Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File:                     7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier:          kfMtq1V8XXTdFPbvvQrwcOtQ/2tjGF5rGDoHp6Wq9xI=
Subject key identifier:   C3:79:1C:20:A5:29:3D:63:16:15:A9:E6:5F:00:CB:3C:02:07:9D:F0
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer:       /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial:       01962E61BE6DFCADABF64700A354F8B1B4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
                          2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: 5SW6G4ndWOcF8gbWIlte3MCPA5O5w04U/gqKn48sg8M=)
                          3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:6d:fc:ad:ab:f6:47:00:a3:54:f8:b1:b4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=c3791c20a5293d631615a9e65f00cb3c02079df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:bb:d5:83:b0:df:a2:19:d5:1f:f6:63:53:
                    5a:f1:04:e4:aa:ed:28:aa:76:0a:c5:93:f4:18:4e:
                    0b:c0:aa:80:f4:86:32:31:d4:5c:e9:8d:0a:90:44:
                    68:69:e5:21:84:8e:16:1d:7f:34:87:e5:6f:de:5b:
                    a1:9f:88:5d:86:45:8b:5e:7c:48:63:08:a9:88:78:
                    5e:9a:f6:6f:8d:69:14:e5:e5:c8:d9:13:f7:fd:a8:
                    c0:3f:c2:04:35:8b:33:fc:72:01:ad:39:79:fb:a1:
                    cb:92:94:18:91:05:20:2a:ab:06:53:44:b8:66:46:
                    56:81:b1:49:6a:99:b8:1a:25:b8:b8:46:fa:ae:bd:
                    51:9a:e8:3b:25:76:07:eb:ea:c2:af:2d:7b:ab:3a:
                    4f:6f:2d:66:8b:01:d8:5a:31:27:5a:24:93:80:dc:
                    5f:82:08:88:24:7d:ae:83:ad:eb:a2:70:9c:c7:5c:
                    24:56:dc:10:5a:fb:c9:b9:29:7b:63:30:4c:1f:bd:
                    e7:1f:b4:01:e6:ed:ed:8a:f7:5a:cc:ae:ca:8f:ef:
                    5c:8e:66:3a:39:6a:99:62:9b:a4:ba:83:82:b1:48:
                    74:57:48:76:d4:0b:df:48:84:ea:bf:b3:a0:05:20:
                    e0:71:2f:41:36:c6:a1:63:1e:d7:76:e2:81:70:b0:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:79:1C:20:A5:29:3D:63:16:15:A9:E6:5F:00:CB:3C:02:07:9D:F0
            X509v3 Authority Key Identifier:
                keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:aa:33:ed:09:05:01:1f:64:49:6c:67:ef:b6:25:63:e2:
         ae:90:d4:54:27:df:77:de:27:9c:d6:7e:70:28:16:a8:04:6d:
         68:63:7a:97:0c:9e:42:39:34:ed:72:62:0f:37:de:66:3d:80:
         43:c8:1f:86:2a:fa:f6:41:0d:72:84:aa:ec:11:4d:02:b1:17:
         2e:32:07:3f:d6:6f:6e:2d:54:f7:ac:cb:ab:c6:7b:a5:5f:d5:
         5b:ac:03:93:74:0f:21:dc:b2:c9:9c:28:71:b7:4e:6a:2c:74:
         67:56:48:7f:e0:0f:e8:34:ea:fc:02:a0:8b:19:12:3e:e7:ff:
         13:ec:85:62:f9:c4:37:7f:19:be:97:44:bb:58:f4:f0:aa:51:
         32:ff:c0:85:a2:9c:85:ca:24:6b:68:c0:99:ea:2e:1f:bb:62:
         77:b8:98:3d:c1:65:55:61:b9:90:57:47:da:2a:87:6f:74:fc:
         7b:1c:92:4f:0c:89:06:72:56:33:cb:5f:87:fc:e0:a6:80:a0:
         91:bd:81:65:5a:3b:65:da:be:b7:fa:5f:03:22:46:f2:67:0f:
         66:d4:36:98:51:4d:a7:6f:01:3c:d6:e1:58:9b:41:46:83:0c:
         4e:67:6d:0f:f5:c3:7d:b0:56:04:85:a2:a8:26:8f:9c:ff:bf:
         dd:3b:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----