Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File:                     VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier:          mobWn3Hnk7QDgX9en5+cyP4kkIvVvDLFySw8H2JcTzw=
Subject key identifier:   B6:D3:6D:7E:43:BC:59:A3:7B:38:0A:B0:FC:FE:BB:BA:00:CF:8A:FD
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer:       /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial:       01962F0717FF0E0ED2D4BDE13ADC0BD75EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number:          0A7F
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: 05rHFfc3y+CCAzX1rdqhWsRIAWA8d1lzBEzbmcugWGE=)
                          2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:ff:0e:0e:d2:d4:bd:e1:3a:dc:0b:d7:5e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=b6d36d7e43bc59a37b380ab0fcfebbba00cf8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:c2:fa:fd:21:31:05:5a:7c:ca:c1:34:61:
                    61:ce:62:ce:b9:d9:bb:a7:c4:88:5d:e1:8f:14:f4:
                    a6:77:bd:dc:cb:f2:7e:88:f7:44:4b:7e:5e:1c:d8:
                    2c:e5:2b:28:4d:41:81:59:26:1a:a0:6e:eb:ed:61:
                    c7:38:dd:b1:73:52:2e:1a:4b:2c:cd:e0:cb:6e:83:
                    94:fd:2c:6d:d6:e9:bd:95:f9:e9:10:90:61:96:6e:
                    88:06:1a:f7:d9:46:1b:6f:99:f9:bd:aa:da:8c:69:
                    d1:f5:a1:ba:a4:8f:8b:17:71:dc:3b:38:6d:53:04:
                    5a:b4:89:49:b0:7c:60:02:6a:cf:9d:65:10:69:92:
                    7f:8f:ae:8a:f4:b8:e6:80:e9:0b:c8:e1:6e:e8:dc:
                    bd:71:fb:9f:1b:0d:23:96:33:de:22:71:84:eb:8d:
                    b1:53:72:b8:28:e4:56:74:59:cc:8f:99:b3:cd:dd:
                    8e:93:83:1a:5e:10:b6:67:6e:b4:d7:6a:24:e3:f2:
                    e3:e4:9a:77:58:a2:ec:0d:5e:48:cb:5a:16:c4:31:
                    2c:e0:e2:81:6c:a3:9e:2e:09:8b:79:77:d1:9c:a0:
                    2f:3d:a5:ab:25:46:87:96:6e:5d:b0:bc:8b:77:30:
                    b6:c3:5c:1b:de:4e:4f:ff:0f:07:06:b3:88:6c:71:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:6D:7E:43:BC:59:A3:7B:38:0A:B0:FC:FE:BB:BA:00:CF:8A:FD
            X509v3 Authority Key Identifier:
                keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:78:2c:7d:89:3b:2d:f4:d4:e1:33:6b:69:a6:9d:b5:2d:
         4e:bc:1e:63:d1:8e:01:17:3a:9c:a4:0e:47:ba:3f:24:63:6c:
         76:1b:8a:73:68:81:e4:e1:2b:8c:7c:67:a6:ff:01:10:31:d9:
         f3:3e:80:c6:a5:d5:8c:be:0d:cd:1c:cd:0f:33:68:68:b3:0b:
         f0:30:3e:32:70:fe:ec:3a:f4:19:aa:70:a9:38:db:49:c0:55:
         5f:ba:72:29:b7:cb:bc:3c:22:00:5c:f6:96:ff:38:60:86:82:
         90:8b:69:e1:ff:a9:dc:7b:58:22:09:ed:7b:26:92:d7:c7:5b:
         35:88:24:89:ab:c7:09:62:c6:0f:90:e1:8a:88:e6:33:57:76:
         1e:d0:f2:9c:f7:c3:44:62:fd:4c:53:62:f4:c0:94:3a:f6:9a:
         a0:00:12:a9:e4:93:a9:07:da:95:74:e2:3b:22:a1:c9:ba:98:
         8e:28:ee:3b:a9:04:e1:78:53:2c:c0:df:59:8e:da:9f:6a:e8:
         4a:47:5d:fb:eb:85:e9:8b:08:8a:6a:7a:de:2b:68:d6:b4:71:
         de:b4:35:76:fd:84:93:eb:b1:ea:66:0d:22:61:f2:6d:8e:c5:
         25:d9:e7:14:8f:56:02:43:1a:38:34:0a:d7:66:2c:ad:6f:61:
         0e:5f:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----