Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File:                     mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier:          /rtxoIuw+9jfpXEqxJeEZTjarM4dKPWr+eSikMzAN9g=
Subject key identifier:   FA:C4:74:4C:F0:56:4E:43:79:F8:6B:40:44:60:26:8D:A0:66:DB:E7
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer:       /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial:       01962ECF68D3409973862A17E3C5493E77DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number:          0DD8
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: E2XhbytOedXxWJLw9yl2DiK1FyxFftzCIDgPFszQjtg=)
                          2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:d3:40:99:73:86:2a:17:e3:c5:49:3e:77:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=fac4744cf0564e4379f86b404460268da066dbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:5c:de:29:57:f3:00:9d:f6:ae:9d:e6:ca:
                    13:54:04:90:ab:11:f2:cf:a8:19:0b:8f:62:13:dc:
                    d3:df:9e:f4:5a:b4:08:b1:1c:2c:15:d4:2c:f9:4b:
                    e4:9f:37:2f:20:0d:55:ad:f5:aa:2d:3d:00:39:ab:
                    49:9d:65:6a:6d:97:b6:95:f1:db:9a:02:31:7f:5f:
                    ed:ae:89:e0:ff:20:ac:bf:01:43:bf:0b:6e:4b:f9:
                    d3:3a:d9:35:94:e9:be:9d:f5:1f:3c:1b:dc:3f:92:
                    91:39:c1:42:f0:80:2b:ac:82:17:f3:90:82:74:22:
                    fe:08:ca:cc:13:c0:bd:f4:66:2d:c1:6c:c5:40:fd:
                    3a:1f:04:ab:62:24:93:0a:f0:8a:8b:c3:92:2d:d1:
                    ed:7b:22:f0:31:d7:03:ea:9b:f6:1c:e3:9f:fc:8d:
                    af:0b:f3:b8:f1:fc:34:d5:67:58:34:af:18:75:cd:
                    af:a3:48:95:7b:7f:6a:89:cf:a0:3f:0f:c9:0f:ec:
                    e2:f6:36:f7:df:4b:6d:59:1d:e9:b9:3c:6e:75:4f:
                    1e:35:d2:a0:2e:29:7f:2e:28:79:93:43:60:8b:84:
                    b6:51:f4:ac:06:5b:3a:3d:42:d2:f1:9f:42:db:c6:
                    ae:4d:e3:f4:dc:4d:94:15:e5:c9:1f:dc:8c:2c:d1:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:74:4C:F0:56:4E:43:79:F8:6B:40:44:60:26:8D:A0:66:DB:E7
            X509v3 Authority Key Identifier:
                keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:b6:67:92:89:a2:04:74:aa:4f:46:0c:93:72:8e:6b:f5:
         71:0e:8d:9d:83:3a:37:4d:ad:17:36:a3:53:46:36:de:f8:fc:
         79:3f:aa:c3:b3:8c:a6:72:3e:90:05:de:7c:bf:6b:1d:99:a4:
         02:86:5f:6d:6c:bf:72:9a:1c:94:bd:5b:fa:4a:ce:35:30:a4:
         07:58:0f:5c:44:c6:85:28:2b:96:3a:d3:1b:76:43:83:13:33:
         76:41:34:63:63:a6:32:0d:14:eb:ab:cf:aa:dd:31:fd:01:f7:
         79:d2:11:3b:b4:98:3e:cd:05:4c:b0:41:a9:43:68:a5:bc:a4:
         58:49:e1:8b:ee:07:be:be:b0:ad:8d:0d:9e:fd:cf:5c:db:4d:
         64:9f:81:07:3c:78:c6:f5:77:f1:0c:f6:80:3e:1c:00:54:f2:
         95:95:11:54:52:9c:8b:f8:51:04:f9:0f:4f:72:77:80:b4:89:
         07:38:0e:9f:b2:35:09:7d:6b:67:82:70:23:9f:61:bc:ee:a9:
         b2:c4:8b:e7:3e:bb:0a:33:55:ac:05:14:20:b1:51:10:7b:63:
         2a:62:03:4f:4c:d6:47:26:76:c5:55:1e:2d:1f:15:a2:8e:ce:
         0a:0d:9b:59:1a:c9:26:d8:a3:cb:d8:ad:c9:7f:3f:b5:b6:4d:
         ac:48:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----