Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          igdOPfrsrb8cscRwPCaqENEH9CQkd3U6g/m7bbMbcEE=
Subject key identifier:   D1:BC:2A:79:D9:2F:E3:9F:0F:1C:FA:EB:9E:E6:EC:94:B7:85:B2:5E
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       01962ECF732CE0D0908154D36772EEB4E991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          1354
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: 0MVxyenJYgx4utN9VFbS65U2Uvq9cb4VpVVLG1d6Hw4=)
                          2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:2c:e0:d0:90:81:54:d3:67:72:ee:b4:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=d1bc2a79d92fe39f0f1cfaeb9ee6ec94b785b25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:77:cf:f2:7e:ba:95:e2:24:4d:2e:05:b6:
                    e5:89:cd:1d:fd:61:f0:66:a5:56:8d:cb:f1:ad:71:
                    a6:02:08:b6:31:db:70:b4:28:f7:7a:1c:1e:a4:e7:
                    9b:e8:20:ba:74:fc:fe:69:ee:4c:1c:c7:a0:22:e0:
                    ac:e9:36:53:b7:38:36:36:0a:6f:b0:a1:21:4f:ad:
                    88:df:36:80:10:0e:9f:51:fd:57:69:78:29:79:33:
                    5f:cb:46:70:4c:f1:bb:b8:2e:cc:07:d9:0e:9f:27:
                    4e:9e:e1:b9:5b:a8:ee:3e:1f:8d:34:41:69:c2:8c:
                    2b:57:45:16:ec:02:93:18:8a:7a:9c:0b:9a:83:85:
                    94:50:bf:d5:d7:14:15:ea:c6:69:86:c4:d3:5d:5b:
                    40:10:b6:df:21:5d:d4:df:3c:13:f9:cd:f1:db:18:
                    00:ce:c6:1f:9a:bc:2e:7d:c7:37:ac:4e:c4:68:83:
                    8f:9e:f8:26:b0:65:22:25:e4:c0:ee:ce:53:20:4b:
                    aa:4f:a8:bf:56:16:c3:cd:1b:81:e6:e8:19:92:7b:
                    e3:d9:76:f3:2d:8a:bc:6b:37:39:04:34:71:34:cf:
                    41:ce:ff:2f:2f:38:14:c3:8a:fb:6e:b3:d0:01:9c:
                    68:32:e8:e9:a6:4c:85:29:8d:10:ae:84:d8:29:64:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:2A:79:D9:2F:E3:9F:0F:1C:FA:EB:9E:E6:EC:94:B7:85:B2:5E
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:ba:77:94:41:d4:96:74:d0:54:a6:ff:0c:ae:60:d1:a2:
         41:bc:6d:69:06:de:bb:34:cf:b9:c0:a7:95:0e:99:73:76:48:
         07:f8:8f:30:37:bf:68:4a:50:cd:ae:7c:86:41:ec:98:f4:e9:
         94:03:cc:b0:72:49:e2:61:c0:d8:e1:47:97:26:55:aa:ee:31:
         15:ac:ff:4a:f8:15:96:5f:0f:f4:14:03:e7:9b:30:5a:8e:39:
         1f:45:f1:2a:7f:f6:45:de:31:70:5c:ee:37:33:a8:61:98:51:
         39:e4:25:d6:61:06:6f:37:22:29:9a:67:4c:06:a6:3b:9e:ba:
         bd:54:d7:da:41:31:9d:3a:81:09:49:b3:9b:5c:7d:ca:c2:7f:
         34:57:a0:89:e1:93:95:0a:c4:94:ef:f8:dc:da:c2:07:13:79:
         bf:14:44:f5:21:60:56:0a:f6:34:be:bf:b7:9b:97:b6:20:ba:
         1c:b6:07:9c:b9:fb:43:e6:26:59:54:bc:ee:dc:b2:53:61:77:
         15:a9:83:b1:81:09:06:35:e3:a5:65:b5:f7:fa:3f:d2:65:37:
         90:48:1a:45:c1:ce:39:a4:5e:aa:9a:47:25:6b:ed:a6:f5:4d:
         fa:5c:27:e9:2e:e1:e4:db:db:99:b9:b8:2d:47:4a:ca:e5:cc:
         11:f9:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----