19:1c:50:4f:1c:
         70:42:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----