Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File:                     VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier:          XiYyBPCi9oXRJeo+CnIxKDd0vJXm+pBsR4ywIqi3ULU=
Subject key identifier:   CD:B8:04:16:F0:05:3F:D4:A9:B6:6B:F0:D9:10:CF:C8:59:FA:55:E1
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       01962E98C7FD16FF9E0E3F073A047FFAAFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number:          08B5
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=)
                          2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: rbWrta9EAdrp2TQiJ21vHrBKEIOt0n4vJZEYGAJna4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:fd:16:ff:9e:0e:3f:07:3a:04:7f:fa:af:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=cdb80416f0053fd4a9b66bf0d910cfc859fa55e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:c5:21:56:d8:d4:b7:e3:b5:0a:fd:2d:d2:
                    95:b7:a7:c2:dc:4a:1f:8f:71:5b:2b:36:01:9d:0f:
                    0c:e8:c5:c4:18:53:e9:c6:e6:61:56:ef:2e:10:d8:
                    15:8e:bf:9d:9b:2f:a4:54:50:f3:a5:65:57:40:75:
                    e1:d7:02:37:a2:a8:a9:18:53:53:7b:b5:77:a6:58:
                    64:bc:8e:4d:c3:4c:37:33:51:72:9d:0f:01:39:1e:
                    f7:47:68:ac:e3:10:13:19:25:af:e7:5a:4e:a1:75:
                    05:0f:f6:50:9d:c3:92:db:11:90:70:35:3f:1b:25:
                    ec:c2:ee:aa:ce:1f:d2:9b:07:6a:e1:c9:bf:67:ac:
                    6a:5f:75:f8:14:1d:e1:43:51:25:8b:03:9e:10:a3:
                    1b:f7:b3:09:b2:52:bb:54:00:0a:79:e1:a5:a9:ab:
                    97:0d:6c:75:90:74:8b:40:1b:4a:82:9a:6d:c7:fa:
                    14:2d:a7:97:1c:54:aa:d6:54:70:6a:fd:d6:76:aa:
                    2b:f1:4d:a2:84:9a:11:05:ea:6f:81:9e:12:a2:b0:
                    03:2f:1f:8a:5d:7e:c0:8c:ad:fb:f8:3e:ba:52:ee:
                    3f:c2:45:95:fe:26:ec:a4:9f:b5:b1:69:1c:25:6e:
                    cd:71:a5:58:b7:dd:89:68:bc:ef:93:44:62:27:b3:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:04:16:F0:05:3F:D4:A9:B6:6B:F0:D9:10:CF:C8:59:FA:55:E1
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:67:c0:a0:07:e3:37:12:ee:c9:ba:4b:97:d3:2d:fc:d5:23:
         c5:fd:3a:7b:a7:81:e0:3a:15:be:70:49:2a:d0:77:60:cb:15:
         80:49:ee:6c:12:bb:19:0a:a5:b4:a6:3c:68:6c:cf:30:a1:08:
         c1:92:6d:64:a4:9f:c1:63:1e:49:a2:fc:b3:b6:18:6b:0e:7b:
         b0:8f:16:77:a2:9b:13:fc:b6:7d:bf:63:06:a9:78:cb:3a:1f:
         78:63:ea:4b:69:46:4d:7f:2e:3c:e9:9c:80:ba:f2:72:a2:0c:
         27:d3:70:9c:95:ad:6e:bb:48:04:ae:68:79:41:63:23:e0:da:
         39:0e:ba:2f:0e:79:a3:76:4a:75:23:ba:21:32:e6:74:00:67:
         73:60:cc:71:c2:ff:ba:1b:62:33:6b:42:c0:20:da:4f:a5:63:
         2c:6b:5a:13:cf:b3:60:b8:0b:5b:1d:cf:bb:18:22:e3:8d:7a:
         57:c8:f6:85:82:9c:2f:11:08:5e:72:cf:3a:7c:a9:c4:f7:5b:
         b2:82:3d:71:0e:78:31:cc:d2:8a:4f:6b:09:e6:f6:53:e7:ee:
         64:32:5d:3c:f8:ee:28:07:7f:30:a5:a6:56:e8:21:3b:56:2f:
         43:1e:ce:d3:a7:38:76:dd:9f:95:7d:45:53:f2:45:b6:5f:8a:
         ae:f7:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----