Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          lceiT2Bqtid9n8YTCkGOn2QR2m+Q1X/GSZqM6NVE/68=
Subject key identifier:   57:8E:95:09:47:0B:85:09:D0:78:96:95:57:07:DF:5F:23:F5:D2:18
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       01962F070E234F6C0FA34646F302E1659FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          102F
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: k2uSJEPuOe+68DnguJrKSGXyr8SK+1vGn/DHV+IL1ic=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0e:23:4f:6c:0f:a3:46:46:f3:02:e1:65:9f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=578e9509470b8509d07896955707df5f23f5d218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:89:a4:f4:df:6a:be:0e:68:85:2a:3f:a2:
                    f0:e2:eb:e5:eb:68:29:14:62:84:23:d4:db:65:e4:
                    cd:1a:48:aa:f8:7e:a1:33:29:24:67:92:5a:a2:6c:
                    13:27:8c:a3:03:d9:e3:f3:4a:86:dc:01:06:81:71:
                    50:1c:eb:77:0b:1a:22:4e:29:5a:39:2a:61:fe:7d:
                    7c:25:d1:b5:70:6e:11:af:03:34:15:87:fc:28:bf:
                    b4:61:03:b2:6c:92:a4:31:5b:46:ef:fb:ca:d2:7f:
                    5e:f1:84:85:24:95:33:9f:34:9c:18:0a:a1:82:e5:
                    56:b0:d8:87:44:19:8e:4e:6b:b6:5d:e7:32:5e:9b:
                    13:3d:50:89:7d:c2:36:c2:ec:3b:2d:4b:c5:68:ed:
                    74:75:c5:a2:69:83:fc:b4:88:5f:7e:04:5a:06:07:
                    c9:d0:0c:55:8c:df:0e:37:ea:6c:ad:c5:15:b4:cd:
                    46:9a:66:e3:7c:a9:1b:98:1d:b1:d8:41:59:8c:81:
                    d7:25:cd:23:d5:5a:f5:26:4e:1c:3b:ac:ba:99:34:
                    2c:dc:a8:45:d6:5f:74:d4:72:49:b9:8d:d9:d4:ce:
                    7f:43:e3:7c:23:aa:f5:78:1c:28:13:32:11:77:ea:
                    91:4d:c1:15:3e:67:9c:a6:9a:bb:3c:83:01:3a:af:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:95:09:47:0B:85:09:D0:78:96:95:57:07:DF:5F:23:F5:D2:18
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:64:35:a0:f4:82:ab:eb:ab:32:ad:d0:35:d2:98:32:58:
         1c:a3:f2:8e:ae:d4:0c:88:37:f9:c5:bf:07:64:15:2b:5a:da:
         0e:75:2a:b3:92:37:83:c0:61:c6:c5:a1:4f:1f:3e:b6:0d:38:
         60:8d:07:d0:38:4a:45:61:39:40:1c:84:60:cc:27:8e:8c:6a:
         b3:31:ae:2e:78:f1:fc:65:a8:dc:06:73:a7:f1:d4:ef:db:cc:
         ad:8a:d0:f1:cd:bb:11:6b:5c:18:82:55:7f:63:2d:c8:fb:e6:
         c4:c0:0d:bb:c6:0a:a0:6b:7d:ed:6d:ed:b1:2e:1a:ba:de:6c:
         4c:39:51:29:33:25:6e:e6:b4:99:38:4d:29:5e:a4:d4:d8:7f:
         8b:c8:4d:41:c6:92:7b:ad:18:17:54:9c:12:60:a8:26:24:22:
         57:4e:da:b9:cc:1d:be:c4:00:e3:4e:ab:8a:13:59:8b:ad:d9:
         ed:73:a1:e0:6c:a3:68:e4:17:7c:bc:9a:19:20:d7:1d:c5:0a:
         ea:d6:ea:0d:e1:80:ae:b2:11:45:91:9f:53:bb:83:b5:43:ca:
         1d:af:50:83:33:00:a1:f7:10:e1:fb:ab:b3:cb:36:b6:cd:dd:
         0a:45:d5:06:1a:9c:cd:5c:02:99:6b:c1:35:c2:78:fe:83:b2:
         8b:3f:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----