Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File:                     x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier:          E29H3hevmU8Knuw8VJv8lgl+patagnFCU1kih1s7gJs=
Subject key identifier:   AF:C8:7A:64:67:83:B2:67:26:DF:F3:BD:D0:60:CE:54:56:97:E8:6C
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer:       /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial:       01962F74ADF69BA9863002323EF85345BB39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
                          2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
                          3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
                          4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: R7aeqLCvvo4kUHjV138ZI6SNJxUIirJ8rqZJK/SuF+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ad:f6:9b:a9:86:30:02:32:3e:f8:53:45:bb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=afc87a646783b26726dff3bdd060ce545697e86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:90:b1:d7:9c:97:b6:2d:a1:9a:a2:db:a9:
                    3e:9f:de:77:83:8b:39:af:4e:6b:f9:bd:a1:4f:41:
                    b0:c4:d5:98:77:81:b1:0d:f9:ff:f0:cf:07:5b:3d:
                    f7:7e:46:22:53:fc:8b:ec:2e:bb:37:ff:92:e9:9a:
                    39:b2:79:3f:42:88:d8:8c:fa:71:ef:f2:de:fe:a6:
                    5b:26:cd:d1:9f:18:33:8b:1f:ee:8e:60:0d:ed:29:
                    5d:b1:74:2d:26:a2:79:b6:49:ed:0f:c3:a0:fa:51:
                    65:9c:ba:30:16:76:90:0d:e7:7e:f9:f3:33:5c:4e:
                    e4:c5:4e:02:c2:87:85:25:1d:91:3e:f1:c9:21:8c:
                    3d:e2:8a:1c:32:7b:b8:37:cc:12:d3:78:0a:b3:c3:
                    ff:37:75:ed:df:b9:80:87:63:87:e0:a9:40:82:dc:
                    8f:b0:90:08:b2:89:af:85:9b:f7:51:21:92:c7:06:
                    39:3f:15:78:54:aa:c3:37:12:20:6d:2a:1e:d2:d2:
                    ab:d2:5d:b0:af:c9:72:41:cb:fa:80:e0:1d:77:2a:
                    f5:9b:b6:a7:10:17:03:56:da:8a:1e:8c:50:34:bc:
                    f0:c2:d7:8d:cd:73:ef:f6:4c:e2:6e:09:f8:b3:50:
                    6d:4e:4c:fc:6b:fd:8c:cb:1f:43:6d:fd:55:b4:03:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:7A:64:67:83:B2:67:26:DF:F3:BD:D0:60:CE:54:56:97:E8:6C
            X509v3 Authority Key Identifier:
                keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:a0:05:30:43:01:40:0f:02:a1:98:3e:3b:39:63:0f:24:
         06:77:53:0f:6c:47:b5:72:bc:3d:ff:cc:3e:5f:e5:ec:71:53:
         ff:28:e3:dc:d0:e4:f0:d9:56:61:98:d8:14:12:09:9b:d7:25:
         18:ae:f1:63:78:f2:44:6f:1e:2b:34:43:a2:d0:24:c0:15:46:
         3f:ee:a0:cb:0f:c6:f7:64:20:16:0a:d6:a3:ba:4a:2f:18:e9:
         30:eb:13:3b:a9:ba:63:c5:d2:f6:7c:a4:86:29:3b:66:91:f6:
         1b:f0:3f:8a:12:de:30:3e:36:a7:2e:41:5d:d4:34:bb:df:f2:
         3d:cc:b7:37:57:2c:ec:c3:e9:4b:af:0a:b2:4f:60:c7:9d:1d:
         e1:d2:fd:f1:6c:be:31:63:75:21:e4:72:ce:5a:cd:ef:2c:3a:
         f8:51:b3:98:a3:05:25:37:82:b0:03:79:d5:75:ae:b3:ac:16:
         64:14:ed:1b:76:43:1b:ff:16:38:35:39:bc:43:25:99:45:9b:
         fa:51:40:80:3c:7b:a2:1e:86:36:b7:7e:e6:0a:2d:27:25:a4:
         62:6e:f1:74:2c:e7:fe:c9:8c:50:20:d9:69:a9:16:e9:4f:ec:
         60:50:fb:9b:7a:9e:58:ed:8c:55:f8:00:35:53:5f:38:54:5d:
         4b:68:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----