Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          NMEVhcY7jVEafbLqjMu6LUbZm+BCVmdk28vjzOdJm7Y=
Subject key identifier:   2B:58:11:99:29:B8:E8:FA:E4:A3:DE:6E:CC:DB:32:52:E2:AE:84:57
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       01962F070C3141A08FD249F32A712E206AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          1400
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: wpB7S/t/ie2Xo/6tdaKwjVunXHe+t4naAgzwazd0Tk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0c:31:41:a0:8f:d2:49:f3:2a:71:2e:20:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=2b58119929b8e8fae4a3de6eccdb3252e2ae8457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:d0:f6:c3:19:d1:18:9e:1c:84:4c:15:22:
                    04:58:35:17:61:d8:c6:64:a2:26:22:3a:78:03:4d:
                    71:1b:ab:ac:61:a2:87:22:06:55:3b:b6:b1:ea:a4:
                    c7:4b:82:3f:7f:a2:30:c0:04:36:25:f9:1e:22:41:
                    6f:df:3b:86:e7:79:64:be:9f:f8:40:cf:c0:21:b5:
                    c3:a0:74:9e:b5:a7:b6:4b:cd:3d:c1:5d:c3:36:ed:
                    a0:6d:1a:0b:1c:42:c9:26:d5:eb:ff:e9:27:a4:86:
                    f6:47:12:e6:a1:98:87:d9:4f:60:90:18:3e:aa:79:
                    ee:d5:25:d0:09:fe:3d:e4:42:9f:40:bd:9d:0a:3d:
                    04:0d:30:1e:c3:59:24:19:fc:00:fa:89:58:d9:55:
                    41:c1:06:6c:77:b1:46:24:c5:1f:68:dd:f8:92:90:
                    81:c6:be:6e:f2:63:50:a7:f3:b4:86:a6:60:4d:f8:
                    aa:46:0b:02:57:40:5a:31:a7:1c:dc:18:72:ad:30:
                    22:07:86:41:fd:ac:9d:1c:5f:35:78:50:e5:2a:d2:
                    c4:2b:c6:1c:dd:1e:47:83:23:0c:c6:63:87:58:c7:
                    9e:f6:73:8b:b4:f1:3d:c9:60:20:db:d2:b4:e6:da:
                    b0:1b:b5:6c:a3:9a:4a:87:6b:7f:5d:a5:7f:a2:6a:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:58:11:99:29:B8:E8:FA:E4:A3:DE:6E:CC:DB:32:52:E2:AE:84:57
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:9e:e9:bf:3e:d2:7b:a6:f8:c7:48:ae:7c:56:8e:6d:9e:d2:
         0f:3e:38:f4:8b:c9:45:66:e6:a0:c9:d5:4d:d3:15:9d:14:17:
         a5:ea:2f:79:36:5e:be:cb:f5:9a:4a:7e:ce:42:84:1b:64:cc:
         ca:a7:52:f1:58:64:25:8b:76:52:82:da:99:ed:a2:58:cc:2d:
         07:c6:fe:c6:7b:ba:fb:83:84:f5:c8:fc:1c:c2:13:5f:ea:43:
         d9:74:7f:a6:89:e0:0d:1b:41:68:cd:e5:a6:1d:90:47:13:17:
         15:38:f5:14:e5:b9:b6:db:37:11:27:52:ca:dc:83:06:ae:87:
         c3:8f:dc:7c:55:f0:63:7b:45:32:2d:f1:4c:a2:dd:f2:df:33:
         64:e2:bd:35:8b:b4:a5:ed:77:de:b8:e1:c9:4b:d2:32:c0:3b:
         29:7a:e6:79:d2:86:84:1a:8a:f2:3e:52:c7:c4:75:c1:b5:03:
         3d:8c:df:26:22:81:d0:52:fe:19:d9:60:bc:8d:59:46:7a:52:
         30:7f:e3:65:9b:39:51:9e:3c:ac:0a:b5:a3:36:f5:49:26:f4:
         7c:67:fc:0a:99:89:e1:8f:7b:8f:21:a0:ee:62:36:01:26:ea:
         80:d8:76:f4:b0:22:43:2f:41:d5:96:ba:33:73:cf:a0:e6:e4:
         d8:e9:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----