Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          9qL/DtRrcvGCMAzEeeoo/DXn5dQlUnMVC4WjIzms7kA=
Subject key identifier:   B0:5B:53:64:42:37:3B:59:B1:47:D3:49:89:BB:EE:DD:9B:5D:B2:26
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       0195E0B48BCC4F5046287BCD481D79049D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          14C7
Signing time:             Sat 29 Mar 2025 07:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:23 +0000
Files and hashes:         1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: am4ycy1xKpOXqzjGniWgA8PyvXf8YWwYxYOyKnQKqj0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:8b:cc:4f:50:46:28:7b:cd:48:1d:79:04:9d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Mar 29 07:01:23 2025 GMT
            Not After : Mar 30 07:01:23 2025 GMT
        Subject: CN=b05b536442373b59b147d34989bbeedd9b5db226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:17:0a:ff:9a:71:3f:7a:af:73:ab:4c:58:
                    48:44:a5:4c:a6:35:05:31:17:85:9b:05:42:41:10:
                    1b:24:a2:78:66:2e:1d:78:b6:52:26:eb:a1:1a:67:
                    ca:59:53:f7:b4:c5:74:83:2a:82:e8:f2:1e:30:0d:
                    4c:5c:9e:f9:7d:cc:f8:ae:b0:08:5b:75:84:fb:3f:
                    e5:2b:c0:a1:72:80:66:eb:b4:f2:3b:d7:cd:a2:27:
                    e1:d8:d5:f4:28:11:b0:00:b6:a0:6e:5d:b0:d3:b2:
                    8c:de:11:f2:ab:54:04:6f:10:67:2b:03:c8:8d:2c:
                    68:72:43:92:33:84:d0:4b:6d:45:56:74:91:a4:19:
                    a2:0f:37:5b:4f:08:fc:ec:06:22:9c:78:a3:ae:b5:
                    98:d6:c2:d0:26:4a:40:bd:22:48:98:ed:d7:c3:ac:
                    8d:3b:4a:72:fa:f8:d2:c3:03:bb:a9:a1:cf:90:56:
                    72:2d:9d:51:d0:0d:57:80:0b:41:53:37:f4:83:56:
                    b1:27:4e:30:a6:c1:37:3f:b5:c2:e5:9f:4c:bf:5d:
                    05:30:e0:b0:c9:a2:57:15:63:df:ba:15:24:4d:28:
                    07:da:39:b8:20:fc:a4:6a:e1:8b:fb:15:cd:4e:7d:
                    b5:3a:09:76:33:3f:1f:c0:46:8e:9d:55:d9:23:b2:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:53:64:42:37:3B:59:B1:47:D3:49:89:BB:EE:DD:9B:5D:B2:26
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:7b:46:92:56:69:3f:75:ad:43:45:01:aa:f0:f3:37:f1:
         27:b1:42:46:7b:c9:2d:c2:43:3d:c7:09:30:6a:b5:13:5e:56:
         b7:a7:8a:15:11:64:52:9a:88:53:29:d2:2c:d9:55:15:ed:ad:
         56:26:35:49:18:07:05:7f:89:f2:b5:c4:51:aa:68:f3:ea:bf:
         fb:f8:15:3e:bc:23:8c:ac:98:f2:ef:cf:df:01:f9:37:c4:7e:
         83:eb:07:52:0e:83:70:b3:b1:1a:05:97:02:14:12:ac:35:0a:
         b8:d7:56:14:fb:5b:0d:81:8b:05:c3:97:d9:ce:e9:85:28:7d:
         96:90:36:d8:ab:a4:05:56:0a:03:57:27:80:16:b5:21:4f:fe:
         e2:dd:1c:46:2f:96:94:9e:ee:13:71:3c:c5:4b:69:a4:82:94:
         8d:06:68:a5:30:8f:91:ed:e2:a8:e9:08:75:ed:9b:6d:fb:bd:
         bb:ee:54:b4:ca:ee:7f:7b:91:a3:24:74:9e:a1:2f:13:5c:16:
         6f:8a:31:d3:80:f8:d9:fb:72:38:98:d1:82:6c:de:b4:f9:8e:
         54:df:d5:6e:51:e5:53:69:2c:b8:8f:11:af:07:5b:e8:cb:dc:
         a3:05:05:e0:d9:73:cd:ac:25:6b:96:20:4b:32:14:5e:b6:9a:
         0d:2f:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----