Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          FY4AVOWm0p+IbaEkuiYpdZzYpjR7SCrLk7lo1CfkDOA=
Subject key identifier:   51:7B:C6:5C:3F:FB:A0:30:F2:35:C0:01:4A:CE:D8:7B:A8:44:B1:61
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       01962E98D08CE4E5C87ABC6887FFC65B1977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          11FB
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: 9suxB9yISvnABY6d6OOl+6uOvzAPe3458TXr7r/ua4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:8c:e4:e5:c8:7a:bc:68:87:ff:c6:5b:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=517bc65c3ffba030f235c0014aced87ba844b161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:49:d1:85:63:48:1c:b7:79:71:04:85:fd:
                    ac:21:57:d4:3b:df:4b:b2:a2:10:f5:84:68:94:ad:
                    4a:e7:7b:6e:54:a3:b9:c1:3c:68:f7:7c:32:4e:ae:
                    00:8b:f6:c7:39:b6:c5:4a:7d:12:c8:1e:53:c7:16:
                    c7:e2:36:2d:0a:de:51:bc:e5:df:55:2d:b9:ad:4e:
                    91:4d:6a:36:01:72:b6:30:b0:7d:38:93:f0:3c:5c:
                    d6:21:27:b2:1a:16:69:94:ef:94:d4:79:54:60:6b:
                    5e:0f:70:25:d8:88:d8:5e:1e:16:ba:f3:6d:5e:4a:
                    35:1a:f3:87:c0:75:bb:a7:f6:29:24:16:62:da:a6:
                    d9:2e:45:42:fb:29:69:4d:28:f3:55:ae:91:0d:5a:
                    c6:16:73:d2:fb:f1:4d:bc:3c:1b:23:e5:e2:a4:39:
                    17:e4:6d:a8:01:bf:b3:6f:7f:c5:a7:25:be:99:b1:
                    8d:e2:31:f7:a0:94:b8:97:82:38:30:34:04:c8:34:
                    ff:54:0e:15:89:db:28:43:e0:ca:3f:0d:b8:04:0a:
                    18:1f:3f:f5:e0:55:c3:84:5a:23:1d:24:a6:a2:b0:
                    af:7c:76:8c:9d:ad:a4:b0:a6:47:b2:22:d0:2d:2a:
                    88:8c:58:c5:8f:f1:09:36:e0:dd:74:3c:e0:00:3c:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:C6:5C:3F:FB:A0:30:F2:35:C0:01:4A:CE:D8:7B:A8:44:B1:61
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:8b:47:a8:69:fa:56:2b:93:89:70:a5:20:fb:46:24:35:
         cb:bb:fe:5c:75:af:5d:b0:81:7e:ef:f8:13:3b:d2:50:8e:64:
         1c:db:58:cb:15:c3:f3:24:96:8c:89:b7:6e:6d:08:4b:fb:27:
         b8:54:a8:e3:b9:12:22:21:3d:1a:8a:e5:6c:21:22:1b:13:de:
         ec:94:26:c1:c5:15:41:b9:13:e8:b6:7a:19:f1:b8:ef:cd:5e:
         ba:de:c2:25:92:10:55:12:1f:b4:ce:04:06:99:86:58:97:fc:
         9c:17:1b:4a:4b:97:9a:b4:5e:af:fa:b9:aa:8b:ea:33:2e:a4:
         a1:fb:b4:81:e2:ee:10:89:93:f0:f9:4f:ef:21:e7:b7:f8:b3:
         04:25:2d:a9:a8:97:f3:af:c6:ba:85:3c:f3:88:90:4a:66:8e:
         af:9a:74:92:28:28:a2:bd:08:9f:dc:74:a9:74:48:76:79:c0:
         ab:74:ab:4a:4d:29:44:40:dc:1a:d3:d3:95:28:66:d5:30:e1:
         10:03:29:b4:39:3c:80:e5:0d:fb:4d:52:d2:ce:9b:e4:07:a0:
         e4:58:5e:1a:67:b9:4b:aa:32:77:24:ff:20:41:a0:1e:80:a7:
         a3:20:e2:dc:b0:f8:aa:3b:db:95:c8:10:0e:38:e9:77:3f:59:
         7c:fe:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----