Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File:                     Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier:          P+hAu9P8gHHuM29AZeEOuinslCymwL3jAXCcqx/GRuc=
Subject key identifier:   AA:08:05:36:C3:F9:02:29:EB:76:04:47:F4:5E:3E:C1:A2:D4:5E:92
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer:       /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial:       01962DF3B09248BECBA6468A03D8A367434A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number:          013A
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: dzHP5rIybda1D7BFTUfIQsiYpTWELkMoogsw1wl9KbU=)
                          2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b0:92:48:be:cb:a6:46:8a:03:d8:a3:67:43:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=aa080536c3f90229eb760447f45e3ec1a2d45e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:05:45:a2:b8:48:df:b8:f0:28:cf:d7:61:
                    48:0d:1b:87:fb:4b:5a:d6:de:c4:40:ba:92:a2:ed:
                    17:6d:1c:62:03:89:78:88:c7:d7:7b:ed:89:72:22:
                    b9:5f:5d:48:d2:ab:2a:53:c7:7f:21:73:82:eb:60:
                    6e:af:d7:74:50:eb:83:ea:8d:86:0d:73:ba:cc:93:
                    5f:2f:7d:9e:a3:28:a6:da:61:4c:d8:7d:96:77:fd:
                    bf:47:7e:06:69:db:4b:0f:d7:46:e0:47:d0:53:47:
                    4a:80:93:80:01:09:33:1b:f1:ea:09:36:d2:26:b9:
                    7f:a2:c1:bc:6b:dc:e0:cd:17:58:95:0d:74:be:f0:
                    61:90:fe:f7:15:fa:e6:87:e4:f9:42:84:07:05:b2:
                    7a:05:58:df:4c:c5:1f:cf:49:d2:37:92:40:71:a3:
                    35:39:00:3e:21:36:fa:81:4b:29:70:45:6a:07:bf:
                    39:8b:79:5b:56:53:64:64:ed:d0:61:01:40:83:c5:
                    ce:99:d2:66:2c:c1:5c:ff:ba:35:7b:57:c7:d4:d9:
                    9d:3f:48:83:d7:3a:e3:56:12:bc:a6:f5:42:87:af:
                    d9:b8:df:7a:e8:79:c7:f4:ef:9c:63:87:13:b7:e1:
                    0e:05:82:3d:c1:f1:7e:bd:65:c5:f5:e2:b1:3f:88:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:05:36:C3:F9:02:29:EB:76:04:47:F4:5E:3E:C1:A2:D4:5E:92
            X509v3 Authority Key Identifier:
                keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:47:69:cb:9b:8b:01:36:0f:31:c8:41:0d:12:18:7c:87:c3:
         cc:12:48:79:d2:94:50:a1:c6:2b:67:68:23:60:5b:b3:01:e2:
         c3:db:e5:f7:30:a7:2b:b7:78:fe:50:c7:71:a5:79:60:ba:1c:
         0d:11:28:3c:2c:8f:12:73:cd:10:09:50:e1:56:83:9d:12:cf:
         9b:fc:9e:91:92:aa:fe:cb:36:ce:e2:7a:31:8f:72:e0:47:d6:
         b7:e3:89:2a:53:5e:d8:9a:d6:43:c4:20:85:68:83:88:b6:80:
         00:a8:39:b4:cc:cf:77:0b:72:b0:6c:c1:33:30:a7:40:71:e0:
         e3:17:d7:de:47:5d:af:92:d8:18:7f:d9:fb:63:8e:5d:45:89:
         6b:ee:86:a3:91:f7:2f:7e:05:ca:56:6b:cb:b1:e4:03:bf:12:
         e4:32:f7:4c:00:3a:b9:ff:6a:fe:3a:7a:b3:61:ef:63:fd:92:
         4e:f4:da:48:7b:b2:d4:7d:b3:35:ed:81:53:5f:4e:eb:f7:3f:
         cc:19:5e:c8:72:ac:54:91:8e:f5:96:b4:e0:4a:9f:cb:56:26:
         e5:24:d1:48:3f:5d:44:4b:95:0b:78:ae:c6:03:4b:b7:28:2a:
         4e:3e:d4:99:ce:d1:a8:d6:6b:16:b9:b2:08:10:58:ec:fa:f2:
         99:f1:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----