Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File:                     cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier:          hZJ/wygpqCxy6h/SrGcA5hueSKWqBb7PXl0L81kVlHw=
Subject key identifier:   7F:FB:14:1F:A6:85:65:BC:B2:D8:47:66:A8:71:FE:0D:CC:47:F5:1C
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer:       /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial:       01962ECFA43A4255B5EEDA92E713C1B4C1F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number:          0DB0
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
                          2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: 7k7zOq5lFFkLF69vRNLGERnoknmATGx9F9psnjEzNtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:3a:42:55:b5:ee:da:92:e7:13:c1:b4:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=7ffb141fa68565bcb2d84766a871fe0dcc47f51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:6d:d1:2e:52:d5:16:ca:62:9a:03:d4:f0:
                    92:2a:15:aa:95:16:ea:84:02:b4:29:4d:f2:f9:b1:
                    8b:47:b2:79:84:d5:51:bc:fe:9b:8d:c2:73:e1:37:
                    ee:01:e8:3d:74:12:b9:42:09:b0:21:d1:ac:cc:e8:
                    4f:4e:5d:67:71:18:4b:3c:0e:a0:f9:9a:af:72:f8:
                    ea:54:d8:06:56:d0:fe:e5:ff:64:c8:fd:19:31:ee:
                    d0:89:7e:89:e9:4c:f8:2a:9f:d2:92:64:51:94:ae:
                    5e:7d:8a:53:0e:e3:b9:97:43:d6:d3:43:e8:a8:1f:
                    9b:be:35:6c:d4:e5:04:b5:fa:50:ee:84:3a:58:a9:
                    a5:00:39:6b:79:67:04:01:99:92:08:a1:ab:04:55:
                    1f:f5:a2:6b:b5:5b:6c:2e:88:93:b6:66:f0:da:67:
                    c8:19:a3:15:e3:b4:c5:71:59:d9:9f:9f:ca:0b:a1:
                    f6:62:b8:05:6f:9d:2c:54:05:79:ce:e7:4f:6f:12:
                    88:62:ef:a6:35:6b:8f:ce:6c:e0:56:b7:0c:55:48:
                    21:fd:60:9e:cf:02:e2:21:3d:e6:f6:b4:aa:b9:d6:
                    14:9c:6b:76:08:88:ab:f0:b1:0d:e7:97:65:16:59:
                    63:39:6d:8d:49:81:5e:33:3c:9c:e3:60:33:f0:65:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FB:14:1F:A6:85:65:BC:B2:D8:47:66:A8:71:FE:0D:CC:47:F5:1C
            X509v3 Authority Key Identifier:
                keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:47:db:48:a8:2c:e0:91:0c:0a:19:15:86:fc:78:f7:c8:09:
         b2:69:79:b3:45:cd:a9:ea:31:4c:d0:c2:fa:86:15:0f:b3:ef:
         34:70:b2:36:b7:c2:37:b6:8a:ba:51:7f:a3:cd:64:2a:a1:7f:
         00:46:1d:95:9d:a0:dc:e6:ac:93:f4:60:23:2f:82:83:5b:73:
         5a:81:f4:98:c4:86:4c:72:07:b4:7e:0c:af:9b:b1:ee:32:03:
         d9:13:24:52:75:9a:a5:dd:74:69:3e:b7:24:aa:de:5d:fa:18:
         19:6b:a7:d2:ec:8a:0e:de:5f:46:ac:e5:7c:60:c1:86:4e:96:
         e1:b1:af:33:a6:5a:02:bb:78:32:03:79:68:00:07:05:41:15:
         94:0d:68:ab:18:df:ba:16:a0:d2:db:ae:04:91:79:0e:6f:4e:
         45:2a:5d:c6:fa:d1:90:81:47:57:63:12:05:c7:64:f6:08:ae:
         19:9f:c9:75:3c:f9:99:0d:c6:a6:93:12:dd:87:9c:d8:60:de:
         17:73:2a:cd:d2:e3:c1:e3:20:8d:0e:af:06:f3:61:38:28:4e:
         94:69:c9:06:5b:5b:39:2b:fa:8d:38:68:0d:c4:6a:a1:96:89:
         fd:35:0b:3b:99:11:82:7f:a9:8b:40:cb:26:48:84:92:ff:84:
         90:e9:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----