Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          a6L/e898qxcBuHFKJ54T/Qd2iuDw8ulFIrMC0pRPqsI=
Subject key identifier:   13:D5:DD:B5:8F:16:82:96:7E:C8:DF:2E:91:B9:B4:E4:B1:38:3E:5B
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       01962ECF503D57B835E8DAEC0D42AE46759D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0999
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
                          2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
                          3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
                          4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
                          5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
                          6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
                          7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
                          8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: dyWLAe+fBmN9fq8iAdOMzrgconXj00jPg/9DmfOFB0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:3d:57:b8:35:e8:da:ec:0d:42:ae:46:75:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=13d5ddb58f1682967ec8df2e91b9b4e4b1383e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:38:39:33:3a:17:93:92:cb:de:c5:f7:45:
                    3c:6a:1b:87:c8:c5:a9:b1:7d:6a:0a:bd:b2:99:9f:
                    0c:eb:a2:7d:ef:83:40:5f:37:68:48:8c:7d:6a:9f:
                    85:2f:b4:54:9e:00:38:ee:e8:fa:1a:bb:56:e5:de:
                    21:34:65:aa:45:29:f3:1c:8e:05:98:e9:58:e8:ac:
                    0c:0d:80:3e:02:68:c1:95:8a:d8:93:d6:8c:a6:59:
                    2f:b7:85:2c:2f:c5:4e:8e:a4:9e:ca:cd:66:66:8f:
                    06:20:32:06:36:46:a1:03:80:37:2c:d6:a5:2a:ea:
                    58:19:44:dd:42:e9:0d:6d:b8:37:77:5b:d7:8d:d5:
                    d4:04:d4:93:6c:cd:b7:ac:d7:3c:4b:1a:bc:ad:ec:
                    55:61:4e:d1:6f:5a:f9:f0:57:eb:b8:d6:e7:cf:62:
                    92:86:5d:67:a5:d4:b5:6b:4c:24:09:c5:d3:e2:2b:
                    ff:66:26:14:8f:a7:0c:c8:1b:2b:34:ba:b9:51:0b:
                    f5:f8:68:b9:a7:c8:a4:c6:0c:b9:01:4c:f6:4a:40:
                    c0:48:87:29:b4:1b:fa:4d:72:1d:1e:4b:3f:69:62:
                    b8:ee:ff:5c:51:14:46:da:7e:5b:b4:b6:db:33:ea:
                    80:a1:16:ad:b3:2c:6e:cf:68:5c:a1:9e:7f:c9:1b:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D5:DD:B5:8F:16:82:96:7E:C8:DF:2E:91:B9:B4:E4:B1:38:3E:5B
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:b7:3e:f7:56:53:1c:63:be:f4:55:7e:e7:70:9c:6f:40:
         9f:61:d7:27:41:12:b9:c5:73:bf:66:86:a7:90:44:d1:3d:6e:
         6e:8b:c8:6e:02:f4:9e:d9:69:36:78:e2:4c:ba:0f:84:71:c0:
         9b:57:e1:6e:f8:52:54:3c:f3:56:2b:fb:47:90:7f:9f:35:0b:
         00:aa:8a:d9:8e:29:bf:ac:4a:34:3a:57:8f:e3:b1:8d:3e:c0:
         41:c6:63:e1:29:8d:75:64:1c:a7:ba:ac:49:15:8b:a6:8e:84:
         d5:fa:f7:9d:61:6a:65:79:4a:ce:a4:ab:6c:03:8b:96:63:28:
         5f:4b:99:8a:59:02:f8:8e:00:42:fb:7f:22:30:e2:f6:7a:f7:
         eb:a8:4b:dc:85:bc:8a:bd:24:1f:ea:d2:83:b2:cd:f6:49:e7:
         6b:a5:92:00:4e:13:58:6d:02:b7:58:fa:8d:95:3a:c9:ca:00:
         d0:26:1f:6e:77:be:4e:c6:29:7b:04:1e:86:e0:48:25:8d:b5:
         a3:50:69:f9:3f:21:e1:cb:b9:3f:2a:17:3b:a6:dc:6e:75:5a:
         54:0d:70:9f:11:bb:74:e8:01:81:36:9f:6d:f0:2c:8d:b5:e6:
         4b:fe:f8:e4:5d:0b:d5:39:2a:63:f4:2c:6a:19:5d:74:ca:83:
         06:a6:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----