Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File:                     i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier:          nk3PIErY1T1PNFkkKuuYBk4WI5xXndjTgf5Rt+D+l9w=
Subject key identifier:   5A:3F:4D:F9:C4:B8:88:3E:79:98:64:59:B3:2A:AF:39:64:C9:FF:D1
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer:       /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial:       01962E61A860E34229718DA97F31AC50D32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number:          070F
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: MtCxq4k+MEM1ci0XjNf3ugb0gZnwZe/6/qzCGi49BUs=)
                          2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:60:e3:42:29:71:8d:a9:7f:31:ac:50:d3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=5a3f4df9c4b8883e79986459b32aaf3964c9ffd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:1c:3d:1e:2e:e4:02:1a:93:60:e3:a2:4d:
                    6c:f0:2e:b1:65:7a:d9:b9:f9:e3:dd:c6:9f:29:7d:
                    db:fb:3f:34:ca:58:6f:d7:e0:ee:f0:c2:d4:d1:4a:
                    23:94:da:43:92:b1:6f:19:f3:74:fe:e9:c0:37:cf:
                    15:4e:04:40:52:8a:0c:91:29:fe:3a:ce:f5:40:c1:
                    e6:7d:5d:3b:cb:dd:1a:0b:80:7f:b8:e3:26:a4:50:
                    3c:1f:8d:ab:d6:3a:0a:28:90:64:84:bd:1f:af:7a:
                    ec:b6:0b:ee:5f:fa:56:01:e9:5b:05:74:f5:06:14:
                    54:45:b6:6a:fe:98:4e:ae:2f:3c:a8:3a:c8:a3:48:
                    59:46:fb:47:06:83:46:d3:ed:4e:a2:01:99:48:6d:
                    8f:15:53:f9:e9:43:3c:e2:1c:58:72:69:f9:6b:fb:
                    c6:5f:13:b5:df:db:91:8d:e2:c0:a2:ac:ca:72:7b:
                    e3:88:c5:fe:aa:ed:a7:59:73:11:fb:85:29:8c:a4:
                    62:dc:e6:51:49:33:80:21:84:b2:50:2f:ff:85:93:
                    04:a9:8d:7e:a3:16:91:19:42:5d:f4:9e:80:54:29:
                    c8:43:d8:50:7b:9f:27:5c:e3:e5:4c:b6:62:5a:1c:
                    eb:74:76:42:15:b7:ce:24:b3:a3:ff:3c:19:2a:eb:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3F:4D:F9:C4:B8:88:3E:79:98:64:59:B3:2A:AF:39:64:C9:FF:D1
            X509v3 Authority Key Identifier:
                keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:c9:58:c2:a5:6f:8c:b0:ce:78:76:72:f8:fb:43:9c:c9:
         0a:ec:8e:d3:09:27:67:07:84:e2:96:c3:14:cf:d5:b1:91:3f:
         28:be:58:d0:ff:3d:17:50:90:f1:b8:86:be:46:f2:8e:26:78:
         bb:42:3b:bd:35:30:eb:45:2c:17:a7:30:7f:db:08:63:7e:e9:
         27:6c:10:13:6a:40:33:09:63:00:36:df:38:71:25:0e:92:41:
         d9:bd:98:6b:77:ff:70:50:b7:b2:2d:3b:36:d9:22:5c:93:df:
         db:73:8b:07:78:8a:da:3b:f6:ca:b1:0b:86:8c:37:8b:0a:75:
         b7:1b:39:44:b2:0d:cc:f6:fe:4d:71:d7:bf:b5:75:58:da:1d:
         77:db:bd:36:70:45:f2:e9:4d:e4:7d:73:e6:11:79:62:db:be:
         5a:57:d9:d2:06:cc:52:56:26:bf:c2:bc:a3:2f:f9:eb:32:1d:
         11:32:ad:ea:3a:46:20:ba:08:4f:a8:4f:5c:60:91:74:49:e3:
         15:09:2b:da:ff:04:36:db:24:0b:86:96:3f:17:8c:09:21:49:
         13:ff:7d:c3:c3:00:9e:d0:7c:0b:e9:b1:04:d4:47:7d:5b:70:
         02:3c:9c:4f:76:27:a3:02:91:56:e6:b6:db:6d:b0:3d:a0:e0:
         3e:41:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----