Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft
File:                     7a03UwFfx-FoKksfd_8k1MDoa1E.mft (raw, json)
Hash identifier:          7mdzpEYXJVoiv9vbYT99/RmIZEjPNjEdfWHto4mSw94=
Subject key identifier:   8C:65:B3:EE:1B:4A:78:92:95:00:43:00:58:8C:3D:74:A5:B4:2D:F2
Authority key identifier: ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
Certificate issuer:       /CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Certificate serial:       0193FA78A85F377B8B17D847C20BC88A30C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft
Manifest number:          05
Signing time:             Tue 24 Dec 2024 21:00:31 +0000
Manifest this update:     Tue 24 Dec 2024 21:00:31 +0000
Manifest next update:     Wed 25 Dec 2024 21:00:31 +0000
Files and hashes:         1: 7a03UwFfx-FoKksfd_8k1MDoa1E.crl (hash: YtIPFPbTdHe22tP5Y5ySCP6G/RanPPmY5kU2UfQHvX4=)
                          2: RC4aaqO_uX8ielyRqsGajEbbd78.roa (hash: daDOGAgD/q4VMmj2YWjZMExkDqd8RmHGoeWbiENifnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:78:a8:5f:37:7b:8b:17:d8:47:c2:0b:c8:8a:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
        Validity
            Not Before: Dec 24 21:00:31 2024 GMT
            Not After : Dec 25 21:00:31 2024 GMT
        Subject: CN=8c65b3ee1b4a789295004300588c3d74a5b42df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:f1:25:bc:7d:df:ed:da:34:f6:d1:dd:a5:
                    54:34:85:9f:4c:98:b2:50:cf:16:64:d0:2f:64:fc:
                    a5:f2:21:3c:3c:97:64:1d:90:4b:2f:98:26:9a:ed:
                    2d:34:25:2c:07:c0:d9:3b:53:62:00:54:a5:a9:2e:
                    1b:41:55:af:87:f0:1c:03:19:5f:cc:d3:f0:e4:c5:
                    ed:d7:47:0f:bd:d1:6f:9a:fc:94:71:90:0d:27:3a:
                    ce:28:5a:b3:95:16:a9:67:71:50:84:90:76:f2:fb:
                    95:02:78:a6:1f:98:c6:71:2f:ac:61:38:bf:e6:a9:
                    4e:7d:07:0e:b4:ea:48:7f:a0:ef:4c:d6:3a:90:2f:
                    fe:c9:82:aa:c9:81:2e:66:c6:83:e5:7f:75:8e:88:
                    cc:a3:67:6a:b5:64:e6:96:9b:b7:d7:3a:fb:91:68:
                    f9:95:93:3e:8e:ec:a7:55:3c:21:e1:6c:8e:a5:78:
                    a9:a7:82:b6:6c:49:b4:27:69:ce:fb:06:0e:88:23:
                    f0:b7:71:bb:bb:f3:88:5c:55:20:ce:05:3b:f1:ac:
                    5a:83:d2:87:3f:45:f1:dc:22:74:98:22:a5:14:f8:
                    b9:8f:fb:23:20:a1:95:60:e9:44:4a:03:0d:b0:a6:
                    39:05:04:34:2d:db:ac:9a:2b:67:fd:62:eb:17:50:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:B3:EE:1B:4A:78:92:95:00:43:00:58:8C:3D:74:A5:B4:2D:F2
            X509v3 Authority Key Identifier:
                keyid:ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:45:3f:fa:70:aa:f4:aa:ff:d4:4f:22:35:bb:2d:df:7a:21:
         ad:1b:32:84:38:91:2d:66:e0:7a:3f:41:c7:b5:7d:ef:31:eb:
         0e:ef:b1:55:dc:03:d0:a5:c0:67:76:aa:b0:21:29:33:2e:65:
         5c:e8:b6:4f:f3:80:1a:20:03:77:2a:b2:35:60:9b:28:25:19:
         30:2c:56:21:21:39:1f:57:9f:d9:07:c4:28:c1:da:0a:35:b6:
         27:e6:66:ee:dd:98:64:bf:01:7a:c1:0c:6e:45:96:d9:65:50:
         fb:f6:ea:45:22:d4:bf:13:27:b5:db:af:ff:2c:1d:92:21:ae:
         67:b9:d0:5d:b6:8e:d1:f6:35:f7:b4:45:1b:df:7e:b1:26:9d:
         b5:35:d9:75:f8:82:07:56:7d:e0:15:c1:2e:18:b4:64:db:dd:
         62:3a:c2:a6:10:dc:45:16:37:13:e8:3d:b7:8c:9e:33:84:30:
         94:93:a5:22:0f:f1:b9:98:bd:e5:d7:f9:f6:ab:c5:05:d3:56:
         24:8a:62:48:ef:d2:46:8a:54:2f:d0:0b:8b:93:45:42:4b:97:
         a2:44:6e:18:18:ab:4a:2c:75:00:95:a3:d0:a1:28:0a:43:f5:
         a5:98:ae:77:2d:65:3a:5f:37:8d:2b:1e:0e:2e:19:d6:8d:92:
         14:b8:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----