Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File:                     vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier:          jXgLKgO3AQFDDVNY7jZ/t9uXwn/zPbk0Q4gK51izt+s=
Subject key identifier:   19:F5:24:EF:57:DB:F1:95:BF:83:30:11:33:88:C6:60:85:EF:FB:BB
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer:       /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial:       01962E98A1EC8069514E3508986BA70C6E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
                          2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: vUg9tsWAOZ2pdfYurSp0eoq5Oz/S/mx3pT6+JXxHPq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:ec:80:69:51:4e:35:08:98:6b:a7:0c:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=19f524ef57dbf195bf8330113388c66085effbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:08:b8:70:9c:90:fb:23:2f:43:95:d4:4c:
                    a0:15:4d:3d:1b:fe:a9:cf:84:3b:a6:b3:a2:e9:b7:
                    04:ce:9e:55:84:5d:22:87:ee:0c:1f:73:5c:5b:c9:
                    b7:ed:2f:5c:35:c0:cf:ab:5b:9b:06:39:8b:99:24:
                    12:3e:0a:92:b3:16:64:5d:ca:9c:00:a2:3f:fb:53:
                    17:52:47:de:09:81:a8:a2:4f:d0:02:95:9a:bd:8a:
                    30:22:0f:3a:53:d5:d2:85:f2:70:12:96:d7:0c:20:
                    0a:c0:e9:70:10:ec:c8:5d:97:8b:ba:ed:fa:10:64:
                    d2:d1:6e:e5:28:3a:21:be:1d:0a:f6:a9:f1:01:ed:
                    4b:47:da:94:4d:69:b7:f7:b3:7f:6d:0a:64:7d:47:
                    3c:f8:30:a4:be:9e:42:50:96:f5:35:c0:7c:58:da:
                    74:3f:90:6b:4b:35:68:2c:a6:66:9d:52:1a:df:b4:
                    a2:25:e8:48:9d:b3:f4:b0:a9:8a:9b:61:b1:5c:3d:
                    d5:78:d1:5f:83:a1:96:89:7b:cd:43:08:d4:f4:39:
                    b1:91:85:be:1b:27:5e:67:a5:55:5b:88:8e:19:d6:
                    34:b2:b5:ed:8b:1b:3f:61:70:64:d2:1d:2e:a2:fa:
                    10:38:a8:86:7e:19:34:b2:d0:0a:45:a7:58:80:a9:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F5:24:EF:57:DB:F1:95:BF:83:30:11:33:88:C6:60:85:EF:FB:BB
            X509v3 Authority Key Identifier:
                keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:92:6e:5e:ef:24:8c:15:45:55:15:58:fa:58:6e:a8:e4:ad:
         b3:1b:ab:12:c2:8f:87:d0:77:e3:df:56:f7:e9:b2:6d:33:e6:
         0b:94:26:34:13:9d:94:76:d9:00:a7:72:e1:ad:eb:e2:7f:eb:
         09:d6:c9:06:a7:6d:73:05:fb:1c:a3:10:62:a5:19:9a:dc:cd:
         cc:36:ad:ff:d1:15:0b:c4:99:9d:f6:fb:7f:db:f8:2a:92:4c:
         8c:47:ad:f5:d1:c1:d6:a6:a8:37:c5:de:b6:3d:ed:c8:e6:43:
         d7:11:a4:0c:9f:2b:b5:b3:74:09:8b:b4:1a:75:37:2c:e3:f4:
         d7:32:ef:a8:5f:f6:96:47:ef:89:3d:ce:56:3e:76:cb:32:8e:
         70:92:4d:d7:2c:52:0a:ed:34:bf:58:06:01:35:da:b2:16:22:
         bb:0d:cf:52:47:1e:26:01:73:05:fa:64:46:94:b1:06:df:43:
         75:c3:ef:87:91:6d:b3:f3:ad:b4:df:da:bb:f5:bd:e4:82:86:
         e8:c7:73:c1:29:9e:f5:e2:f0:f3:cc:ff:2c:83:ef:ef:d0:42:
         74:1e:3c:48:ec:6a:00:64:61:c6:64:92:47:b5:2a:e6:df:93:
         e0:50:67:f7:08:9e:91:bf:00:5f:65:84:95:39:bb:5d:e9:65:
         23:b1:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----