Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File:                     7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier:          uzN9vb69typ5byfsoIF8NRIFaLxN3g3ZYGXjutqyyEM=
Subject key identifier:   B5:58:1D:33:FC:12:2D:84:E2:90:46:2A:BB:1C:22:8F:B9:B3:20:03
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer:       /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial:       01962ECF8854252F152705A1718B8D7E55F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number:          0F11
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: vphg5XGR6K/bRKv8DOKmOWnkNXmMD+7ScJPvvn+lwZA=)
                          2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
                          3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:54:25:2f:15:27:05:a1:71:8b:8d:7e:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=b5581d33fc122d84e290462abb1c228fb9b32003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:eb:b9:02:01:b2:91:75:4f:50:2b:bb:46:
                    af:13:91:22:62:cc:1c:1f:5d:4b:55:0a:a9:90:5a:
                    6e:9d:a7:af:51:90:00:e8:5d:8e:80:4b:aa:38:8b:
                    a4:cf:19:95:a5:c2:b3:17:01:e2:4f:01:91:e1:4b:
                    8a:b0:5e:1f:a5:8a:89:50:5c:48:34:44:a2:96:d2:
                    0b:b6:79:51:fc:f4:a3:2d:7f:fa:3d:a4:0e:f3:ac:
                    b2:97:f4:15:8e:56:c2:5e:d3:cf:1e:0b:16:7f:8d:
                    66:c7:55:e8:bd:99:fd:c0:3b:3b:89:5d:ef:01:d6:
                    eb:76:40:1b:6b:dc:28:d2:8c:a6:6e:12:18:ac:d5:
                    83:40:ad:9a:1a:11:3c:31:e7:e3:eb:f6:dc:60:3f:
                    4c:08:09:a8:11:d2:ba:82:af:80:de:13:95:3a:9e:
                    bc:dd:9c:bd:17:5d:25:f2:7f:f8:61:4d:9e:36:38:
                    4a:18:d4:b8:e3:c8:e8:fc:ab:14:64:7a:86:b9:35:
                    da:8e:d3:77:4b:f6:91:f9:4b:86:10:e4:2f:02:21:
                    b9:ef:f4:f3:e5:7b:57:86:b3:69:9a:41:d7:20:e0:
                    ad:ca:4f:97:3a:ba:92:60:5c:c1:61:a6:64:3c:60:
                    a9:6a:63:b0:a6:45:a2:65:f2:45:9c:2e:a3:21:93:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:1D:33:FC:12:2D:84:E2:90:46:2A:BB:1C:22:8F:B9:B3:20:03
            X509v3 Authority Key Identifier:
                keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:35:dd:47:a8:de:58:f6:ea:be:dc:5e:35:3f:bc:30:c1:a2:
         76:02:bf:f7:5e:53:dd:f8:fc:48:5a:43:37:62:1c:71:9b:2a:
         dc:fc:b3:7e:d0:c0:0a:52:47:94:e7:9e:47:d4:96:74:0d:40:
         f0:79:74:24:70:82:3a:7f:bf:97:61:5d:c1:66:91:bb:84:c4:
         f0:87:05:da:3b:28:17:5d:63:35:39:2f:e6:54:ce:9f:40:b4:
         60:cb:81:e8:39:1d:46:8b:a9:f2:44:b3:fe:6e:5c:c7:43:c2:
         df:85:da:29:8b:98:48:da:7d:f0:dc:9f:d3:34:cb:d3:67:43:
         14:08:b9:21:c8:df:e9:47:4a:e4:34:5a:5c:22:33:28:be:41:
         a4:ae:2c:3e:2d:78:bf:a1:b3:9a:61:73:ab:75:16:26:0c:09:
         e8:5f:78:cc:e7:4e:58:9a:bc:f7:f8:a4:f0:02:98:9d:09:cf:
         6d:78:16:c8:58:3b:f4:88:2f:65:30:f8:01:7a:10:0b:6b:6c:
         56:e9:a5:52:3a:31:74:2b:a3:c6:2f:a8:dd:c1:d3:cf:59:f1:
         09:a7:9a:d0:0e:db:90:61:0a:b5:72:41:df:e5:c5:47:a7:3c:
         13:c3:88:a7:95:4b:5b:13:b0:32:ed:7b:90:98:a8:48:13:7d:
         14:97:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----