Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File:                     fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier:          9SpBoMBfNzC01q0dGM9gCx3MwABwXRqE1unWpvG2GyU=
Subject key identifier:   41:97:D4:9C:D4:8D:E9:FA:4B:6E:07:DB:35:B2:C7:3B:66:53:4A:7B
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer:       /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial:       01962E98E8B6ACA819021694694F4E26472B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: kBOvnXrFewkheiNrYm5sq9DJo35SkHpJSftDExcCEcY=)
                          2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:b6:ac:a8:19:02:16:94:69:4f:4e:26:47:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=4197d49cd48de9fa4b6e07db35b2c73b66534a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:9e:c3:22:c4:4a:38:9d:f6:00:32:92:45:
                    3b:eb:4c:f8:b5:73:73:a8:d4:0a:4a:f1:91:f6:ae:
                    8f:74:f4:c0:06:c0:c3:d7:5d:68:3d:76:7c:1d:dc:
                    8d:4d:0a:42:14:06:7c:fb:02:1d:a2:b6:7c:5c:3f:
                    91:16:43:ca:25:5e:15:90:9e:79:5d:ec:3c:b4:64:
                    e0:7d:13:98:82:3e:2e:11:7e:72:88:7e:8f:f0:c0:
                    03:70:9d:ac:99:5e:59:ed:f2:da:5f:fe:0f:37:08:
                    fd:eb:95:77:ee:1f:a5:61:9e:8e:d1:93:e3:a3:32:
                    83:8f:7b:9c:28:87:0a:73:98:f8:a0:a2:a7:ac:4e:
                    38:56:a3:26:d6:7a:8c:64:65:c4:6b:b9:a7:e6:c3:
                    11:b9:9c:6e:ff:24:26:22:ec:f5:21:c6:99:5e:70:
                    19:4a:c9:7c:74:b4:d3:62:0c:7e:46:72:3b:e1:45:
                    cb:0a:d0:01:1c:72:81:7f:bb:14:72:e1:7b:27:ae:
                    78:37:5e:b5:40:88:fa:9e:97:f7:9c:a9:58:ae:f5:
                    34:3f:0d:58:ea:f6:92:18:8e:98:ba:1e:57:e6:c8:
                    fc:a1:16:d9:63:9c:68:6b:f2:c2:a7:92:96:32:fa:
                    a0:ae:f2:29:f3:b4:b9:0e:2d:7f:49:1f:eb:93:cd:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:D4:9C:D4:8D:E9:FA:4B:6E:07:DB:35:B2:C7:3B:66:53:4A:7B
            X509v3 Authority Key Identifier:
                keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:39:7d:3c:a7:20:c6:06:6a:0e:4f:b6:92:80:49:6c:c8:
         a7:c6:f2:db:ee:f6:a7:b5:c2:42:93:c4:e9:c4:ae:1f:34:e7:
         d6:5c:35:51:3e:de:d6:5e:8b:ed:3d:e0:e7:6e:14:77:9f:12:
         9f:f6:39:71:21:8a:85:e0:ae:98:e7:9c:31:b3:2f:42:58:c6:
         1d:0b:ce:f6:bc:93:4f:63:89:f9:cc:d4:8a:4e:85:9d:cb:ac:
         89:41:a5:80:4f:a8:15:16:10:8f:66:d7:e0:76:49:78:de:ca:
         97:2d:fd:d5:a2:69:85:b2:af:e9:73:f8:2e:30:1a:3b:88:f6:
         63:a6:5a:07:7f:46:f5:a4:c3:32:da:aa:56:96:d7:f5:99:e8:
         16:eb:3d:22:7a:cd:50:92:64:32:14:4b:a4:fe:18:0e:56:93:
         2e:89:72:d8:1d:a8:5a:cc:66:5d:fa:bc:a9:c1:5e:da:da:9e:
         ec:d9:4b:e0:52:0a:28:d0:3d:7e:38:75:09:b4:5d:4b:7c:46:
         f9:9f:0d:1a:b3:48:6c:5f:2b:60:8b:67:ee:51:bf:b4:b3:fe:
         59:58:8e:75:17:d9:13:0b:ae:a8:45:e3:b9:19:3c:02:35:34:
         89:8e:bb:5b:4f:7c:49:fb:45:15:02:ae:53:93:2f:44:98:ae:
         d3:de:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----