Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File:                     fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier:          BzacEqpEyZJKMFaJ4GuhNaip3EpVfk0rPt+7Pv4nR3k=
Subject key identifier:   05:41:1F:B5:03:89:9B:F1:84:7B:25:8C:75:77:A0:36:49:7F:AA:DE
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer:       /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial:       01962DF39E416217C75C2517402FDBDF8070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number:          0FDD
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: MPQDNzR2d5wZiXGBx4xAcoG6Ouc.roa (hash: egDRYIAZQALBoXOeweYBGNjd967GtxTo0GiRgWPGusU=)
                          2: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: U88kgapL+EicEKlb3RW9tonyBNLB39pXRQwUgXtsJuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:41:62:17:c7:5c:25:17:40:2f:db:df:80:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=05411fb503899bf1847b258c7577a036497faade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:76:e5:e4:58:5a:4e:9f:56:93:7f:59:ae:
                    94:96:22:fd:73:b2:13:9e:f5:a4:c2:15:d4:f8:13:
                    62:bb:3a:17:33:95:85:af:33:3e:d9:6f:b3:49:e7:
                    e0:52:07:dd:4a:78:cc:73:35:e0:18:89:ca:b7:be:
                    fb:67:ee:ad:0f:ec:ed:e8:0b:86:77:42:68:84:11:
                    c3:80:f1:5b:33:0e:6c:db:3f:ba:02:ce:39:9d:d7:
                    7e:31:d7:90:96:9d:70:ac:93:43:cb:fe:7f:31:ff:
                    80:06:c3:38:35:00:b6:c0:9a:e8:bf:04:5b:52:7b:
                    46:29:87:7b:1c:b8:e6:b6:63:24:19:3b:56:6d:94:
                    f4:22:c4:6b:36:b7:2f:bc:59:2a:c1:22:86:5d:79:
                    41:d0:50:1d:05:93:b7:76:cd:f7:f9:2c:1f:2e:bd:
                    b5:fa:37:57:c8:07:cd:9e:f8:c1:ef:9e:aa:f4:da:
                    0e:dc:ad:24:55:28:39:ae:c6:1c:68:b5:c1:f4:87:
                    75:8c:1f:3e:b0:e2:e2:bb:43:1d:09:15:51:70:49:
                    d7:ed:ce:6e:dc:fa:23:9b:3c:82:c2:51:b1:22:59:
                    c0:b7:89:33:27:88:60:76:9b:fe:08:6e:ec:a4:ad:
                    11:93:98:de:d2:27:ad:c7:93:3d:f4:cb:c4:83:68:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:1F:B5:03:89:9B:F1:84:7B:25:8C:75:77:A0:36:49:7F:AA:DE
            X509v3 Authority Key Identifier:
                keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:dc:2a:a0:9f:59:a5:31:e1:21:f0:ac:0e:49:ca:5a:b8:
         74:be:97:6f:a2:ef:7c:e6:4e:97:fb:3e:34:d8:5e:d1:20:6f:
         2f:c2:56:da:00:b0:48:78:2f:d7:b7:2f:d0:14:74:eb:15:40:
         e5:c1:03:de:db:32:63:36:c4:ac:1c:56:1c:d7:8e:da:fb:83:
         56:72:81:f1:77:11:c9:68:7a:b9:b2:6a:e0:0e:ce:31:00:c4:
         70:83:57:4f:95:5e:ed:1f:11:5f:d3:a1:ac:23:52:b4:b0:ae:
         60:04:b7:6c:b9:e4:f4:f5:f3:38:1b:22:5b:2d:f8:15:bf:9d:
         80:07:1e:78:27:92:d9:0d:64:2c:a6:62:49:f9:9b:0a:72:55:
         24:8a:23:09:7c:23:b4:bb:79:1b:b5:f4:63:b3:23:2d:6d:0e:
         52:f5:c1:88:5b:48:6e:52:2f:b1:9d:de:39:71:41:d1:57:0d:
         ad:2d:01:87:7a:0c:45:08:95:52:00:54:99:1e:ed:0c:da:fe:
         73:b0:8d:89:27:30:a8:be:62:e3:40:44:0d:c0:6b:de:91:04:
         8f:60:02:84:ae:69:a7:ab:63:7f:33:c1:b4:3d:0e:2f:13:b5:
         6f:6e:e7:09:b5:22:8f:e7:e3:f2:15:51:93:58:61:40:45:be:
         0e:be:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----