Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          UpIdNRrFGEa063/TnEbUYxgBbBjc9O2hk2hpJlzj4rQ=
Subject key identifier:   A6:C3:5D:09:75:B0:54:F5:CF:C2:87:9A:C1:39:EC:70:2B:86:B2:92
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       01962F3DA943E2C82FB02D8CA905436FFA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: aqH1N40Bm9GxhAjyHsYROzjk37uLQz5m2+jSZhW1Zok=)
                          2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:43:e2:c8:2f:b0:2d:8c:a9:05:43:6f:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=a6c35d0975b054f5cfc2879ac139ec702b86b292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:db:b3:19:a4:aa:eb:39:35:9a:e8:29:31:
                    8c:9e:b3:ed:54:14:d9:f6:1d:c5:d0:1a:07:cb:c2:
                    74:4b:00:c4:6d:41:39:f9:3f:d9:e0:0d:3f:08:fb:
                    6e:9f:90:86:86:9b:1f:54:56:88:b1:b0:3b:84:9b:
                    55:89:6f:df:89:f7:90:7a:7f:f5:38:f3:83:80:6b:
                    b3:22:d9:c4:da:4e:ac:35:18:42:20:87:cc:9c:58:
                    d8:df:1c:9a:4f:04:e2:76:fd:0d:32:14:53:21:a4:
                    bb:c1:d1:02:c5:33:41:14:57:df:4d:e0:e2:01:36:
                    79:33:13:4f:da:5c:2f:95:a9:00:ab:7e:4a:dc:7c:
                    a6:93:86:08:e7:54:7d:85:23:8a:76:62:da:0a:5b:
                    d7:d8:d1:10:4a:9b:f9:3b:52:f5:83:1e:a9:70:98:
                    fe:06:c6:ee:54:f2:1f:dd:8a:1e:c5:a8:b8:64:16:
                    ee:19:51:5f:ca:a3:8b:8d:a9:ca:bb:09:79:e0:0b:
                    52:52:79:26:e6:c5:a9:9e:26:f2:73:f5:7d:dc:af:
                    66:83:3e:79:5a:75:8e:ff:13:be:ca:d9:36:92:a7:
                    27:45:2c:1d:84:54:24:96:d3:3d:90:cf:31:6e:98:
                    88:7d:e4:9d:9a:e2:63:0b:10:f3:9f:b5:f5:6b:62:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C3:5D:09:75:B0:54:F5:CF:C2:87:9A:C1:39:EC:70:2B:86:B2:92
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e2:72:49:ad:c2:c4:9a:b6:08:d5:33:81:6c:d3:86:b1:12:
         ff:d3:e7:03:b0:88:07:46:91:25:90:93:66:8b:ac:f2:4e:40:
         c5:45:b7:91:2e:fe:59:df:23:94:39:13:99:51:29:e5:09:50:
         7c:a8:bc:dc:17:31:b7:8a:de:44:f1:66:b7:10:88:7c:48:7a:
         a1:87:9e:0d:df:6b:af:03:7c:70:87:ef:e1:4d:45:12:ad:e9:
         24:46:b1:36:ec:93:3a:98:4e:6a:11:99:1d:8d:ce:d2:d1:98:
         75:74:e9:8c:53:c5:03:5b:a5:24:23:d1:90:2a:9a:ff:4a:ea:
         2a:5d:8b:ea:76:64:f4:0c:97:08:22:3d:21:87:37:5b:57:68:
         6b:71:90:79:f9:04:07:a3:42:1a:d1:63:61:ac:e3:6e:4b:f0:
         71:02:ef:e9:f6:14:f8:55:ca:2d:d4:01:fc:6f:b0:57:85:2d:
         e7:7f:60:43:cb:5b:a4:23:cb:3b:31:58:ec:ba:dd:41:5b:71:
         54:2b:21:25:79:ec:be:bc:68:e8:67:89:66:32:d4:e9:d2:e3:
         08:bc:12:93:ff:31:f6:ba:64:53:55:ca:8c:2f:0a:43:57:d6:
         fb:8e:48:2c:13:49:7b:cd:bf:8f:1c:31:c2:5e:f8:88:c9:1b:
         2b:51:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----