Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          +WJy8ZHaVUejjhJc4HNX6Wp6FkU5s6Nxi8Gr94iDZOw=
Subject key identifier:   10:80:DF:66:D3:7A:04:06:4D:62:B2:38:BA:C0:BB:36:C2:94:E4:66
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       01962E990CAB1FF8468DCCAD9FF42027E423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          0248
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: nwz5nGtjY721GxxJigarjkecTNxxMM/mPreCX0lbPYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:ab:1f:f8:46:8d:cc:ad:9f:f4:20:27:e4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=1080df66d37a04064d62b238bac0bb36c294e466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:3d:5e:47:cf:7b:dc:73:8c:09:7e:66:26:
                    39:94:c6:e5:d6:43:ee:8a:78:0e:d0:bb:60:f7:42:
                    46:25:69:a9:29:ea:ac:3b:cf:0c:cb:5f:10:b9:a6:
                    71:01:f8:77:f7:8a:c0:45:e0:f3:55:68:40:e7:d2:
                    ac:50:86:c5:25:59:8c:98:5b:06:6b:eb:2a:14:61:
                    80:17:92:ba:34:4e:16:e9:1b:b9:3e:75:bc:49:51:
                    e0:1d:03:a2:92:ed:b9:31:11:5b:77:97:87:1d:44:
                    61:4e:32:49:b4:b0:ac:1f:2c:9d:a5:cc:59:c3:a0:
                    91:aa:b3:e8:db:ba:a6:75:76:54:ea:46:8b:1d:bb:
                    8f:f3:ea:f3:a2:bc:21:f6:5f:d2:6a:7e:15:47:d1:
                    b3:e5:39:58:bf:40:18:63:3e:42:1b:ed:65:72:93:
                    cd:2f:f0:32:17:d3:3d:00:07:ad:15:b4:eb:f4:fe:
                    1b:f9:7e:92:7f:54:63:e1:9d:f7:b8:fe:e2:f1:81:
                    7a:dd:52:63:e6:da:fa:90:90:1b:22:22:05:7d:7a:
                    b9:47:67:b6:76:55:f2:44:af:a2:b5:6d:63:9e:e9:
                    1e:fc:ab:e6:f2:92:84:19:a3:e9:4a:d9:8e:24:a8:
                    a2:3e:01:e1:e7:15:4b:7f:53:d2:35:4a:f9:8a:d3:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:DF:66:D3:7A:04:06:4D:62:B2:38:BA:C0:BB:36:C2:94:E4:66
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:e2:c0:38:17:e0:8a:44:15:5a:66:00:de:48:d6:bf:48:
         0f:ef:fd:c4:98:41:d0:e4:22:18:3d:e7:dd:96:b3:4b:c7:90:
         31:4b:1a:73:27:48:dc:be:fa:a5:ad:d5:34:9f:32:2d:6c:91:
         de:14:b2:94:64:3b:e1:93:fb:b6:ed:9c:5e:39:69:f5:a0:e4:
         ce:fa:cc:48:11:8c:71:74:4d:cb:cf:ed:2f:a4:c9:bc:e9:45:
         7f:26:21:2e:e9:63:b2:a4:6f:71:2a:81:c3:cb:d8:f4:1b:ef:
         1c:60:f3:11:71:09:9a:78:d7:4b:73:0f:6f:0e:e0:40:d2:fc:
         f7:8d:39:31:70:c4:41:bd:e9:6b:e2:db:3c:62:39:c9:aa:09:
         f5:9d:18:28:b3:e9:00:35:53:e2:c2:22:32:db:db:18:70:91:
         ea:2c:8c:0f:8c:4b:72:d3:e4:9a:2d:ce:c9:1d:32:cb:a8:7b:
         4c:cf:2f:a9:84:9a:6f:1b:7e:8c:d9:3e:1b:b5:3c:2d:02:9e:
         82:9b:b8:cb:a6:8a:fc:b6:a6:0f:6e:95:5f:6a:f1:1d:f6:0c:
         2a:5c:ea:fb:3a:8a:b9:d8:16:b7:39:21:10:61:6a:82:c4:f5:
         d2:b3:c5:d5:c9:ee:6c:46:3e:a5:56:45:c2:f7:fa:b0:33:df:
         19:4d:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----