Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
File:                     E07-fFQfVAbcfg_yaNBVgrrvyZY.mft (raw, json)
Hash identifier:          iW2SWuyPcjBFqUcUqbpYZ6AEgav42BoRFUVMwY55Ejk=
Subject key identifier:   F5:FC:2E:E1:54:15:1A:4B:E5:E2:FC:6C:D6:2E:3D:EA:72:E9:99:19
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       01962E61D0A8883D8303EAECFE7F2BA566A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
Manifest number:          0D4F
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: E07-fFQfVAbcfg_yaNBVgrrvyZY.crl (hash: WU7v8HMV87+nQg88eSUJipJayMUIjdHmch4tHT2as3E=)
                          2: biqyFypLLQNkv7SioX50S6Sicvg.roa (hash: LF7o3l8/q2c8dQh0AVrayQ/2mZza3ObHjFmvPVVd/nE=)
                          3: jw4-wajYBcUB_lE5D20b-DOh7uo.roa (hash: Kv0+iJW442oWteIb5Sw1ZuADeKbhpqDku8dGA7+CQdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d0:a8:88:3d:83:03:ea:ec:fe:7f:2b:a5:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=f5fc2ee154151a4be5e2fc6cd62e3dea72e99919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:1a:3d:44:14:5a:a8:b2:ca:2e:57:67:a1:
                    47:49:cd:19:61:97:cc:44:3b:6f:43:8f:7a:ba:5a:
                    e0:bc:35:33:fe:51:23:7a:42:47:04:57:7b:d8:e7:
                    0a:16:73:f4:a3:d0:71:37:81:cc:67:f7:74:49:a6:
                    5a:fc:ab:84:c7:c8:17:9d:2d:d7:89:ec:52:30:66:
                    1b:2d:f5:93:57:ec:a2:53:ce:0d:ab:ef:35:29:3a:
                    a7:c2:14:81:08:ad:32:70:a4:31:80:0f:82:37:9f:
                    49:4f:6d:3b:6d:38:c9:a4:eb:f9:7e:68:a1:93:69:
                    d3:4c:ee:70:52:9c:cf:2c:6d:65:bf:04:b1:96:a9:
                    89:35:8a:23:b9:71:f8:b2:1c:8e:14:0d:5e:85:85:
                    26:4f:b8:b8:ea:90:a0:ac:01:fe:56:c7:b4:b9:3e:
                    10:50:af:ff:9f:0c:a8:54:36:6d:69:2d:6a:04:0b:
                    30:3d:46:c0:32:56:e4:3a:81:56:26:23:c5:6d:c5:
                    af:7b:55:13:0c:27:a1:fa:77:a9:93:89:c5:c7:0f:
                    80:87:8c:86:4f:03:07:2f:61:7d:5f:9b:99:c6:bb:
                    52:d2:cb:19:54:5e:48:16:11:6d:7f:7b:cc:6e:b3:
                    af:01:68:93:84:18:7b:4f:3c:b4:9d:72:85:91:da:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FC:2E:E1:54:15:1A:4B:E5:E2:FC:6C:D6:2E:3D:EA:72:E9:99:19
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:e9:b5:3c:15:1d:8d:ae:e0:35:d1:3b:d4:aa:f7:32:67:
         ba:02:02:6c:8b:93:e2:01:c8:5b:0c:f5:5e:5e:03:17:33:c5:
         7b:60:1f:04:d4:30:5a:92:90:a6:32:f4:2b:b5:f3:c0:e3:3f:
         86:ea:1f:f7:c8:7c:f9:05:15:61:76:19:9a:6e:98:fe:9d:37:
         0a:a7:0a:90:09:00:f1:e6:98:71:73:40:66:e8:f7:de:24:3d:
         cf:b3:6a:54:1a:a3:b7:77:17:c5:c1:01:fe:97:6d:2e:01:ad:
         94:5a:fc:19:91:6a:b2:eb:56:e1:99:6b:5a:7c:10:d0:17:2c:
         d8:e8:0c:79:20:42:b3:b8:51:de:45:85:57:b9:c5:51:95:d2:
         3d:4e:b0:94:e7:37:f8:17:1a:ee:3b:ae:f7:37:1f:95:b7:be:
         6d:87:44:de:a4:67:61:8c:b1:33:4b:13:ff:51:42:ec:2b:d6:
         3c:9b:fb:23:39:6e:03:e2:74:70:a1:a5:2e:05:07:ec:85:1d:
         06:fc:cf:55:d5:c5:56:1e:20:e9:e2:37:c3:fe:ab:7e:89:00:
         3e:bf:41:ec:51:55:e0:f8:0f:6c:20:e7:bd:ae:df:20:51:bb:
         11:58:22:e3:01:81:7f:43:09:3c:fd:2a:44:66:03:e3:5e:df:
         37:fc:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----