Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          x8Eon3b0PHiRJ33U8Ycc6Me54hUK90vL1PmBbNUJjSE=
Subject key identifier:   A7:AE:88:69:43:33:AD:04:10:1C:36:E5:F7:F5:35:E1:3B:CC:74:9F
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       01962F74CA75E5897B93C78DEA8FFA53F38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          0667
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: 6l+EA+utwJu4GRuyelUZLly/vs4WV1Uh5dTH35ZmB4Q=)
                          2: Ve7YFtVIJ6oEkkG5DoS-ngCjYv0.roa (hash: shC3WnGXTQpp0bvZL5ZiYYKQZO5PyZEtvwp/+mUAkvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ca:75:e5:89:7b:93:c7:8d:ea:8f:fa:53:f3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=a7ae88694333ad04101c36e5f7f535e13bcc749f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:54:62:9d:2d:40:3e:e3:7d:dd:4a:ac:c6:
                    a0:ec:e6:ae:ae:4f:19:96:27:47:95:b3:4a:a8:a3:
                    3b:2a:fd:7d:dd:96:78:5a:76:13:b2:e8:03:d6:b4:
                    2b:d0:ce:61:6a:92:c8:c1:b4:fd:cc:b6:08:dd:b5:
                    0a:05:5b:1b:17:a0:35:ee:cb:1d:5d:9d:b5:26:a0:
                    65:5e:ef:4a:83:f4:42:60:40:f8:50:4c:39:8c:dc:
                    05:bf:77:9a:0b:bd:9b:9b:d0:28:65:9d:7f:15:67:
                    29:5a:a9:6c:de:4e:05:64:91:bc:ee:5e:67:4d:74:
                    94:8b:c0:5c:0b:68:e5:ff:f3:ca:95:51:1b:a5:b1:
                    84:6d:23:dc:05:22:65:7e:46:c2:10:f6:21:d7:3e:
                    3c:06:b3:e0:3c:ed:ea:2e:42:75:88:88:08:3d:cf:
                    7b:66:a6:8b:e3:7b:bd:f0:84:3f:3f:e3:b4:a8:ab:
                    71:f2:fa:29:44:20:ac:13:a7:bd:0c:dd:c7:ac:53:
                    f1:c0:0e:83:88:9b:15:11:8b:2a:09:e1:1b:75:4f:
                    d1:5c:bd:a3:0a:8d:87:b8:69:aa:b4:63:74:de:74:
                    de:e8:e3:c7:05:f8:19:27:f4:ff:47:ee:4b:5b:65:
                    f4:78:68:fa:f6:fe:64:a8:b6:1f:e1:19:aa:ce:5e:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AE:88:69:43:33:AD:04:10:1C:36:E5:F7:F5:35:E1:3B:CC:74:9F
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:d4:eb:fe:38:ce:c4:77:f9:d3:11:4f:73:e0:28:38:b6:
         84:e8:ec:f3:40:8c:42:d7:fc:ce:4d:4a:87:58:e2:e4:ff:8b:
         82:e1:6b:16:f4:d4:1c:fe:d6:9c:f0:fb:01:80:2b:6c:19:52:
         f8:d7:1d:8f:12:16:5c:dd:81:31:22:0e:75:7a:aa:e9:9d:4a:
         c8:de:b0:43:53:05:84:c6:0d:41:f3:d4:df:64:b6:35:46:35:
         00:e2:e8:7c:1e:95:79:b9:04:a1:66:e4:8b:09:ab:63:f2:d7:
         af:8c:bb:d7:88:bb:81:c2:ed:23:70:47:b5:11:12:83:bd:01:
         a4:17:3f:5f:ae:b8:dc:12:77:48:c4:26:a9:2c:1a:54:b0:e0:
         de:5b:8e:9a:89:a3:ff:ed:33:8e:cf:e2:fb:28:ef:ef:a8:5e:
         7a:7b:72:5f:79:3f:38:4f:25:ba:21:b2:44:50:25:ce:22:d0:
         7b:f6:69:fa:fd:03:b4:ce:13:81:73:23:86:31:a6:0b:2b:2f:
         22:27:d5:1d:a8:72:d3:8a:3e:b5:e6:b7:6f:33:a6:0c:4c:c5:
         8d:ce:4e:02:3a:12:34:8e:80:e4:75:f0:98:fe:7b:fa:04:f5:
         5a:57:2f:ae:cb:9b:9c:d2:2b:5d:52:14:c6:18:39:6a:f7:6c:
         8a:c9:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----