Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File:                     7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier:          Iw55n25sCgoM6R5UE1i7EaB3FL4pt66sv5RwzeebXhQ=
Subject key identifier:   64:8D:F1:A0:A7:4E:27:72:FD:3A:32:76:F1:F2:DD:6E:C7:40:FC:6C
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer:       /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial:       01962DF4330C627519580F77A9A3BA1AC594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number:          C6
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: lBSI8xq2ouGdWZGAq51BiTlA5Y316Q7CI5HSGZFN8wo=)
                          2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:33:0c:62:75:19:58:0f:77:a9:a3:ba:1a:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=648df1a0a74e2772fd3a3276f1f2dd6ec740fc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:25:07:22:f3:7e:21:64:9f:ce:a5:cc:c3:
                    0b:b0:fe:bb:36:46:3a:6a:d5:f5:4f:4c:f5:7c:aa:
                    13:1c:2a:48:ae:9f:84:86:4b:ca:a6:91:a4:dc:8c:
                    39:9d:43:50:3b:38:47:1d:e8:c3:b7:b4:d9:56:22:
                    b5:0b:9f:dc:54:de:24:f3:23:6d:22:ee:e6:eb:fc:
                    22:d7:2b:4b:b5:15:d4:8e:39:42:8a:44:28:36:db:
                    98:da:79:56:86:01:3e:dc:b9:1f:5a:52:07:a5:77:
                    30:76:fc:24:e8:cb:8d:81:27:e8:45:51:2b:d1:69:
                    3f:01:67:a4:d3:72:ff:68:32:a2:83:d6:09:3b:fc:
                    e4:f4:d5:89:8c:8f:97:6f:99:bd:0d:ac:c4:68:9e:
                    4d:92:49:9a:65:ae:52:ae:46:b1:17:f4:bf:25:9a:
                    58:84:99:8b:85:84:70:22:19:68:04:2f:12:3b:d0:
                    0d:b3:a2:ec:d0:a4:5e:cc:2e:ce:d1:1d:fd:b3:58:
                    d2:1f:e1:e1:88:09:71:97:cc:09:a5:09:60:bb:a7:
                    e1:9a:c3:5e:b6:a5:4e:a1:54:ee:8c:db:80:2d:bb:
                    e3:2b:7c:6d:c8:5c:e6:b6:e0:2c:76:62:27:ee:55:
                    0b:2d:bb:f8:05:57:c8:29:94:34:14:82:16:19:ac:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:F1:A0:A7:4E:27:72:FD:3A:32:76:F1:F2:DD:6E:C7:40:FC:6C
            X509v3 Authority Key Identifier:
                keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:0a:4f:51:b3:2b:d6:20:62:8f:7c:07:fd:b8:a6:ea:83:
         17:2e:b7:7d:b2:62:25:8f:70:15:1a:37:b0:a9:a0:91:d8:c5:
         fc:62:d2:72:e1:5b:89:a3:7f:d6:6e:64:96:78:d6:d9:17:09:
         7c:ac:b9:75:e1:67:d3:d4:39:ad:79:07:44:ed:ef:28:14:8c:
         a2:ee:dc:bf:27:98:cc:32:d6:eb:bd:96:bc:76:57:ee:86:eb:
         1a:6b:6b:36:d7:17:33:b2:00:2b:db:ad:0d:30:76:ea:21:b0:
         eb:c2:60:59:fd:bc:e0:6e:ff:19:fc:45:1c:a5:94:04:5b:ca:
         8a:cb:0b:94:c2:21:d9:b9:4a:b3:b4:78:5a:0b:ae:c2:9f:29:
         e8:56:ae:42:1b:b0:8b:5f:59:83:18:6c:90:21:d4:2f:3a:25:
         45:0d:8e:1a:c6:8a:72:26:59:d2:ee:5c:33:a1:2d:61:97:14:
         ca:4e:53:d2:aa:59:23:9b:2c:33:20:84:9a:7d:e2:99:25:e9:
         92:05:03:82:b2:d6:1d:49:8e:95:f1:03:85:07:f8:5e:a6:09:
         cd:e0:cb:90:bc:95:4e:63:2d:09:e1:4a:de:8d:5d:b8:39:5f:
         1f:bb:09:b0:f7:81:15:fa:bb:98:e7:94:c7:aa:ff:c9:04:83:
         af:3f:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----