Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File:                     7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier:          ETLlmlFFC7BHBxOR63fgQ/jLL4W2cveclz+kBydjiBM=
Subject key identifier:   CA:81:52:93:D6:7D:87:71:4E:22:FF:F3:6E:3E:D4:E4:01:FE:47:69
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer:       /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial:       01962F74BD489F43B1BB3A41CE31283CE2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number:          0D50
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: UC+C+YZmfS8mShcNLgnATP7l0/CmrvIOQIOgWlOYQEU=)
                          2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:48:9f:43:b1:bb:3a:41:ce:31:28:3c:e2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=ca815293d67d87714e22fff36e3ed4e401fe4769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:5a:2b:12:d4:ac:12:a8:9e:41:29:58:03:
                    4b:b7:c2:97:d1:58:76:78:43:64:15:38:79:54:9b:
                    37:6a:02:ed:08:36:16:be:b0:2a:aa:63:fa:3b:92:
                    6f:2e:e7:bb:60:61:43:6d:1c:07:eb:ea:57:d1:c5:
                    96:e4:90:57:b9:f7:ba:69:fd:f0:a0:d1:1f:1e:2f:
                    35:e8:81:d1:0f:52:55:30:f5:f7:8b:82:86:01:50:
                    25:d9:8f:63:a7:40:1e:6f:e5:12:11:d7:99:86:57:
                    46:9b:2f:1d:45:53:78:ca:5f:38:d2:c9:83:2c:94:
                    6c:e6:a0:34:4a:17:68:6b:7c:14:8d:d7:04:dd:d9:
                    23:2a:be:d3:6f:87:ac:19:16:05:13:85:73:b5:f0:
                    a6:1d:2b:00:b0:f3:27:77:db:0a:33:71:8f:5b:f7:
                    6b:15:6e:76:3d:15:50:7d:3b:5a:6d:df:80:16:66:
                    55:b1:44:39:bf:3f:7c:b9:6c:f7:04:ad:d2:ef:91:
                    1e:ad:81:c5:e8:b1:62:67:57:53:a7:70:af:01:56:
                    2a:06:71:eb:72:2e:47:c3:b2:15:0f:67:35:a7:e5:
                    40:85:60:d5:9a:2c:b1:3f:88:2d:a0:40:ee:cc:51:
                    d3:37:6c:68:ac:c2:2f:db:8e:84:03:82:bf:f1:83:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:52:93:D6:7D:87:71:4E:22:FF:F3:6E:3E:D4:E4:01:FE:47:69
            X509v3 Authority Key Identifier:
                keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:bd:61:98:5f:24:a6:68:f5:42:42:07:bc:d0:60:22:91:
         8b:83:f3:26:43:cb:31:45:f3:38:10:e4:27:ab:f3:0e:53:31:
         23:7e:ad:83:b1:2b:05:9b:71:a8:41:3f:ca:6f:a1:ac:08:a3:
         01:b5:37:84:06:50:2c:35:54:fd:e3:3d:88:97:f6:a1:0a:50:
         bf:16:cd:5c:52:da:6f:c3:70:97:42:ee:1c:1a:d7:99:aa:c0:
         88:7d:22:fc:90:b3:3e:8f:de:4a:86:85:99:93:cb:a1:c0:93:
         94:a3:67:b2:49:46:4d:98:69:18:3c:50:a0:96:a4:a5:2f:01:
         d6:4c:69:28:dd:13:08:f7:c1:9d:50:50:76:4f:b1:35:da:23:
         a1:61:a8:4f:85:79:21:c5:ec:c6:3e:a4:d7:03:85:84:81:bc:
         75:3e:73:81:53:76:50:32:f7:8c:1c:c1:60:ec:05:59:83:65:
         8a:f2:0d:91:3b:33:f9:71:71:40:20:7f:db:ee:aa:6b:44:23:
         f6:6a:4a:9c:e6:82:52:97:28:fd:01:32:9a:68:b2:12:57:bb:
         c2:fa:67:86:83:f8:2e:68:03:69:6c:63:be:3d:c9:22:3f:0d:
         c3:c4:fd:e1:18:26:c0:c7:14:23:88:51:6b:4b:6f:15:5c:f2:
         ea:1f:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----