Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          vUAMVF+tmM4bIvDf3nX7m7dnE9YBo9pPytkD7JZ/fSk=
Subject key identifier:   47:16:DC:ED:D8:D0:FB:DE:4A:F4:8C:BB:61:EE:0C:66:F2:CC:45:82
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       01962F748CCDC181CC17FACFE756F6194D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: YciGxqw0vfDiX7WfqDB42iNGjZmNW5Uz8Ezz5NYtHpQ=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8c:cd:c1:81:cc:17:fa:cf:e7:56:f6:19:4d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=4716dcedd8d0fbde4af48cbb61ee0c66f2cc4582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:fe:d2:e5:b0:cf:7c:b8:1d:c5:83:d8:a1:
                    2f:f0:0e:2f:51:ba:8e:d6:1c:a5:74:da:50:81:d0:
                    d2:15:f0:07:81:69:33:ac:dc:9d:dc:7d:24:f1:50:
                    80:e6:8e:36:38:43:40:7f:74:f3:0c:3e:35:b4:1f:
                    ee:63:3a:56:5f:dd:c1:24:11:94:65:92:1b:a2:36:
                    64:94:64:a7:d5:b8:03:60:b9:87:8f:4f:92:0d:7e:
                    2f:b1:6b:33:5d:70:b4:f4:36:25:2c:63:df:cb:70:
                    4c:6c:69:1c:e3:fa:ac:76:c0:49:31:da:8c:fe:38:
                    1f:5b:f6:3f:29:0a:a5:4b:b2:fd:96:ed:ef:cd:c2:
                    78:f2:92:fe:4e:05:1c:89:a1:91:98:a2:cc:10:9e:
                    ce:5c:73:a8:f4:c7:ac:83:04:db:c8:dd:4a:48:44:
                    af:6a:5f:96:5a:7c:77:58:39:f6:9f:18:99:f4:09:
                    09:5d:02:fc:29:94:8c:67:e2:ca:c3:6d:36:b4:d5:
                    3d:d5:cb:c3:8c:46:a5:f6:6b:43:62:4c:50:eb:82:
                    a2:9f:24:fa:02:a3:54:76:b7:7d:25:23:7f:8b:e9:
                    0e:02:79:e7:d6:fc:ee:75:26:57:b7:70:ec:3c:e6:
                    72:a9:0a:c7:39:3f:e1:f0:92:d1:88:4b:80:cf:a7:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:DC:ED:D8:D0:FB:DE:4A:F4:8C:BB:61:EE:0C:66:F2:CC:45:82
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:08:48:d4:7e:6b:0f:37:57:49:94:cd:c4:22:53:5a:e1:
         14:49:33:a1:f1:36:7b:01:0f:0f:37:81:ff:84:b5:65:67:3a:
         01:94:d5:a6:d9:f5:54:f8:19:f8:b7:4f:45:94:f2:d9:7e:19:
         50:2d:a4:31:a5:98:28:16:de:14:7e:20:66:2a:bc:d7:4a:2f:
         64:4c:c6:a1:6f:46:99:da:08:46:42:ee:e6:40:90:60:a0:d1:
         12:cd:54:47:6a:c9:d8:1c:16:98:59:66:de:71:28:99:8c:f9:
         11:b3:ed:ec:68:a1:c9:78:1f:3d:70:99:ca:96:9a:34:61:21:
         ff:53:05:f0:1e:8d:22:05:2d:0b:a3:c4:67:6b:c5:3e:ff:f5:
         af:47:08:8c:ca:70:e0:2f:aa:93:1a:fc:5e:fc:e5:b5:7b:10:
         72:9d:dc:9f:8a:2c:62:fa:9d:49:19:1c:cb:45:be:18:3b:c2:
         39:70:82:f7:07:fc:e7:6a:49:96:65:3c:02:b9:12:9e:e1:04:
         37:bb:74:e9:3d:76:6e:27:e4:a5:ab:8c:5d:2f:61:a4:ad:38:
         12:4f:0f:fa:a7:1e:f8:b4:40:56:88:a7:e4:16:a0:73:5e:c1:
         3e:16:97:a7:64:94:5c:3b:ac:26:f2:73:fd:13:5f:53:c4:7f:
         80:51:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----