Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File:                     vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier:          IfhSLCBNMFzkGQnjUpVS1q/UbI/+xy0P2uplNaHGEAM=
Subject key identifier:   00:1B:40:F8:DE:19:D0:A5:4B:C3:73:A0:86:69:A2:57:4C:6E:2C:BE
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer:       /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial:       01962ECF70DFBF2EF463A8002F01EED28D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number:          0A36
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: eSUjWOWFoG4fBpBM7G1nGxnJEUEY4/0s9kMHNhICu+M=)
                          2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:df:bf:2e:f4:63:a8:00:2f:01:ee:d2:8d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=001b40f8de19d0a54bc373a08669a2574c6e2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:f8:de:1e:18:04:78:17:54:87:64:75:2e:
                    cd:e7:fd:cf:8e:ff:32:48:c6:d2:fb:76:22:72:be:
                    f8:08:68:a9:79:3e:9a:70:73:ab:59:e2:3b:b6:90:
                    06:0a:f0:b5:1b:44:ea:83:d3:c8:58:0e:10:5d:a5:
                    a3:2c:04:ec:03:36:f8:77:73:76:3e:fb:33:7c:d1:
                    fe:c3:db:bd:0d:a0:d6:5c:81:a8:41:22:a8:46:88:
                    38:39:eb:0d:13:de:06:75:de:d9:8a:75:8c:cb:9c:
                    e1:f7:3c:04:3a:e4:52:ae:93:b8:f8:ce:a8:1e:36:
                    f4:8b:8b:49:ca:cb:16:d5:18:a2:2b:7f:48:51:f4:
                    8e:83:1e:40:72:e9:68:92:e3:e2:6d:e7:aa:9c:15:
                    49:63:5b:94:6f:0f:e8:b8:97:91:b1:e9:1d:84:47:
                    08:69:6c:af:03:09:60:91:6e:a9:52:ae:90:93:2c:
                    03:45:46:ea:7b:f3:05:60:f6:77:82:4d:c8:01:93:
                    02:54:73:3e:8b:24:90:dd:2a:46:f8:0f:aa:7c:c4:
                    f6:7a:04:db:91:54:0b:0d:b9:60:74:68:3e:83:21:
                    f6:e7:ec:bc:49:d5:39:3b:49:36:0b:f0:f0:31:b3:
                    7d:53:a3:21:f2:ea:fd:fd:04:44:87:e8:d4:a8:fd:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:40:F8:DE:19:D0:A5:4B:C3:73:A0:86:69:A2:57:4C:6E:2C:BE
            X509v3 Authority Key Identifier:
                keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:6e:fb:ed:a7:5f:a2:57:9c:3d:65:ac:33:4d:d5:e4:f1:
         4a:22:35:f1:13:48:67:b3:38:d8:2f:35:7c:77:b6:1a:49:6b:
         ae:fb:b1:52:20:26:34:e2:4e:36:c1:9f:4b:4c:48:f6:03:10:
         20:b8:67:91:e5:2e:eb:89:91:cd:9a:61:65:00:b6:7d:a1:ab:
         4b:d5:8d:dd:70:13:4c:69:a1:49:d5:d6:20:6b:33:be:a8:94:
         3b:a5:14:28:54:01:3a:74:be:18:ea:16:e7:71:e6:a5:6a:15:
         07:af:6b:8d:99:d9:b1:ff:d4:ed:22:71:da:18:7e:a9:f4:28:
         11:c2:1d:16:10:fe:bb:06:0c:24:4e:9e:c2:f6:4f:a1:8d:a7:
         f8:9a:70:8e:a2:aa:f2:9c:69:55:83:a9:31:1a:e6:cf:f2:c8:
         da:ce:2f:32:1c:74:44:f3:a7:b8:d2:69:16:5e:6d:37:4c:2d:
         c3:ca:72:3c:81:86:76:43:ec:14:09:a8:f9:a3:5f:4b:0e:cb:
         b9:08:c4:53:b8:c1:da:4c:4c:13:6e:b1:e3:53:db:0a:f7:e8:
         6e:12:b3:73:c2:5b:13:76:5b:f2:ca:0f:54:68:f0:67:c9:e3:
         07:19:24:06:70:cd:f8:cf:95:c9:1a:f8:64:1b:f4:44:80:43:
         56:e8:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----