Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File:                     DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier:          jKcz9YwVm9vfuEMal1TGsorhXf+jzLBG31Xw5aalh+8=
Subject key identifier:   39:5E:04:9F:75:2C:98:DC:EC:C6:3F:17:E7:0C:54:CE:FA:AD:5E:7E
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer:       /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial:       01980E2C5F1D0FA0FD4CC5AA3DADF8B79520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number:          04D0
Signing time:             Tue 15 Jul 2025 13:00:45 +0000
Manifest this update:     Tue 15 Jul 2025 13:00:45 +0000
Manifest next update:     Wed 16 Jul 2025 13:00:45 +0000
Files and hashes:         1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: bfbH2OlosUt+BT51vQcikOGpXzPFzHyk3KQB1C7VAM8=)
                          2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
                          3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:0e:2c:5f:1d:0f:a0:fd:4c:c5:aa:3d:ad:f8:b7:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
        Validity
            Not Before: Jul 15 13:00:45 2025 GMT
            Not After : Jul 16 13:00:45 2025 GMT
        Subject: CN=395e049f752c98dcecc63f17e70c54cefaad5e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:6f:73:56:bb:38:8a:ab:84:71:18:a4:0a:
                    9e:85:4d:d7:5e:aa:03:03:89:1d:da:71:6e:f5:db:
                    6f:50:5d:43:b7:c3:61:9e:53:35:1f:79:f7:57:20:
                    e2:9a:86:3d:71:fd:bb:c6:fc:8a:d2:72:cd:f1:21:
                    a6:86:43:a2:07:3d:f1:82:c1:d6:02:10:16:f5:95:
                    a4:19:45:f0:9a:b9:d7:50:d0:f4:1d:ac:b8:75:57:
                    52:80:2e:43:c4:e3:c2:6d:09:e8:ba:30:f5:f3:e8:
                    82:22:74:a1:7c:ff:61:c2:ac:06:e9:3e:b2:b6:0d:
                    6b:02:78:88:07:c1:60:ad:f3:93:ca:c8:0d:61:37:
                    07:15:f8:68:d5:95:7a:dd:e9:ec:58:9a:64:2b:d4:
                    8f:f3:db:52:30:6a:75:fb:01:7e:d6:57:60:cc:d7:
                    08:61:ce:20:ba:db:4e:7b:91:92:aa:b3:88:9d:22:
                    67:c6:b4:a3:da:91:e2:81:03:30:c8:dd:cd:39:c9:
                    21:1f:5c:29:d9:02:b3:3f:6e:66:86:cf:83:98:67:
                    7c:2b:6d:25:3c:c1:1a:45:e8:23:69:71:23:59:b1:
                    78:a2:7c:67:76:6c:35:6f:fa:5b:37:0a:0d:01:2d:
                    da:15:aa:cf:27:f2:24:76:83:6b:27:d2:24:95:02:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:04:9F:75:2C:98:DC:EC:C6:3F:17:E7:0C:54:CE:FA:AD:5E:7E
            X509v3 Authority Key Identifier:
                keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:52:43:45:15:62:cf:d4:be:b8:45:95:64:a9:f3:06:54:
         e0:0c:d6:11:8c:d7:e7:9c:6f:8f:51:11:bc:59:ad:00:2e:41:
         28:d2:e2:ae:56:ce:d1:24:5b:9d:01:95:bf:58:68:b1:46:fa:
         92:75:20:4d:43:bd:47:7d:e1:62:60:97:26:d7:d2:40:c6:37:
         b7:53:a3:46:60:da:a0:a1:91:1c:18:71:23:fb:7b:51:ee:68:
         a6:4c:f8:01:96:d7:1a:db:35:cc:e8:11:88:6c:26:6d:a9:a2:
         bb:ce:22:e7:10:ff:08:69:c1:e3:a9:5b:d3:82:f8:bc:61:94:
         e5:e1:eb:10:e5:7a:d3:f8:78:29:41:16:19:be:8c:84:43:53:
         20:04:39:5e:1e:b4:49:fe:eb:e3:53:c8:db:24:fb:56:aa:58:
         55:6b:d1:8b:8a:92:32:55:80:33:79:af:ad:46:4d:6e:a3:4a:
         48:1e:cb:24:a7:66:5c:a0:66:5c:c2:e0:6b:76:1f:64:dd:b8:
         2e:c3:c5:c2:06:ac:e6:00:22:ce:fa:73:dc:02:a5:ac:dd:86:
         62:af:ce:21:42:f3:18:39:5a:c4:81:03:d7:ae:fa:8f:1b:16:
         39:ae:42:6c:19:e0:39:99:94:34:ee:97:e2:b0:22:0b:b9:29:
         e2:ae:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----