Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          7U7vLu9qcaaRmcSkcaASquuB6DALaCRSZOchgahqKLM=
Subject key identifier:   2F:90:CF:3A:30:40:1E:29:B1:55:B6:DC:01:55:60:13:C5:4C:E4:DF
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       01962F749664A9688BF66D0E6A8CF401B115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: WKiNeGY0NYdNkIVhtPccFsz+7J5jmOjd09vgGQJTfhw=)
                          2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:64:a9:68:8b:f6:6d:0e:6a:8c:f4:01:b1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=2f90cf3a30401e29b155b6dc01556013c54ce4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:5d:c8:33:a0:b2:03:4d:fb:26:f3:1c:62:
                    8a:7b:d0:a9:d3:58:b5:12:06:93:19:5d:30:de:29:
                    35:14:76:39:80:a5:05:b1:1a:45:49:9b:53:87:33:
                    e3:78:b2:b3:82:f9:67:01:e0:44:1a:2e:c5:65:2d:
                    7b:1a:8e:b5:22:d8:69:23:9e:06:33:f9:9e:5d:97:
                    39:cb:44:6f:51:a0:44:1c:f6:ac:d0:d6:24:89:51:
                    d4:16:71:2c:ed:66:be:9e:7f:15:79:0b:d7:7f:31:
                    0c:e5:44:d4:4e:f0:c0:0a:07:1d:33:09:bb:0b:9a:
                    56:67:ec:60:76:00:85:ed:cd:42:46:3c:33:f4:14:
                    a5:9d:3a:b9:b7:ed:d0:b1:a3:55:d9:0f:64:03:94:
                    1e:7d:f0:68:7b:20:2c:b6:78:15:ce:07:2f:86:0f:
                    75:8f:ea:e5:23:f7:90:5c:28:2e:88:66:6e:95:29:
                    b6:58:dd:a7:db:e9:8f:58:4b:16:ef:7b:b1:25:e3:
                    b0:9b:e8:69:e6:d8:00:60:0b:5f:72:48:77:81:11:
                    99:9c:09:9d:18:88:4e:4c:29:1b:9c:c6:98:3f:ce:
                    27:1d:1f:c3:7f:48:fe:4f:98:2d:b6:a5:9a:b8:83:
                    9d:56:82:07:92:60:57:ac:eb:1d:08:b3:dc:8c:55:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:CF:3A:30:40:1E:29:B1:55:B6:DC:01:55:60:13:C5:4C:E4:DF
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:34:a8:de:82:40:13:e3:ae:65:41:75:59:fd:25:11:4a:
         b4:5e:d6:6b:95:4c:5f:93:1d:c7:65:aa:cd:7b:05:da:38:4f:
         5c:44:aa:d6:35:a9:46:ec:89:95:00:1b:c6:0d:5d:5d:ec:ae:
         95:ed:84:a7:cb:b4:72:de:64:e0:56:0f:7e:3e:9e:60:12:37:
         26:c7:07:ec:5b:66:4b:61:17:e0:9c:ff:84:67:8a:ed:9b:e2:
         08:67:ed:31:96:b9:46:1b:55:94:2e:ca:ba:5f:7e:d6:26:b6:
         8f:24:09:59:80:80:aa:07:79:fc:a2:11:45:ba:1d:c8:58:c4:
         48:7a:03:22:14:1f:b2:cb:11:ba:97:f4:55:09:df:00:1a:6f:
         75:8e:03:2b:c2:0e:0a:4a:93:e5:ad:0d:43:68:5a:44:18:1f:
         53:43:0b:41:12:06:5f:07:cd:4f:a7:cf:57:e9:2b:b0:ef:35:
         a0:23:b0:7d:33:03:ac:ad:29:a9:26:29:39:98:11:dd:1c:ee:
         43:80:bf:73:e7:03:cf:2e:53:47:fa:ea:1d:b8:be:59:3a:71:
         c8:b2:8f:1b:ba:66:40:4c:db:9f:d5:cb:36:95:c6:85:2d:7b:
         17:f1:36:8d:a7:56:f2:38:6f:7d:aa:5f:a4:f2:1a:92:ad:be:
         7e:74:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----