Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          2GBQib6wNJD4l86ttCgVzeYSkXsY/YUvmgUilmXB5/Q=
Subject key identifier:   D0:04:52:8E:67:D2:78:A4:B4:7D:47:2D:49:2F:82:98:F9:04:E6:6C
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       01962F071B31D129CE6F0E9B2A89AEB51F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          031F
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
                          2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: fHD9lIDJ2alI4zxPUZ7YrCjyEJXHWmsmCt57rV4j0bA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1b:31:d1:29:ce:6f:0e:9b:2a:89:ae:b5:1f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=d004528e67d278a4b47d472d492f8298f904e66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:01:85:ab:06:af:98:66:f1:a9:63:58:c8:
                    62:13:d2:97:f7:ec:b2:d7:8d:9c:c4:ca:fe:24:53:
                    8c:fd:83:d4:57:6e:19:3d:f7:6b:c6:72:3e:8a:07:
                    21:d0:54:5d:2b:cc:ec:37:e7:61:13:6b:5c:5e:a6:
                    50:83:ae:d1:c7:29:10:94:0b:68:34:a1:81:60:a5:
                    2a:54:a7:7b:ca:19:7d:b4:31:3b:81:f9:e0:fc:13:
                    a3:9a:00:2f:3e:2e:d2:33:2c:aa:39:9a:e6:8b:fd:
                    51:46:65:db:e6:85:86:1c:bf:d3:10:4c:a6:e4:78:
                    9c:b9:03:02:bb:55:55:04:d8:91:fa:47:55:25:d4:
                    f9:56:72:78:2d:23:21:9c:6f:1d:70:c7:bd:49:33:
                    09:2a:3f:80:d8:7e:fe:7c:df:0c:ac:f3:46:85:40:
                    0f:c5:e9:50:6f:3d:af:0b:a6:c9:c3:1f:64:87:59:
                    c3:9a:09:0a:37:44:e2:f6:00:ab:cf:7c:04:e1:59:
                    68:a6:e4:a2:d9:b6:cd:ce:8d:bb:f1:58:3f:ed:24:
                    ee:c2:7d:82:37:12:67:8d:77:3a:84:ea:9b:4b:72:
                    e0:9b:bc:78:e6:55:c5:ea:bc:8c:62:dc:10:62:94:
                    b8:cc:34:a5:74:8d:91:d2:3c:a9:99:24:c1:b2:0f:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:52:8E:67:D2:78:A4:B4:7D:47:2D:49:2F:82:98:F9:04:E6:6C
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:1e:76:b9:18:c9:8e:80:d5:d9:62:1c:0d:fc:45:45:ec:
         7c:d6:4f:f8:7c:3a:5d:2d:45:3c:0e:db:79:c1:e7:89:d1:c3:
         25:a6:02:e4:e9:49:5a:7a:8c:11:8c:bb:e5:94:da:fa:08:d4:
         da:fb:fa:b9:54:99:6b:52:13:ee:ed:27:82:f5:5d:ae:cf:d1:
         ef:53:2b:9d:d6:31:55:50:b9:6f:ba:90:ab:e2:81:8e:0d:4b:
         c2:78:47:df:a7:86:ee:06:b9:7e:dc:52:82:07:74:89:0a:e0:
         e6:c2:66:df:d9:20:b3:08:60:ae:04:5e:c7:1e:ba:34:f4:81:
         48:4f:d7:e2:2a:af:1f:30:ba:d8:ff:07:09:13:9f:a8:b5:95:
         4e:e9:59:cf:3c:42:2a:56:2d:fb:b8:db:ed:e2:a8:3f:e9:c3:
         3b:49:a2:fb:c2:0f:3e:e3:67:c6:83:c6:11:10:3e:ee:2e:12:
         dd:6a:ee:fc:a7:6f:fe:94:52:7e:4b:70:ba:e7:a9:af:1b:7d:
         1b:40:d4:c0:4e:49:41:63:be:16:f9:ba:36:c7:2f:44:37:91:
         b8:d4:6c:f4:4f:b6:8c:73:c8:42:53:f1:04:03:7d:73:83:5f:
         f3:4d:65:42:68:9d:6d:b2:b9:43:93:2f:27:5e:a9:8f:b7:13:
         7a:0f:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----