Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File:                     fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier:          9iEwZ5vumhygXDulsyGO6XG0ui5AroC3i2OzYfUazpw=
Subject key identifier:   CA:8C:8A:CC:35:CD:35:67:3A:38:51:78:6A:B0:C4:12:04:C4:21:FA
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       01962ECFC570E3ACDC97A78B57177C3B3561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: MBUy/OAhkA9nHUKMXlE0E1lgDLtX9kJcCozCZZPjA08=)
                          2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c5:70:e3:ac:dc:97:a7:8b:57:17:7c:3b:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=ca8c8acc35cd35673a3851786ab0c41204c421fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:65:0c:43:86:8b:de:c9:51:1b:15:8e:1f:
                    0a:80:5d:1f:4d:11:71:03:08:9f:07:bb:3c:c7:ab:
                    7d:42:42:39:89:89:ad:37:59:92:70:31:f1:f5:97:
                    01:19:80:56:84:3c:31:08:ca:57:2f:6a:62:33:04:
                    d7:e3:b4:f5:ab:7a:8f:75:0a:3f:a6:eb:53:76:1f:
                    86:11:e3:8b:82:a6:65:96:4c:80:c8:e0:00:25:18:
                    ed:77:83:6f:25:cd:81:28:7a:41:b2:56:79:5a:35:
                    f4:4c:a1:d3:93:5d:64:68:d1:79:3a:28:77:6a:e6:
                    c3:d8:81:78:c0:21:1d:4c:ea:35:59:ea:14:03:30:
                    f4:63:28:d5:db:cd:c5:32:63:2d:e9:4d:63:1e:4b:
                    8c:5f:61:29:1b:93:48:2e:c6:f4:78:4f:d4:c2:59:
                    9a:39:a9:2d:b3:fd:38:6b:41:33:76:38:1e:86:30:
                    e1:92:8a:3d:5b:ed:72:70:62:10:fe:80:d0:b9:19:
                    3c:ee:d0:95:b4:76:5e:13:47:1a:e7:ce:3d:7b:89:
                    81:69:e9:81:bc:23:d8:16:36:a8:f7:0f:83:c1:bf:
                    03:75:e0:dc:24:37:c6:b0:90:06:ee:f7:4c:b4:05:
                    6c:c8:47:3c:14:f2:1a:b2:ae:c7:3c:1b:2c:f4:6a:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:8A:CC:35:CD:35:67:3A:38:51:78:6A:B0:C4:12:04:C4:21:FA
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:96:10:c1:f0:08:04:a1:21:a0:e6:aa:d2:df:93:cb:7c:
         11:45:e7:11:3e:3e:19:52:c1:5f:5b:e4:ac:a6:17:16:8e:6e:
         3b:14:a6:e2:aa:59:48:e5:7c:49:72:50:c6:50:7f:01:2d:59:
         a0:ae:9e:b4:96:b7:64:37:f8:52:2a:e9:bc:41:ec:60:80:5a:
         82:2c:0f:76:3f:9e:a6:16:07:e2:ef:36:76:80:fb:4e:c9:1c:
         65:a6:71:7d:c1:10:b3:b6:70:5d:3d:d6:69:6d:ce:be:a5:19:
         6f:af:14:0f:54:03:a1:43:d7:69:59:0d:fd:ca:99:d8:a9:f8:
         70:61:3d:e8:25:cf:60:33:25:8d:73:15:07:9c:98:f0:c4:80:
         40:76:81:81:2a:88:3f:c2:fc:b5:97:b5:00:c3:7a:bb:7f:87:
         34:f2:52:50:b4:de:af:12:71:88:cc:8e:87:92:53:14:88:21:
         4e:04:ab:32:81:12:e3:c4:11:19:4f:3f:e7:4f:d2:ba:78:fa:
         45:67:11:45:ee:71:8e:a3:d2:39:6b:29:f6:22:e0:31:44:66:
         1c:86:67:bc:50:f4:61:75:4f:c4:7f:fb:a3:07:bb:f8:c1:3f:
         78:8c:f6:3f:b2:83:70:c3:ea:44:ea:e7:a1:19:e5:5b:06:c3:
         07:6e:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----