Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          Rk3VTU3EGOpw6jo5o5+j4gxLwFJCv9PC1hoGb/0meuI=
Subject key identifier:   B0:22:3E:73:A2:8C:BB:FF:01:E7:25:52:03:24:63:58:3C:96:84:3E
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       01962FAB36F5126FF592B85BAEC679FCEA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: 5sBDBHbhdT4UV9HIU7D/YE0PcBQKU8UbTtRnX171Keo=)
                          2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:f5:12:6f:f5:92:b8:5b:ae:c6:79:fc:ea:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=b0223e73a28cbbff01e72552032463583c96843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:12:2d:a8:34:91:0a:60:05:aa:51:6a:f0:
                    8e:1f:4e:50:cd:ef:b3:85:3a:0b:c2:44:54:99:7a:
                    5f:e1:b6:d6:f1:e8:b6:06:10:c9:5e:ef:2c:b0:c0:
                    9c:85:c2:5f:bd:47:d7:82:77:57:e9:c8:43:64:cc:
                    5e:29:5a:5f:09:55:a5:04:4d:44:52:95:0a:2c:35:
                    1e:b9:1c:fb:09:fd:45:47:60:1e:b7:ca:a2:6f:bf:
                    8b:c0:22:92:aa:2e:07:42:4e:2b:dc:0e:1a:e0:8b:
                    44:fc:b7:7e:ab:bc:d4:54:3c:c2:9a:c5:d7:93:68:
                    48:99:a6:f0:3f:8c:fe:a6:7e:6f:b4:38:f4:fc:72:
                    0a:43:95:e4:19:2a:07:9c:45:74:39:e9:81:2a:a8:
                    31:24:e7:2f:f7:14:da:71:5f:d5:ed:ba:cf:b4:d2:
                    0f:8a:b4:32:37:dc:21:25:e1:82:38:86:1c:3d:47:
                    0e:65:db:93:9a:80:03:4d:ef:f9:ba:6a:f6:46:c8:
                    de:71:2f:54:f3:94:39:22:78:d4:d7:85:49:2d:de:
                    99:7e:f9:03:c7:46:89:82:33:db:56:af:92:6b:5a:
                    4e:26:18:9b:b0:68:a2:96:5a:4c:26:10:25:91:5f:
                    48:a1:23:a6:6d:1d:cd:0b:90:1c:a6:75:78:e5:83:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:22:3E:73:A2:8C:BB:FF:01:E7:25:52:03:24:63:58:3C:96:84:3E
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5e:e3:2f:0f:43:52:53:17:95:c6:ba:37:5d:43:89:5e:69:
         99:9c:ca:fc:a6:5e:06:cc:8c:ea:c4:d2:1b:33:5e:b1:1f:94:
         65:32:e0:0a:d5:94:96:0a:fd:6e:bd:56:f7:43:f3:17:bc:53:
         0a:f2:19:b0:5b:5e:12:9f:8b:71:33:77:fb:ea:d3:27:4a:cd:
         e0:1a:9c:02:a1:ef:60:ed:43:6c:f1:67:f3:ab:e0:4e:62:6c:
         28:ba:34:7e:61:f2:0c:66:e4:4b:5b:e1:b9:2f:f6:be:d2:d2:
         b9:46:49:e1:e9:6d:b5:d9:5b:e3:76:5e:e7:3c:ce:65:5e:12:
         ad:c8:b5:f5:87:fb:7a:b9:7a:53:4f:d4:24:da:c7:52:e9:ca:
         4e:6e:aa:e0:0a:7f:24:5f:52:22:f4:6b:e8:2d:fd:a1:b4:fb:
         f7:66:17:e1:c4:c2:cd:f2:75:c0:1e:92:a8:e9:6b:87:89:89:
         b0:2e:c6:06:ba:bb:cc:7d:26:5e:1c:01:89:5f:f0:1e:a4:d3:
         7a:cf:97:26:b2:92:90:7c:aa:5f:ef:63:eb:46:a9:71:73:38:
         2c:e4:66:3e:7b:46:9e:1b:89:7c:e3:39:8a:44:50:50:5d:c8:
         c6:29:29:78:c5:a6:51:8b:50:90:a1:ab:4d:22:71:9f:34:3f:
         c5:e3:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----