Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File:                     VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier:          LrwIu95TfuA/XVtR0HEqJqJbNRp4pXPAlCjP/alhnyw=
Subject key identifier:   F2:CD:6F:2F:B6:48:23:32:B2:EF:B8:EB:BE:A3:7E:A8:02:A6:8A:68
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer:       /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial:       01962F3DB015BB8DDC7D635CE7A9187E489E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number:          11FE
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: /CD1DKs0BoZe+w7KmJYKHq2ZgSdG87DZmoNvhhfAukg=)
                          2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
                          3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:15:bb:8d:dc:7d:63:5c:e7:a9:18:7e:48:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=f2cd6f2fb6482332b2efb8ebbea37ea802a68a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:73:a3:08:26:50:f7:3c:01:c7:2a:9b:7f:
                    c7:85:60:c9:86:b3:61:4c:6f:a4:a4:75:25:88:42:
                    2a:2c:ff:15:90:a5:cd:1d:ec:89:63:6e:65:10:04:
                    05:ed:fb:5d:bf:c0:a2:54:a3:7a:12:00:47:69:03:
                    eb:38:81:09:5b:27:d9:f7:25:9e:e9:5b:cd:ce:02:
                    fe:78:4b:bb:1d:ff:13:45:ce:54:6c:55:b5:8a:09:
                    23:f4:00:dc:d4:60:ca:5a:18:08:19:a8:41:56:d1:
                    84:e3:ee:e0:b7:30:58:a5:85:cd:7e:77:3a:79:50:
                    70:f7:9f:fc:03:42:12:52:29:d7:ee:9a:9f:a0:a6:
                    4c:5a:fa:52:f4:ff:5d:82:63:d3:98:8f:6b:7c:00:
                    c8:cc:56:6a:55:e5:40:0d:84:fc:c5:23:e5:85:1c:
                    e3:82:a8:42:59:e5:e8:98:c3:18:8f:b7:66:4d:6b:
                    b5:ca:f3:a7:ef:2a:34:3d:ec:91:bf:5b:ff:d5:24:
                    04:5f:f5:8b:b1:d6:d7:74:ad:31:95:ca:18:77:f1:
                    f2:ce:60:97:66:a8:d0:e8:3e:aa:cf:87:8c:0e:3d:
                    c9:f8:1d:61:61:57:b3:6d:f8:08:fd:8c:67:6f:c6:
                    de:e2:93:fd:83:95:23:48:7b:d4:96:1b:78:22:f2:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:6F:2F:B6:48:23:32:B2:EF:B8:EB:BE:A3:7E:A8:02:A6:8A:68
            X509v3 Authority Key Identifier:
                keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:42:f2:69:42:73:02:e9:92:1d:53:17:f7:a7:b0:e0:ce:39:
         d8:33:18:ce:a5:67:4c:d9:75:d6:d4:35:03:8a:17:69:e3:55:
         94:45:f9:67:bc:c4:df:49:79:ca:f7:86:98:58:1a:8b:78:57:
         4a:df:79:a5:63:3a:65:3f:b6:1f:ae:7f:d4:ff:4c:0d:05:f5:
         df:fe:7f:60:27:95:70:69:5e:e4:1b:dc:34:04:3c:dc:07:be:
         8c:60:e2:9f:0e:5c:45:5f:c7:ff:f2:3b:4d:f0:bf:2a:b4:f4:
         b5:9e:d2:b9:d0:64:f1:9f:17:62:99:a4:3f:87:3f:38:5b:45:
         81:ba:6f:be:6f:5b:0a:7b:a4:be:7f:df:c5:6b:b6:42:aa:d5:
         aa:a5:13:cf:75:15:64:d3:01:ed:49:94:50:9c:e2:dd:99:82:
         40:8f:18:ef:6a:0f:47:2f:a7:31:06:b8:c9:cc:00:fe:4c:f0:
         a0:34:76:53:f2:bb:f4:0d:f9:bd:3a:0d:a7:2e:be:37:05:e5:
         0d:20:fd:17:f4:01:c6:08:c8:0f:bb:c0:81:0e:8b:1c:f3:01:
         a6:39:2f:cd:b0:fe:58:3b:4a:c7:73:32:24:58:c2:ca:8f:dd:
         22:79:88:02:9f:59:2b:ce:f8:83:d1:6b:dd:82:bc:2a:62:f6:
         5b:f5:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----