Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          pphUcCjIyJV4AT6CWiXk2uN7QTLv0AIjYCr9ivmxQKE=
Subject key identifier:   3B:06:20:25:99:97:37:A2:CB:67:B8:24:90:97:CF:FC:D9:5F:E7:53
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       01979B985E2AC028D08E117BB84D7BB28A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          09A6
Signing time:             Mon 23 Jun 2025 07:02:23 +0000
Manifest this update:     Mon 23 Jun 2025 07:02:23 +0000
Manifest next update:     Tue 24 Jun 2025 07:02:23 +0000
Files and hashes:         1: 5jihEGuQ4yw7LrN-GxhKRXWzO7o.roa (hash: i+yfzR8jSMTDKBjs/TXoC5+0uTvIRes38f4P8v9dk/U=)
                          2: S0vegGpuiCercYtclM_VH2iVx7s.roa (hash: ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=)
                          3: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: TuF+7x05LAAY/qjvXEICZlxr94Zhrnr2yC2ZVnn/S7A=)
                          4: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (hash: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=)
                          5: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (hash: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=)
                          6: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (hash: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=)
                          7: zQfM-JDEyYtnlHUMMTArONbOmM8.roa (hash: BsV8fCwOGo+p3hz5+JexWR4GrgumAGIe4ztslYYq+fQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:98:5e:2a:c0:28:d0:8e:11:7b:b8:4d:7b:b2:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jun 23 07:02:23 2025 GMT
            Not After : Jun 24 07:02:23 2025 GMT
        Subject: CN=3b062025999737a2cb67b8249097cffcd95fe753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:32:f0:33:bb:d4:d2:f8:ec:76:a5:b5:9a:
                    4c:15:21:f6:57:ef:1a:36:cd:7e:e1:a6:a6:98:df:
                    db:71:1d:aa:16:8d:e9:04:cd:5d:cf:86:55:aa:ff:
                    5f:43:ef:20:17:16:02:dd:9f:35:9c:49:9a:b7:2a:
                    34:da:1d:36:6c:f9:a3:b9:ad:e9:7b:91:34:84:f2:
                    f0:40:d9:b6:dd:55:51:5d:57:ac:23:ef:68:df:17:
                    04:00:d9:e0:f1:c3:49:21:ec:5c:b1:23:03:c4:6a:
                    6d:1a:96:85:e8:dd:dd:fb:38:8a:59:c0:8d:c4:a9:
                    48:a7:b2:c1:28:68:dd:71:6e:74:24:57:2f:08:f2:
                    21:a8:43:fa:c6:3e:c0:02:11:4f:67:92:11:1e:df:
                    e4:50:ed:2f:43:1b:fb:e5:0f:7a:c6:4a:ce:e3:36:
                    dc:e6:6a:26:c6:97:97:c8:e8:5f:ea:aa:d8:cb:b9:
                    4f:eb:db:f3:cb:74:e7:41:da:47:c8:5a:6b:5c:ec:
                    7b:3d:2a:79:86:91:73:53:f8:b1:ea:49:78:6f:1d:
                    0a:2a:8c:d8:fa:33:32:39:35:14:28:82:0a:3c:58:
                    2f:59:e6:d3:c6:30:88:ff:31:83:69:9b:ec:5b:f5:
                    61:ad:53:eb:6b:c5:71:b3:05:fd:51:0e:08:64:a2:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:20:25:99:97:37:A2:CB:67:B8:24:90:97:CF:FC:D9:5F:E7:53
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:2a:eb:45:9c:f3:ee:21:7e:23:75:a5:0f:86:dd:94:e3:13:
         c8:4e:d8:af:47:88:3b:dc:2d:29:0b:4f:88:93:f8:c0:b3:9c:
         fd:40:35:6c:73:25:7d:57:b7:93:9f:6c:f2:98:1f:54:73:ad:
         56:36:43:e3:25:ba:3b:bf:a6:3a:86:e2:d0:f2:48:4a:44:7f:
         1f:b6:06:9a:7a:70:fd:0a:a3:41:de:77:0b:72:8e:4a:1f:32:
         36:0b:be:67:9c:39:ca:1d:61:75:78:98:d1:d0:87:be:8e:dd:
         f6:92:33:8a:4f:80:e5:b5:de:15:08:62:46:17:c0:b5:2d:3b:
         27:5e:41:a2:21:13:1c:6a:d6:03:6f:56:c5:6a:af:a5:6a:31:
         44:99:14:7a:f2:c6:ca:9e:a8:2e:01:e7:2f:cd:3a:ac:a9:5e:
         fb:6f:e5:4c:0f:e3:37:7f:a1:c7:ce:55:31:48:6a:34:b7:5c:
         43:53:c2:1c:9e:09:7a:da:67:65:b1:aa:e6:64:02:76:03:a1:
         f2:db:74:83:34:81:55:85:9a:81:e1:fd:8a:50:4e:f8:2d:1d:
         0f:f4:a0:cc:d1:bc:7d:aa:f9:a5:ee:d4:80:26:54:92:45:1f:
         0a:74:e8:95:d8:ea:ae:1b:38:9c:62:50:32:c0:74:38:f5:6b:
         b4:76:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----