Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File:                     y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier:          SelFv43zGicD+4QVhSdGCFeSsADieqnQFrAVlLiXpyc=
Subject key identifier:   4A:66:A7:0F:67:04:AF:4D:25:18:33:F6:0B:A8:28:AE:5F:2B:70:39
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer:       /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial:       01962ECF6855A41CAECB40D8DAF808F69AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number:          0DD7
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
                          2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
                          3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
                          4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: sL2dIoKkw5lJj1hturLsfFfiP0R/L00kodX9ejHSNyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:55:a4:1c:ae:cb:40:d8:da:f8:08:f6:9a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=4a66a70f6704af4d251833f60ba828ae5f2b7039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:40:d2:85:3e:93:f2:9c:98:e9:79:ad:e9:
                    0f:98:50:a5:36:28:ce:9f:9e:fb:67:1b:79:2f:19:
                    07:38:24:66:b6:55:3e:fe:67:83:29:6a:07:57:58:
                    7d:06:cf:6e:2d:cb:59:00:95:c6:bf:2d:cb:d7:d0:
                    b1:3e:e3:b6:2a:49:1d:28:a2:ef:9d:f0:51:9f:36:
                    09:89:36:87:1f:5b:67:83:40:90:e1:78:b6:44:e7:
                    1f:5b:7c:de:17:78:72:29:49:6c:ca:d8:4e:c9:5a:
                    af:a1:5b:75:5f:e4:f2:68:85:ea:dd:3a:eb:0e:6a:
                    6d:1b:49:3e:c2:81:5e:ea:c6:db:95:94:a9:fd:6f:
                    0f:5d:6b:12:a3:88:1f:c5:3f:ee:ac:d5:e6:15:a3:
                    fb:ba:5a:12:4e:81:50:c8:62:db:6f:21:05:b3:c6:
                    a1:21:26:ae:6b:7e:80:c1:ec:07:ff:30:76:bb:57:
                    cc:26:6c:d0:63:a8:ed:68:f8:7d:c3:47:52:20:83:
                    05:2b:b7:6a:46:54:2b:c0:b3:e4:cd:3a:4b:75:ba:
                    09:cd:1b:e1:ca:89:16:81:02:84:d2:2f:e9:09:46:
                    58:49:6d:7e:fa:f3:ef:44:b8:70:6d:88:ea:32:36:
                    8b:00:08:6d:30:53:c9:e9:43:51:1d:38:08:23:ef:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:A7:0F:67:04:AF:4D:25:18:33:F6:0B:A8:28:AE:5F:2B:70:39
            X509v3 Authority Key Identifier:
                keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:32:da:d1:38:34:8e:55:25:57:ea:79:05:a9:8f:3b:c3:60:
         79:db:29:f2:22:fe:84:d9:49:63:0f:0b:19:5c:f0:74:1f:ad:
         88:26:24:fa:2e:1e:18:e6:10:93:0c:6e:a0:49:b2:ca:9e:6f:
         22:a8:a3:a5:b5:e2:1a:f5:82:9a:92:85:89:af:a7:81:dd:0f:
         8a:fd:11:41:63:fb:89:6b:ad:be:fe:0d:2c:c9:b1:17:c6:e4:
         07:18:84:5f:d8:54:5a:53:8a:3d:fc:c8:e6:f5:75:df:15:8e:
         c8:21:55:4d:c9:1a:bb:53:70:aa:1c:70:81:11:df:a9:a6:c9:
         e1:7e:ed:d3:6d:49:93:32:e4:02:cb:f4:2c:81:8f:f0:1f:bf:
         6b:53:cf:f5:99:eb:46:14:5d:87:2c:35:40:65:58:b7:46:85:
         77:27:72:f3:42:9f:b4:36:d0:4b:29:77:93:ff:e0:b7:58:87:
         9f:2e:6e:5d:15:25:bc:fd:83:ec:4c:d8:b3:44:36:2d:0e:fc:
         5c:7d:d6:13:99:98:18:79:31:d7:1f:41:ad:97:c4:5a:15:59:
         f3:ea:15:3d:73:84:28:69:1f:e0:5c:37:20:b8:74:39:b0:1c:
         94:0f:09:dc:0b:71:a0:ce:0e:d5:c3:bf:b9:1d:21:10:71:0b:
         c1:e8:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----