Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          EH0Gr+2hg+alt3u/sFBEkBgLks0lrtRVTvIXVbtbSB4=
Subject key identifier:   1C:92:C9:DD:04:52:BC:C5:0E:D4:74:32:34:D2:A0:3C:AF:D0:08:0E
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       01962FAB9BB1726529A3B7D020F86CE65241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0502
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 0Mvhcy66vg_hQj0H0BjuRhN8AEw.roa (hash: rLSJr6X2QsQeqUnzUxdyly3b6MStAcI5bnu/3/yjEXo=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: MEXjg3sr8qmvFMPzsz4hU3IdnEBhIxkbN7DTMo4HrXI=)
                          3: K-BqbESSRx3Yj4firy2GiSJYedk.roa (hash: ztU8/cjCw1EzlWd4zVd+Pf6WeSXNXfqcpp3+tX5nZDE=)
                          4: fRQm9txJEG9J9ZmTTymAf6TeYIA.roa (hash: w+UnfOFY87SloUZFNx3EhChlSsZ+Do6/267GREfdW2g=)
                          5: icJdEYHRoQ8a2HsX6tAswYTYm1I.roa (hash: yVJLCj9xlz6tDxLUrnxZtc8J67boCW3htMxhNuv+eUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9b:b1:72:65:29:a3:b7:d0:20:f8:6c:e6:52:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=1c92c9dd0452bcc50ed4743234d2a03cafd0080e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:5a:69:be:b2:a0:b9:f1:7b:0f:6a:31:65:
                    f1:3a:da:c6:4f:97:2f:1f:82:79:12:5b:5a:06:01:
                    e0:56:af:ed:a5:c1:ae:a5:72:38:b5:ba:14:8f:4c:
                    b9:88:0f:2e:d3:ac:31:e2:8d:45:fd:ee:ec:35:16:
                    5b:65:75:77:e7:2a:32:fe:01:59:e4:e0:b6:5e:5b:
                    10:2c:be:ec:87:54:10:3e:d2:fb:45:ba:84:e7:b7:
                    b6:f9:10:6c:41:2e:49:00:df:26:8d:d5:85:9e:a9:
                    53:27:78:32:58:55:bf:f2:09:df:6b:12:0f:b1:4f:
                    14:44:5c:c2:27:ab:7b:fd:94:90:cd:c2:a9:ec:88:
                    bf:ef:d6:e9:08:c8:5e:08:22:12:86:90:ef:56:20:
                    41:94:ae:32:62:a5:a4:e0:37:4c:10:a3:f8:b8:50:
                    a4:3e:13:74:0b:df:6f:e3:97:85:06:ac:d6:de:f2:
                    14:38:f2:07:78:b9:1a:25:10:0c:da:e2:90:f0:12:
                    8c:1c:26:1b:c6:71:2f:fc:b2:50:cb:42:2b:46:e9:
                    3a:30:2d:4d:4c:33:e1:f6:28:e9:91:70:60:a9:35:
                    d3:10:01:cc:92:ec:ef:c9:ae:bb:77:5f:d0:c0:18:
                    08:94:81:08:ea:ed:b2:25:50:6a:6e:a1:1b:44:29:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:92:C9:DD:04:52:BC:C5:0E:D4:74:32:34:D2:A0:3C:AF:D0:08:0E
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:10:83:40:67:5e:39:da:eb:8f:2d:de:46:42:1a:11:c6:
         dc:e6:b0:36:fe:e4:7f:61:77:3b:95:28:50:ac:d2:51:1a:96:
         b7:63:ae:cd:42:50:94:e1:6f:10:fd:e3:21:66:ba:fb:cf:d1:
         ec:30:9a:0a:34:dd:fa:28:00:3d:a3:cc:7e:8d:65:2e:f8:94:
         13:70:0e:7c:ca:83:e1:3d:2c:63:2d:96:20:c5:bb:8e:0d:ce:
         75:ff:d0:c8:33:47:57:17:b2:ed:e6:be:6b:9b:0d:41:d7:de:
         61:ab:7c:7a:89:1d:75:18:0b:8b:50:4f:10:60:bf:57:6a:83:
         84:af:b6:6b:fe:1d:b5:cf:f7:0a:90:cc:d7:73:ea:ea:2e:0b:
         4f:2c:86:da:41:78:bf:8d:e6:a1:39:32:ba:ed:f5:87:5a:c5:
         ac:0b:9b:f0:5d:0e:96:9a:1a:de:f2:f6:ef:ee:9a:0e:9d:77:
         42:ca:53:5a:da:83:94:0d:15:96:4a:e7:37:96:13:a0:78:e6:
         42:86:21:2c:ea:75:d1:75:85:5e:33:b6:4e:00:4a:56:8a:2b:
         a5:ed:6d:be:29:c3:b4:6f:d7:11:bf:bd:24:39:f0:1b:23:72:
         04:e6:d7:e1:2e:24:ce:5f:fd:41:41:ae:b5:5f:b2:ee:69:ca:
         8e:18:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----