Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File:                     7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier:          aMH9OP8obxC8vrpBcN+IzLH6PziMe2pVn3tUC8kTcOI=
Subject key identifier:   D5:B9:32:ED:D8:48:BF:F9:6D:4F:16:78:6A:19:73:CB:2F:A8:76:D0
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer:       /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial:       01962E2B182995646D5766F1F7F452007FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number:          08E2
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: Rb3qdBhAlDfE5GR17F4A/+yjNvj8pI6UVoxrxe7uPhc=)
                          2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
                          3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:18:29:95:64:6d:57:66:f1:f7:f4:52:00:7f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=d5b932edd848bff96d4f16786a1973cb2fa876d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:af:eb:6a:02:fd:c8:61:00:93:24:94:72:
                    3c:42:16:14:62:0b:43:e9:4f:61:f8:4f:d0:ff:6a:
                    35:46:dc:85:37:3b:36:fa:16:4f:68:e8:c2:55:54:
                    4d:82:08:47:cf:93:b2:85:98:b6:10:d1:fc:8b:3e:
                    00:38:95:0f:25:be:e1:74:64:92:46:c9:a8:1c:1b:
                    e3:ed:e3:0d:94:18:b4:9c:15:5d:cd:19:29:53:44:
                    86:be:09:57:92:6d:72:e1:99:d0:9a:b6:34:52:f1:
                    77:9a:b1:d0:fb:09:82:0e:3a:b0:f3:1c:09:99:44:
                    cd:f1:f9:a6:44:50:54:6c:5b:fe:69:ab:a3:43:6b:
                    53:ad:33:4b:71:1c:ae:1a:33:d1:ec:a0:f8:7c:4e:
                    e8:33:6e:c5:de:13:92:17:7c:d4:1b:1d:ad:cb:38:
                    12:7e:2d:c5:5c:e6:69:85:31:74:e6:ee:b8:dc:9e:
                    07:e1:68:20:6c:93:f7:e9:cb:59:0b:7a:0f:6d:28:
                    d5:4e:ef:b2:c5:fa:02:a8:9c:72:36:0a:e7:e2:86:
                    80:b0:54:38:6a:20:f7:62:6b:2e:ca:67:6b:cd:f2:
                    fd:e0:6b:4d:5f:2d:35:57:54:5d:88:55:e7:86:85:
                    52:d1:a7:a0:7b:58:a2:60:9f:b7:9e:b1:5e:f2:f6:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:32:ED:D8:48:BF:F9:6D:4F:16:78:6A:19:73:CB:2F:A8:76:D0
            X509v3 Authority Key Identifier:
                keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:05:13:cd:2b:9c:4b:a7:3c:b7:ce:30:5e:15:9e:1c:5c:3d:
         1a:88:4b:b9:8e:51:40:20:69:e7:76:a8:1a:7b:77:1b:40:c5:
         e1:79:de:2d:a2:f3:85:44:d9:ff:4e:af:d3:58:0a:60:c0:cd:
         37:10:30:3d:6e:48:10:07:c2:bf:36:97:30:f8:58:71:52:b2:
         b8:0b:71:f9:9e:62:07:53:73:2b:ce:dd:43:f3:68:ea:93:30:
         fb:57:e8:32:de:38:72:ad:cc:6f:66:e6:2f:88:c8:fa:23:82:
         09:c4:0c:a3:f5:5f:70:c7:4d:f7:53:01:6c:6e:e8:85:33:bd:
         8a:81:ad:4e:5c:65:5b:56:9a:9a:f8:56:f2:ab:2d:dc:28:f6:
         0f:eb:dc:d0:8b:02:26:da:92:62:b6:70:e5:21:76:65:99:fc:
         0a:52:76:86:eb:6a:16:48:dc:c3:27:98:18:ed:f4:cc:8c:9a:
         1b:85:67:b2:4a:29:9b:2c:df:0a:22:5e:0c:c3:e3:2b:5b:6f:
         ff:d0:04:f7:33:30:6a:2b:1f:f2:ea:ec:03:68:21:28:bd:73:
         57:3f:15:9e:7b:3a:13:82:e9:9c:d7:16:3a:3b:e1:76:ef:e4:
         a8:50:f7:90:be:15:10:d6:5c:c4:d6:0a:e2:cc:1d:bb:f0:b2:
         45:3b:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----