Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File:                     r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier:          gFzJ+maKNwlr+BxRfAKMtAsqI0SDjCTpCBZZTsqK6Gg=
Subject key identifier:   3E:6B:F6:79:89:2B:E0:24:6A:3E:2A:38:07:01:23:44:5B:42:A8:FB
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer:       /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial:       01962E9926002A9ECF39DDEB5B27A6A1394A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
                          2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: VaHObwuJSUDzPeGgzqqV9DpgKPewBt5IVCFci9q5nG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:26:00:2a:9e:cf:39:dd:eb:5b:27:a6:a1:39:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=3e6bf679892be0246a3e2a38070123445b42a8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:1d:17:b6:76:61:f7:c6:32:f5:3c:ad:9a:
                    45:ec:4e:d0:b1:12:7b:8d:4c:7d:e7:de:0b:77:ad:
                    a7:3d:18:34:61:05:fa:f1:bb:2e:55:1e:98:11:f0:
                    b7:3e:27:f8:2f:8d:4c:93:5a:d8:b6:8f:75:30:37:
                    c6:19:15:75:ba:da:7f:0b:e8:df:e2:43:c7:f0:d1:
                    ba:71:8f:a0:aa:e0:c4:b4:e6:a8:08:14:72:05:bf:
                    1e:f5:5e:30:2c:93:2b:9b:4c:9c:9a:ec:be:d1:6c:
                    bc:9e:ea:3f:68:31:38:7c:31:3a:bd:af:72:03:6c:
                    7a:30:cc:69:c6:7c:45:ea:95:92:37:31:7e:da:6a:
                    85:f3:47:06:1e:a0:9a:fb:66:2d:64:6f:92:eb:60:
                    2a:92:43:1b:25:1f:70:34:1b:aa:43:9b:52:de:31:
                    73:c7:e6:b2:a0:17:64:6f:b5:5c:2e:58:e8:5e:4d:
                    5e:83:4e:7d:e0:6f:f4:0f:ee:29:fb:45:4b:0b:c1:
                    67:18:c8:41:ff:fd:ec:00:b7:7a:83:81:f6:bb:2b:
                    d9:c2:f6:28:0b:c8:e8:c3:d0:18:ff:d0:1b:44:ed:
                    eb:59:4d:0a:67:18:45:75:b2:0b:c9:18:bc:84:29:
                    6d:d9:cc:f3:18:e6:3b:f1:7b:a7:10:c9:43:6e:9d:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:F6:79:89:2B:E0:24:6A:3E:2A:38:07:01:23:44:5B:42:A8:FB
            X509v3 Authority Key Identifier:
                keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:46:01:65:ba:d1:50:3d:57:b2:c6:8b:aa:e8:aa:3b:0c:
         fe:36:b8:9b:2e:3b:b7:94:ef:10:cb:31:41:fd:10:43:58:c6:
         c1:76:ed:33:a1:f6:af:05:cc:0c:b5:7a:8b:a8:a5:65:91:3e:
         2e:28:60:2a:13:22:6c:3e:1f:ef:84:f4:78:2b:bd:40:5e:f9:
         eb:2b:0e:6d:da:e4:a1:29:da:8c:f2:e5:90:45:a8:64:3e:1b:
         21:25:11:bf:71:35:98:2c:14:65:b5:a3:7d:f2:31:6b:87:9a:
         b3:e4:e3:26:1c:71:a5:66:a2:67:d8:ff:5f:3e:23:1c:f5:57:
         36:c3:60:45:b8:4c:32:c4:73:65:b6:cb:70:7d:32:6a:32:4d:
         a2:9f:9a:c1:d9:44:8a:89:2e:7d:00:75:e5:fe:ee:44:b6:83:
         52:fd:37:9a:5e:e0:97:52:b5:b5:51:cb:a0:d7:c8:76:de:d0:
         f9:4a:42:ef:d4:22:19:e9:69:3c:d8:34:85:88:17:50:29:dd:
         23:09:8d:ec:c5:a4:65:96:82:f5:b0:0b:36:f0:19:3b:29:98:
         6a:4e:8b:3f:80:67:ad:c7:78:6a:3f:dc:0a:94:e3:b3:3b:f5:
         3a:fa:1a:f2:1b:df:18:2b:6c:97:db:8f:f9:92:1e:62:8f:be:
         9a:70:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----