Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File:                     p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier:          uCF4lhixs7tDPkDItFzrDV+XhCqMYHXZ/U0De1xbgwM=
Subject key identifier:   2C:62:DE:60:B3:48:5F:C7:B9:FA:04:63:C9:36:D0:2D:03:5C:8D:22
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer:       /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial:       01962F74DD0967277932798E3F6AE167843B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number:          073B
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
                          2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: NwiEdc2uSJ1leZHiWtudzLN6oRO35OHy1yrUuAGwxYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:09:67:27:79:32:79:8e:3f:6a:e1:67:84:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=2c62de60b3485fc7b9fa0463c936d02d035c8d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:8a:14:ca:f3:84:08:72:38:f0:d4:6d:e9:
                    6b:86:6a:1d:fd:70:13:49:bf:43:36:9f:5e:29:a8:
                    c7:0b:62:c9:ea:ba:7a:73:f7:c3:c8:6a:a0:eb:7f:
                    f4:77:f2:88:3d:71:d1:2a:68:1e:76:90:68:71:99:
                    41:9b:9a:ad:80:68:86:c1:cb:8f:7c:d9:e1:1e:7d:
                    a3:0f:08:a6:d4:fc:88:a9:b2:59:4e:b5:f4:1a:7d:
                    f0:07:98:46:1e:fa:91:ab:c6:7d:62:c3:dc:82:53:
                    36:08:ad:fa:82:ac:a6:bf:6a:fa:c5:71:13:43:35:
                    ac:e2:3a:c7:72:83:dc:68:ac:0e:d7:12:08:b4:e5:
                    1c:2d:e9:b2:23:4e:a9:a1:7d:5b:3a:9f:61:98:d3:
                    f5:09:88:d6:36:fe:4e:f7:5f:ef:2e:b3:c0:88:b7:
                    a2:88:03:33:84:a2:13:80:13:ea:e2:91:6d:22:42:
                    61:fb:03:9d:60:ab:5b:18:17:85:e9:61:5b:7a:02:
                    76:d3:3a:70:a6:94:89:60:aa:fe:ee:34:70:14:b1:
                    d5:e0:64:08:75:69:46:8e:5f:36:8e:b6:05:6c:74:
                    d6:be:65:60:0e:ee:0b:a1:41:b8:6e:95:3f:4d:0a:
                    b4:5f:50:f6:42:fd:45:df:db:9c:79:44:ef:f9:50:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:62:DE:60:B3:48:5F:C7:B9:FA:04:63:C9:36:D0:2D:03:5C:8D:22
            X509v3 Authority Key Identifier:
                keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:56:a4:8a:08:85:a7:2e:c6:25:7d:f9:8f:ec:3a:94:10:
         70:26:46:8a:70:91:95:28:67:74:89:20:f0:da:07:24:d1:34:
         41:24:fc:5e:0a:7e:b1:23:d9:62:f6:c1:23:bd:c7:32:4a:ea:
         32:a6:d5:b3:19:4d:10:54:ec:5d:0c:1f:e1:47:ad:2a:57:5b:
         4d:fc:30:a3:45:8d:48:b5:95:5b:26:99:ab:d9:1c:bc:3c:00:
         f1:e7:70:cb:0e:e0:2d:f8:8c:93:32:91:4c:c7:9d:9b:a1:d0:
         a4:bc:48:ff:ea:c9:8e:70:6b:ff:1e:4f:d8:8a:f6:b1:b5:c9:
         e5:b5:00:d8:87:d3:cf:9b:be:d7:11:7d:ae:ef:65:5c:79:59:
         ad:6b:c2:c3:d4:19:67:bd:ac:fb:24:f9:2f:a9:d3:cd:f6:28:
         7d:4f:b4:ac:18:c5:5e:5c:28:ea:c6:5c:51:3c:2d:83:17:c3:
         50:a4:c9:f0:0d:0d:b3:1f:f8:0d:b7:68:dd:13:57:c8:84:a7:
         07:a0:1f:54:e8:df:8f:3c:04:42:76:57:0b:ad:b8:05:ca:a6:
         ea:73:76:d9:3f:e3:51:ea:0f:33:56:71:3e:1c:1b:7c:33:4e:
         a0:5d:a3:e0:e8:61:f6:3b:ef:d1:af:87:c7:1f:05:d9:00:4e:
         5e:84:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----