Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File:                     r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier:          DNqS4m4RUKSes3df8iM6LTLqJmsWPHEwYTMydfrOQKA=
Subject key identifier:   DD:80:79:49:88:36:9D:90:15:A9:0A:1E:4F:C3:40:EA:5D:C1:88:92
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer:       /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial:       01962FAB630D485633EBF8E36EA6CE5F07A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number:          04B7
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: aziKSjcmtjl7ZRQR41_A0vxpLio.roa (hash: wLgqqaoEM11h+IUGz/tIVa/YuL2NopeoenmAEMfpDUc=)
                          2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: a9cZZxUThW97TdNxOP4DrI2aE7CFdy4+/w7iww5v5pU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:0d:48:56:33:eb:f8:e3:6e:a6:ce:5f:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=dd80794988369d9015a90a1e4fc340ea5dc18892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:d2:1a:4c:2b:de:21:58:e6:cd:b0:10:5c:
                    d9:07:c1:92:57:90:37:d4:b9:d4:ca:f6:36:5a:51:
                    83:12:bc:6f:e3:10:67:50:41:67:f1:32:be:b9:b5:
                    e9:cb:c1:b8:34:c5:9b:f7:44:a6:41:58:a7:b3:05:
                    a5:cb:66:62:45:f9:7d:de:67:e9:b2:98:59:2e:d3:
                    1c:d3:9b:70:c0:2f:7a:d5:f2:1f:5e:9f:9f:e9:54:
                    31:f1:95:74:d5:e5:b7:d5:16:2c:31:cb:89:ca:d2:
                    8f:77:86:13:8a:e8:ae:27:b1:5f:90:2e:b4:05:b7:
                    1c:3a:48:2d:9d:46:5e:6c:09:df:9d:88:fe:a3:a4:
                    b7:fc:f3:ca:d9:4a:d8:c0:63:4b:d3:d2:99:37:30:
                    11:60:d6:ee:fd:1f:9d:d0:83:83:2f:c4:55:70:ff:
                    09:a0:54:af:63:1c:8a:a8:10:18:a8:8f:bc:b0:0a:
                    a8:5a:16:f8:61:f5:e7:c3:f1:53:31:c5:d0:32:a6:
                    68:45:12:ba:1f:ad:74:54:49:ec:21:35:f1:5d:2b:
                    75:cc:6f:ab:48:55:9c:1a:c5:ea:42:b7:e4:d6:7c:
                    57:eb:3b:bf:f6:85:ad:c9:b2:1a:72:57:73:58:78:
                    ac:2e:89:28:f1:6f:f3:0b:56:7c:61:fa:a6:ed:d3:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:80:79:49:88:36:9D:90:15:A9:0A:1E:4F:C3:40:EA:5D:C1:88:92
            X509v3 Authority Key Identifier:
                keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:75:5a:0b:6b:49:1d:7c:66:94:bd:4e:11:93:c4:2e:f3:
         5a:f3:d9:94:4c:9e:6f:91:16:8c:df:b6:ba:f4:1e:78:01:b3:
         b6:19:1e:db:d7:65:8e:95:65:6b:db:84:54:c7:39:5f:75:ec:
         df:86:ce:25:01:54:c5:49:dc:19:cf:df:07:e1:db:01:2a:45:
         44:fb:dd:3a:07:3a:6d:b1:48:f3:79:69:9c:a0:ff:17:71:84:
         32:b1:c8:fc:e7:d8:74:b3:c8:db:08:4e:a8:4f:64:6e:07:ff:
         3b:0e:a4:f3:b3:84:ca:3d:a1:0e:9e:e3:3c:a3:1a:b1:84:f9:
         52:41:af:e1:3e:4c:2d:a8:f8:dd:f2:c2:de:2d:93:3d:08:c1:
         45:a9:77:3a:69:1c:fe:3e:20:fa:9e:55:2b:aa:93:df:5d:72:
         e0:0a:36:e3:5c:c7:d1:9d:f3:94:b9:40:c1:f0:90:39:f1:c7:
         e5:55:b9:fc:9e:24:64:e4:05:dc:ba:5c:32:4f:21:0e:ec:91:
         85:59:b5:0d:19:9e:c7:fd:e8:cf:38:e4:48:9f:82:cb:7b:20:
         49:bf:38:5f:87:2a:f8:ae:47:f2:87:6c:d3:8f:fc:b6:a3:7a:
         3c:c9:6a:8a:65:4a:5c:35:95:2b:4d:a3:98:04:a6:9c:91:e6:
         f7:f0:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----