Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File:                     7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier:          AAzSuyysTmoHvdNG1c6tZUyyzVnoRjAb7P5mlbCtvLQ=
Subject key identifier:   80:48:BB:1D:34:BC:C9:61:71:CD:1F:53:A4:72:9C:CF:BF:6F:8B:9B
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer:       /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial:       01962F3D464336B165FB5DE9B51A2B34BE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: l0vUN8pSGF1qQ8T/F/IAZZzIMpaiNkQVn4QIN5S6o00=)
                          2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:43:36:b1:65:fb:5d:e9:b5:1a:2b:34:be:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=8048bb1d34bcc96171cd1f53a4729ccfbf6f8b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:27:c2:55:7b:1b:75:7b:e1:6a:64:84:3d:
                    7a:fb:52:0e:bc:27:2e:06:0c:8c:3e:0b:85:e9:97:
                    da:16:df:db:a3:8a:85:7e:8f:df:47:5f:af:e0:1e:
                    d1:ac:ea:73:22:bc:be:80:68:c8:79:78:c7:47:58:
                    6b:4e:2a:fe:30:93:e9:02:5c:91:27:80:e6:a0:b1:
                    f9:24:4e:7a:5c:5c:31:54:40:cd:90:80:12:bb:fc:
                    8e:e7:ea:c1:79:98:91:28:8d:34:e8:11:bc:c6:16:
                    9b:84:43:4a:94:c3:63:a5:3d:a7:ef:98:b3:88:6f:
                    a6:fe:27:72:40:3e:a9:16:77:f4:4b:50:03:ed:b9:
                    72:61:7a:a5:3c:ce:74:fa:74:64:bd:65:0f:ae:ac:
                    69:13:54:de:a3:b6:f9:48:ba:a7:7f:5a:37:d1:bf:
                    7a:f8:8e:26:36:41:1d:fd:7f:b5:05:c7:7a:07:f3:
                    75:e9:34:c1:01:e9:06:66:b4:dc:20:48:58:27:13:
                    40:46:2e:94:76:87:4f:1c:02:00:d2:9d:aa:67:b1:
                    27:88:2d:f7:a9:c5:65:a7:32:44:ec:89:e1:b3:2d:
                    2d:ca:56:37:dc:28:7e:ee:bc:73:8f:c2:e1:00:9f:
                    d6:29:e9:a6:d8:0a:3a:92:ba:32:0c:23:64:87:c7:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:BB:1D:34:BC:C9:61:71:CD:1F:53:A4:72:9C:CF:BF:6F:8B:9B
            X509v3 Authority Key Identifier:
                keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bf:86:3a:68:a6:bf:98:3c:7e:da:be:fa:1c:c4:97:20:0a:
         6e:af:24:e3:07:d2:a7:ce:9d:25:d0:f3:fa:d5:9e:f6:55:d4:
         d1:00:ae:ad:88:19:62:b6:8f:df:0b:f8:ba:6c:60:a5:09:a6:
         81:1e:05:3a:dd:f6:ab:f9:84:1c:60:ae:0d:1d:23:a2:9c:5a:
         96:8c:17:53:9a:f8:f2:eb:93:13:66:97:3b:91:62:f9:7d:14:
         6d:00:45:28:54:92:c1:b1:79:6a:35:dc:26:d7:ed:18:f1:31:
         8f:36:cb:11:a8:07:12:39:1b:9c:37:e0:d7:ab:a9:22:0c:a1:
         d1:85:9c:2e:5f:00:4f:e0:df:7a:41:d7:46:5b:1f:21:1e:af:
         88:33:98:ae:6b:29:12:fb:3f:63:be:da:a0:c0:43:f3:0a:46:
         bc:45:9c:9f:dd:e5:ad:56:a1:84:f6:40:29:45:01:6d:b0:6a:
         d2:40:84:e3:8a:fb:9e:e1:34:8f:f7:9d:8e:8d:a0:8f:2a:50:
         b9:56:8c:f8:86:83:97:dc:84:f8:ea:2d:97:a3:3b:98:e2:ab:
         ee:8f:9f:ea:bf:5c:d1:cb:2b:8e:28:de:8f:94:5e:ba:7c:af:
         75:67:3f:82:3a:85:51:cb:af:78:ad:16:aa:de:38:6b:ea:c7:
         b3:0d:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----