Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File:                     7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier:          PEaWTG3xVUTXqmWaCecvIp/2/yLEij0uYxvnq0ovacg=
Subject key identifier:   7C:ED:E3:E0:ED:60:F0:17:AB:60:10:64:0D:04:39:34:6C:74:6A:01
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer:       /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial:       01962E9906CED352FDE5F90F2BA99FC3047F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number:          A5
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: eTe6wOAeZX7cckvd8nPAn64Jy7c+UN/qX+ma5sVCjFc=)
                          2: QSjkZq8_AJ0B8g7dlzd0nA4JsWQ.roa (hash: YMcvfk9S0D5BI+lBDXlsaUm2v/yIEV2HtkKOAQ1Y0Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:06:ce:d3:52:fd:e5:f9:0f:2b:a9:9f:c3:04:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=7cede3e0ed60f017ab6010640d0439346c746a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:37:d4:90:4e:30:7a:f7:6f:a3:c5:c7:bf:
                    c0:ea:9c:ec:5d:43:02:fd:d3:24:50:5c:c9:c1:81:
                    18:7f:3f:ea:9e:c0:24:54:0e:4e:bc:13:af:92:96:
                    6d:4f:83:1c:a8:73:55:6d:ff:40:63:c6:55:84:6a:
                    31:bc:ff:03:27:05:42:87:77:ac:72:8f:7e:c6:1e:
                    ea:73:5b:2a:9e:f8:34:83:cf:61:42:7d:a7:70:11:
                    74:62:32:bb:2a:83:95:5e:fc:5a:52:50:96:bb:42:
                    ea:11:dd:63:df:95:e1:37:6d:f5:f6:dc:f5:9c:28:
                    6b:6e:63:0e:0a:83:ff:e1:24:05:94:65:06:78:70:
                    01:bf:9e:28:2d:5d:e5:3f:ac:43:35:ca:68:07:87:
                    4b:fe:80:86:d3:86:73:a1:a3:7d:da:cb:3f:d8:73:
                    7e:ab:05:bc:25:8e:dc:1c:e0:1d:c1:bf:49:17:a9:
                    12:90:74:c9:6e:2f:52:2a:44:58:a4:b7:be:52:c8:
                    3e:3a:dc:e0:f9:68:95:ae:13:5e:b9:2b:6a:dd:3e:
                    a5:0c:03:63:b0:d1:3b:08:4e:da:ed:54:c4:9d:a2:
                    cf:18:78:ea:36:e7:15:11:7c:83:ad:64:0a:58:f3:
                    5a:0c:f2:db:04:ee:a3:1e:94:07:0c:d0:2d:e3:35:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:E3:E0:ED:60:F0:17:AB:60:10:64:0D:04:39:34:6C:74:6A:01
            X509v3 Authority Key Identifier:
                keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:8a:89:93:8c:ee:f9:c4:7f:9f:b3:98:db:a0:e2:09:d6:
         64:9b:9f:20:61:6c:ab:b0:2b:d6:8f:07:4e:d1:ec:cb:fb:3a:
         0c:ae:b7:0c:6a:71:c0:a6:19:00:66:2b:6b:1a:e9:68:ed:58:
         88:34:da:9a:9f:0f:6e:68:79:c7:7d:67:af:f5:c4:39:5a:ca:
         16:a0:af:e2:26:51:21:0e:ba:a8:99:4d:cf:2e:47:c8:11:43:
         f7:36:a5:69:e5:62:ef:81:18:9e:29:62:ef:08:d4:d4:d6:f6:
         fc:3b:10:ce:6d:a8:1c:ca:a9:35:d0:b5:4b:e5:a2:08:20:b8:
         58:93:88:6f:4c:38:a4:aa:17:5a:dd:26:b9:af:16:62:da:2b:
         68:9f:56:da:8e:62:46:3a:83:74:48:5a:3b:04:9f:33:b7:ba:
         66:63:0d:e1:5c:b3:fb:0a:70:7a:9f:5b:03:81:81:e5:4a:c6:
         ee:8f:73:c0:0c:96:58:4b:d0:57:e8:99:8b:a1:d9:7b:57:32:
         0b:04:32:61:47:73:95:86:8e:4d:f4:fe:13:aa:cd:b9:85:6a:
         de:57:d1:f0:c8:f5:75:77:a2:d9:1c:78:0e:69:c6:cb:a2:10:
         d9:83:3f:21:a5:55:d5:f5:64:f9:6b:f7:fa:33:ff:2a:d1:84:
         79:c1:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----