Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          Hznd8X2BsiGF1oWks0F3Qq+ALOnrZ5dysDoZGviHR5Q=
Subject key identifier:   26:21:C8:A4:B1:5C:25:F7:B0:58:D7:85:92:38:0C:15:A6:E3:42:8B
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       01962E990F5A4D5C214170B9E7C2B31C0E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          0F48
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: g9EGY6d5KDE/IXjmCDrJJFIEL0IRadwxHiypJUzIJOA=)
                          2: F1syaj2slElK5y18q2bJFyk_Xt4.roa (hash: 0cchVuYo1uzzUlT1evGpupW2C9gukJ9GqtBWuAJKa5E=)
                          3: S9qORFlVihRXgXPTMQZutfjwKHE.roa (hash: vsbhWoTnzrB7AOoQuujS+OxmDvP0R8xrr9NkNJFez7M=)
                          4: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (hash: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=)
                          5: eh6k6EDW67F1BaMz22DQsW1dFis.roa (hash: IQTOzLLAJV1/nAGCPNSZ0w+xeltOMYm8kA0XXPxhjRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:5a:4d:5c:21:41:70:b9:e7:c2:b3:1c:0e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=2621c8a4b15c25f7b058d78592380c15a6e3428b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:f8:6c:b1:0c:ea:67:32:37:bc:96:67:ee:
                    53:65:d6:31:c5:0d:86:bb:76:91:38:d1:d3:50:7b:
                    12:f6:d3:fd:c6:40:67:64:27:aa:3c:ee:ee:ff:96:
                    3c:d9:91:5f:33:f2:d5:9c:43:02:a9:7f:6d:76:4f:
                    ad:e2:a5:71:2f:d4:d2:94:8a:ea:ac:29:33:81:aa:
                    1a:36:0b:0d:32:bc:9f:89:6a:84:67:fa:bb:3f:ae:
                    68:9e:12:d2:97:ab:ce:4e:94:c9:01:21:85:88:1e:
                    bb:00:e0:f2:08:a8:dd:ba:f7:42:0a:18:b6:24:8e:
                    fe:f4:33:61:a7:66:e9:c9:6f:da:00:4e:28:23:b0:
                    d6:a6:0e:4b:0d:d7:1b:d3:5c:f3:b0:6a:99:9b:d9:
                    02:6f:82:e0:3c:e7:1c:e8:28:8f:e8:3c:f1:da:fb:
                    dd:79:7e:78:35:83:ab:a5:58:1a:15:e1:05:47:d4:
                    e0:bf:86:a8:91:39:a7:82:25:80:47:9b:b7:62:7e:
                    29:d1:22:3f:e0:63:1e:a2:c5:9d:74:a2:fa:71:38:
                    ce:00:c0:76:85:9e:ca:bc:32:b6:1d:21:38:c3:e5:
                    f7:44:d9:f2:5f:1e:64:d0:2f:f3:f9:84:5d:57:cb:
                    e3:75:de:12:8a:22:0a:63:7e:7a:c8:3d:9b:6d:0c:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:C8:A4:B1:5C:25:F7:B0:58:D7:85:92:38:0C:15:A6:E3:42:8B
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:3e:6b:84:bc:be:ec:60:03:64:a2:c5:af:59:fd:a6:dd:
         c5:5e:f1:75:f6:b0:7a:7b:7a:2d:07:08:d4:63:9e:c6:79:fe:
         58:44:3e:98:ca:3c:16:ab:84:b3:ca:28:13:af:7e:19:29:d3:
         65:69:ff:93:1a:dc:9b:05:bd:15:2f:44:69:01:74:76:01:b4:
         ef:4c:5c:d8:21:7a:3f:d0:da:a4:db:f5:06:05:b9:b2:67:bb:
         e3:c9:7d:2d:95:0d:8f:76:cf:0a:40:02:eb:ea:0e:cf:e6:64:
         92:35:7a:99:3d:dc:ed:e7:b9:54:71:c9:f7:17:90:db:3b:b6:
         22:64:9a:7a:e1:5d:c4:50:71:44:e2:93:0e:f5:f3:43:96:53:
         32:23:4f:ee:c1:69:23:c2:cf:43:dc:0c:d6:27:e4:7f:f6:ba:
         73:1c:b8:cf:53:55:86:3f:6c:6a:a7:8c:e0:94:2c:2b:c2:ba:
         5b:86:7f:e3:f1:9b:78:83:b2:30:41:a1:4e:49:f8:b0:a5:ae:
         ee:93:a7:65:a0:ce:52:a9:ba:3e:00:14:ca:09:6f:20:68:7b:
         c7:a1:6d:26:fa:44:37:d1:0e:bb:d2:ae:86:32:38:1a:db:67:
         cc:45:de:0a:a5:e5:35:0d:ae:4a:e7:b2:de:11:4f:e8:9e:e7:
         b2:2c:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----