Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          4vSeV21E5sq5V4i2oMvgKXM07LdVdY+pAfiEpLLBVRo=
Subject key identifier:   94:54:4A:C0:08:24:3C:E3:4E:40:1B:AA:4D:0A:A3:A2:E8:F2:A6:1B
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       01962ECF7CEEC4D7F121421037F36EDF188E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0B76
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
                          2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: Eb4EBe3Ya720mFJDKqoalnLGlJNmsTbVLyPUAV6KZ2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:ee:c4:d7:f1:21:42:10:37:f3:6e:df:18:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=94544ac008243ce34e401baa4d0aa3a2e8f2a61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:51:ed:ff:17:58:6a:56:2f:bb:34:67:1a:
                    5b:81:a2:da:06:30:c2:b1:8a:fd:38:4a:be:02:20:
                    9c:b3:eb:d9:b0:45:ef:d4:62:9c:07:ec:24:5e:2d:
                    5e:a6:fa:e7:74:33:ef:0a:7d:4a:ba:af:bc:07:6f:
                    1e:65:cf:13:02:34:ed:0b:99:d6:30:88:e8:f9:1f:
                    73:93:c0:be:be:fc:9d:61:68:68:7e:e9:44:c8:c0:
                    58:c8:59:e7:3e:e4:82:48:bf:d8:74:ef:74:84:2e:
                    d5:5b:38:75:00:71:fb:33:72:48:dd:bb:62:09:df:
                    2e:2e:1b:b0:5e:97:51:68:58:65:2e:4b:11:82:d9:
                    02:eb:41:63:10:c6:d1:e7:a0:c2:20:af:37:46:b1:
                    f7:c5:d4:83:dd:c6:bc:10:20:71:ae:85:a4:62:b9:
                    b2:b1:9e:6e:65:e6:ff:ca:a3:4a:b4:5d:7a:26:42:
                    b9:b1:e6:38:24:d9:2a:6f:4f:c1:4a:e7:aa:8e:c8:
                    37:81:41:58:b6:25:9d:b4:7a:34:89:b8:cd:12:33:
                    c3:ce:ff:90:f0:74:61:ec:19:80:b0:f1:39:1a:63:
                    b3:df:74:a1:17:f7:4f:88:38:ac:88:35:07:79:6e:
                    b8:af:7a:11:2f:c3:f9:e7:c4:47:3d:1c:6a:19:3d:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:4A:C0:08:24:3C:E3:4E:40:1B:AA:4D:0A:A3:A2:E8:F2:A6:1B
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:fb:1d:07:d6:49:68:57:63:8a:47:b6:f6:7f:80:89:7a:
         a3:ca:63:cc:6f:db:d3:2e:98:70:e9:7c:ac:d9:d8:c3:db:f2:
         f9:0a:f7:c9:5d:08:08:06:96:d9:fe:64:03:a8:06:c3:c8:e1:
         a9:8f:7d:35:c3:16:07:e5:9c:54:00:7d:c7:14:d3:11:93:75:
         4f:2d:71:d6:31:4f:f4:d4:a2:fb:e4:84:7f:4d:b7:4a:ca:5e:
         2f:e6:69:2f:ab:d2:c7:a3:6e:3e:79:f9:62:9c:2a:62:cb:d9:
         a0:06:07:af:f7:62:83:0e:e4:5b:63:9f:0e:fe:c2:70:7c:c7:
         16:87:5f:6b:bb:bb:bc:84:6a:be:da:fa:cf:39:dc:2c:52:23:
         fa:3d:9f:2e:8d:62:9b:98:c2:ca:1d:84:af:eb:75:17:3e:b3:
         a6:61:e5:a2:9d:3c:ac:f9:19:7f:ab:ed:e4:4f:a7:43:06:32:
         fc:5d:ba:a2:e0:3b:a7:c2:f6:26:b9:0c:1f:9f:b9:cb:97:f7:
         24:1e:33:2a:62:d7:95:c7:90:bc:b2:b5:4b:37:c0:7f:17:01:
         2a:1c:0f:74:4e:8d:52:67:b4:a4:27:9b:6f:de:03:29:e2:51:
         b7:79:3c:f9:8d:f1:94:f8:e9:ed:68:65:86:7e:0f:f0:c4:98:
         c1:d2:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----