Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          Dt6kJnm4hDeVNOgrSnWGp2ZTH4Juclnj9ECFBbRr76k=
Subject key identifier:   C0:ED:E4:07:98:04:F1:B7:C0:F4:6B:66:EE:97:8F:2D:63:BB:BF:43
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       01962E991A066B7DC06E51C3DC2D48E2B038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          1536
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 8lSAtrqexuXHVuIm744usQXtys4.roa (hash: 3f5giIybPOkMgglPWe8AHaSE+ptZT37WzW3HqhZ7iaw=)
                          2: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
                          3: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
                          4: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
                          5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: /Uq7hc3MHlk0Wl9Y882d1H0ue753vmslifD3VGC5Guc=)
                          6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
                          7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
                          8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:06:6b:7d:c0:6e:51:c3:dc:2d:48:e2:b0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=c0ede4079804f1b7c0f46b66ee978f2d63bbbf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:a0:b0:f8:79:0e:24:10:26:84:f9:af:6f:
                    88:e0:08:21:cb:42:b1:82:3e:47:d8:a7:91:43:6a:
                    d4:65:b4:95:0a:b3:a7:f7:ce:58:c7:55:8d:b0:1a:
                    25:d6:7a:d1:b3:84:c5:85:b7:6d:f8:d2:1b:a2:c0:
                    17:ed:5e:78:56:fb:d9:ce:ea:3a:eb:e4:f9:b2:36:
                    e9:3e:21:97:c5:a2:e1:ab:01:26:a9:03:d4:00:d6:
                    ec:82:5f:bd:66:ce:79:43:48:3e:42:5e:23:4f:15:
                    10:1e:1e:77:68:bb:b7:19:c2:3b:2a:e2:f4:44:7d:
                    93:f5:2a:a1:72:85:2c:a2:5c:0b:75:91:ea:a4:1b:
                    b9:fe:c6:0e:ba:a8:58:1f:03:4b:a5:51:04:52:19:
                    f3:04:bc:40:69:11:96:23:28:4b:e0:4c:80:cd:70:
                    f1:1c:83:db:69:be:fd:e6:13:07:35:72:63:0b:5f:
                    fe:3b:3a:6c:5a:56:f0:cd:56:7c:1a:f9:58:42:12:
                    83:f1:e7:38:2e:f2:47:f5:6d:a0:e1:3d:66:30:3e:
                    32:ac:dd:dd:8d:8f:c1:92:ea:69:3f:0b:c8:bd:b8:
                    fd:6a:2c:ef:79:e9:6f:2b:c7:58:3c:7d:49:79:d9:
                    fe:08:d6:df:a1:4c:68:e7:92:b3:b6:f4:e2:ed:9e:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:E4:07:98:04:F1:B7:C0:F4:6B:66:EE:97:8F:2D:63:BB:BF:43
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:65:a0:36:4b:d8:ff:0f:b8:91:0b:bc:92:1a:c4:ed:6c:
         ea:6c:ae:42:c3:b2:39:56:fd:ee:02:78:45:3b:a6:63:8c:0d:
         b9:a6:4b:a1:4f:9c:7b:bd:a6:56:3b:75:62:ff:98:81:70:02:
         c7:f0:0a:d6:91:1c:92:0c:d2:36:68:28:f0:13:52:f6:da:f6:
         0a:d1:d8:98:ab:76:0c:57:ed:97:85:28:06:67:50:cd:9b:76:
         bb:bb:6d:c1:4f:f7:98:b3:56:cb:2f:16:6d:e0:ad:6a:66:24:
         28:74:bf:1b:8a:64:c0:46:00:b4:39:bc:71:05:2e:01:27:f3:
         66:a1:20:c3:8b:fe:ee:54:e0:1b:e2:86:c7:6b:b9:ec:70:9e:
         b3:ca:64:e8:53:88:37:9a:f5:f4:44:2a:75:cc:d0:84:a6:99:
         8f:83:44:bd:bf:2a:12:70:1a:b3:e7:ca:c6:bc:8a:79:95:5b:
         88:13:3b:f9:c3:b0:76:5e:0a:97:6b:e3:6b:be:6c:f0:de:2d:
         95:b9:98:0b:da:24:90:8d:52:6b:f8:a9:6e:7a:26:83:78:1c:
         f2:fb:3c:97:71:bf:ee:5d:e4:71:c7:0d:10:16:a5:04:51:bb:
         6e:98:50:cf:62:eb:f3:1d:e0:1f:77:be:16:f5:45:76:32:5a:
         a5:fb:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----