Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          7Ex7LcEH6aPdbSR2S0PIROpnjeh5iSXUXbwv5LpmrwI=
Subject key identifier:   E9:9A:9F:D3:73:A3:FF:A6:36:23:95:7D:9B:EA:B4:BF:27:6C:E9:FD
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       01962E993D1B99BCD91B4FF0D71BE61ECCFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: Egd29kTFKzbvWNsxer7QLDjqzVM.roa (hash: WGEXpUir7d8rgDB0vYw6cZTjOUVh4VUV5dDVAI/EaoQ=)
                          2: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=)
                          3: ZrQbNRbEdLqI4RVlKT1yQybqDXo.roa (hash: XXmTz5XkOnxm7CN/jGCtklXB3GsrMLKsm627q08kEqk=)
                          4: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: WAFsrKsFjFtFwNkkKETdCqJ2js8ZO7jkiMykRqDHU3w=)
                          5: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:1b:99:bc:d9:1b:4f:f0:d7:1b:e6:1e:cc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=e99a9fd373a3ffa63623957d9beab4bf276ce9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:15:5f:e5:ce:9b:e3:c3:60:e8:2b:fc:cd:
                    75:18:a7:76:63:49:b7:fe:9e:f6:f1:69:a4:ba:68:
                    55:c5:3b:98:e6:6c:a2:47:bd:89:2c:5d:ba:0f:de:
                    ff:e9:db:d8:d5:50:cf:b0:e6:7a:85:9e:cf:ba:4b:
                    93:62:31:19:e6:77:83:97:92:40:0a:a9:2e:71:c2:
                    f9:82:3c:55:bc:a6:7c:a5:e6:28:16:c0:0c:57:80:
                    ef:7d:66:d9:c3:64:7d:f1:4a:82:fa:8b:2b:29:e0:
                    68:f8:9f:71:73:27:c7:66:3f:d4:f0:d3:93:b9:03:
                    77:bc:35:8e:36:36:c6:a6:5e:47:6b:d5:97:dd:aa:
                    79:99:7d:39:1f:a7:77:01:15:22:35:c2:bc:cb:73:
                    2c:1a:ed:c7:ce:29:a5:8b:3c:9f:f5:dc:11:13:b2:
                    a2:17:fa:6b:2d:8d:94:c6:96:a7:06:78:30:9d:31:
                    47:4f:65:ba:69:74:51:d6:60:ae:f9:f4:67:b9:32:
                    bd:b9:37:e5:f4:ed:ad:ef:dd:d8:e3:92:73:11:a7:
                    a0:13:b5:39:48:cf:a9:69:5e:21:5b:3e:dd:24:97:
                    3a:b6:71:1a:7f:ea:d1:89:7a:69:f6:b5:f9:ae:0b:
                    56:be:38:7c:03:4a:2a:99:18:b6:2f:be:f3:bd:c7:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:9F:D3:73:A3:FF:A6:36:23:95:7D:9B:EA:B4:BF:27:6C:E9:FD
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:2b:3a:46:49:6d:d6:6a:18:99:4b:33:ca:9b:18:17:3f:
         3e:2b:be:af:28:32:e0:35:3e:95:61:80:06:2d:07:ea:ae:2e:
         da:71:ae:8c:f0:91:c3:e3:3a:e7:81:db:c3:82:65:31:ef:29:
         4b:95:a5:90:5d:f9:ef:e2:e5:51:d2:91:7a:08:96:c1:dc:1d:
         9a:33:9a:ed:e4:9a:f0:68:0a:29:60:60:b6:c9:b5:f0:7e:e6:
         30:fd:91:8e:a1:0e:87:73:1c:f7:c4:6b:21:cd:3a:1d:ff:ed:
         f9:e8:b3:9c:52:7c:4d:5a:1f:9a:f0:02:cd:51:6a:b5:a4:2f:
         6b:f0:70:85:bd:da:43:c5:25:b3:13:65:5f:ac:17:4d:d1:b9:
         8d:76:7b:1b:d1:91:fe:35:89:9c:16:0c:18:74:97:52:e1:0c:
         ce:6e:4b:25:fa:38:28:bd:84:7c:6e:e8:e6:be:4b:30:af:c9:
         6e:f0:43:28:4b:e7:36:8b:97:ef:d8:2e:07:75:ac:77:8c:09:
         90:a1:3b:e4:66:91:44:28:14:7c:e4:c9:ba:79:b6:95:59:8e:
         b2:0a:80:ec:08:db:44:24:93:24:eb:10:8c:cb:fa:ea:42:5c:
         d0:42:b3:af:95:d7:6a:c9:9a:ec:be:ea:f2:b9:d4:98:1e:22:
         f9:4f:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----