Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File:                     egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier:          DOAeOSxPbPeLWY/rbWkHhUkg1mDVeRi4hi/fGYtH0ro=
Subject key identifier:   C5:AC:18:49:EE:68:29:49:81:A7:F4:97:B8:69:F1:C6:57:60:28:8B
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       01962F74A6D36AB659342FD6E0438C7A512A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
                          2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
                          3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: HZaCtMXzAvvaN2mPTlzbM3nvSOdX4NVXU6XFBIHMKOA=)
                          4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a6:d3:6a:b6:59:34:2f:d6:e0:43:8c:7a:51:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=c5ac1849ee68294981a7f497b869f1c65760288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:d9:59:40:7f:2a:b0:d5:4a:04:d5:16:4e:
                    18:20:bd:7d:df:50:1b:a1:01:72:4b:80:e1:b0:49:
                    d6:68:c1:89:f5:0c:fb:80:fa:97:53:ca:b5:72:b3:
                    42:6c:21:29:b1:53:92:72:0e:88:94:8e:56:2d:c3:
                    f1:e5:ab:77:3c:b5:80:7d:9d:11:81:84:76:82:c4:
                    04:ac:bb:c5:c4:d5:ff:e4:f9:55:0e:b7:32:9d:d6:
                    0b:14:93:f8:75:ea:bc:5a:67:a5:ff:80:f2:a4:da:
                    07:0b:54:b1:e3:3b:48:4b:78:f2:a0:2c:27:f1:7e:
                    dc:86:55:7b:c0:8a:9c:f5:bd:ab:64:52:1a:a1:8e:
                    1a:0b:99:fd:bf:ad:35:3b:b9:c0:c1:99:a0:32:b2:
                    42:5b:76:c9:99:44:34:01:4c:9e:5f:ca:6c:b0:06:
                    1d:07:21:81:4a:78:b4:f1:b4:f9:80:c6:4d:a2:d0:
                    de:de:59:7b:4d:2f:f5:84:b0:b3:02:62:7d:64:e3:
                    ae:82:14:4d:32:f0:0e:f0:ba:8c:f2:32:de:4d:cf:
                    e4:ba:d6:a0:d9:ad:a3:a5:a1:0d:5d:c3:18:61:07:
                    99:f8:b1:aa:c3:ac:8b:5e:e8:bb:94:6f:ab:b0:f7:
                    7b:ed:6c:8c:b9:f0:c5:78:b1:a3:b3:42:82:34:13:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:18:49:EE:68:29:49:81:A7:F4:97:B8:69:F1:C6:57:60:28:8B
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:26:a7:fa:fd:08:e0:5f:0c:02:f1:06:4c:b1:7f:60:96:
         d5:7d:53:73:61:1e:79:c2:38:a4:75:f2:1b:e4:a7:7c:62:6a:
         82:12:e4:99:f8:bd:3e:57:f9:de:b9:3c:d0:5b:39:31:a1:c4:
         67:1d:b5:af:c7:25:6c:43:4d:ea:87:e7:68:53:39:91:16:20:
         85:8d:a4:61:a9:04:fb:e5:0a:16:c7:05:49:f5:9d:54:6b:53:
         d5:86:09:b4:17:47:30:01:25:9f:f9:49:2c:09:01:e5:4f:88:
         eb:9f:ef:cd:d1:05:cb:4b:b1:74:ff:0a:e6:21:08:74:1f:57:
         e2:30:52:8a:f9:f7:1a:7d:c4:ef:dd:f2:89:33:da:01:12:fe:
         40:41:c9:8b:f0:1c:60:34:06:70:99:98:49:69:b1:51:1e:4e:
         00:e7:c8:23:95:0b:f7:e1:e6:70:3a:64:54:0e:50:29:ae:fc:
         3b:b7:06:17:30:c0:ee:a9:ba:59:c5:c9:3f:ea:1a:a4:16:f9:
         fd:9f:5a:f6:16:6c:38:7c:98:ab:40:e2:29:5e:93:56:4d:23:
         a7:f5:85:04:c6:d5:73:eb:c3:28:21:dc:38:ae:0b:9a:a5:af:
         eb:a1:ef:c5:00:11:a1:ba:9b:64:8c:11:ad:a5:05:5c:f0:2a:
         ff:e6:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----