Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File:                     VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier:          /DrWGAJyuoKrToiYP8y9M0XedWivguk0HeAjnvqNsQo=
Subject key identifier:   3A:C4:F7:4A:76:2A:CF:CA:E0:E7:D2:F0:74:E3:C6:48:21:67:E0:DC
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer:       /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial:       01962E9929D5CFDBA25C9F2BA0407F3C581F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number:          0FD1
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: neWDpmInpMbOfeXQFwTRWinwy/JgymjLqMdSO0rGN5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:d5:cf:db:a2:5c:9f:2b:a0:40:7f:3c:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=3ac4f74a762acfcae0e7d2f074e3c6482167e0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:15:0f:f4:e1:b6:d4:4e:42:c2:ae:75:3b:
                    89:bb:5a:24:13:9f:41:ac:a6:ce:48:a6:9d:cd:76:
                    88:01:8a:ad:54:fd:21:c7:ef:05:99:24:0d:21:0a:
                    74:52:dd:15:81:bc:13:b2:f3:19:62:aa:a8:92:7e:
                    80:7c:7c:c8:54:70:a7:8e:3c:ae:11:ee:7b:bd:4c:
                    7d:ce:89:f2:0a:81:1f:ab:aa:f2:ad:6f:cd:7a:88:
                    23:a8:82:24:3c:cb:f8:59:2a:e2:32:26:cb:b3:a9:
                    db:a1:7d:ec:97:47:37:f2:51:39:8b:91:3b:57:9f:
                    ac:27:d6:36:a9:d4:85:c1:af:a8:9a:a2:89:70:ed:
                    a1:c7:81:79:14:b8:f6:ab:e7:e3:40:da:69:a6:32:
                    c6:c4:e1:29:f5:0f:47:fb:57:2b:03:06:93:f0:d3:
                    21:91:d3:09:3b:89:44:ed:4a:2b:2b:00:b6:67:e8:
                    df:0f:fb:a4:b3:8b:44:33:39:01:8d:c8:1e:23:97:
                    c7:41:a8:6c:23:47:a9:f1:74:da:1b:0c:da:cf:2a:
                    ac:51:f9:73:56:2e:63:4a:5a:e5:7d:84:a5:03:79:
                    e3:aa:36:54:6c:48:b1:9f:ea:d2:7b:af:6a:e3:e5:
                    c2:b7:7f:ae:0d:46:3b:7b:35:dc:66:b4:32:a8:aa:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C4:F7:4A:76:2A:CF:CA:E0:E7:D2:F0:74:E3:C6:48:21:67:E0:DC
            X509v3 Authority Key Identifier:
                keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:06:75:56:d6:0f:5b:22:4b:fd:c3:73:24:60:f9:94:ff:
         38:36:ad:dd:6e:b1:e8:bf:b2:3b:28:4e:9b:4b:b9:5e:56:14:
         a2:21:a1:1f:d2:b7:c1:b7:56:50:79:ba:6e:2c:c6:24:ca:3e:
         2d:5e:c9:51:e7:e2:16:f5:31:8a:b8:b1:98:c9:46:d5:d0:9e:
         e9:81:5b:13:20:c1:b2:87:d6:19:d3:0d:91:4f:f7:76:4c:b4:
         ef:94:2e:8a:26:bd:f6:7f:3a:85:e7:11:e8:49:f4:e6:17:52:
         69:c7:dd:d3:28:01:42:7d:b0:f6:79:0e:3c:b3:b8:de:21:64:
         b0:fc:7f:fe:a5:16:51:73:b3:f2:b7:0d:35:55:75:9a:06:9e:
         0b:cd:ac:ed:10:80:e5:a6:c6:e0:d8:12:2b:22:39:b9:22:98:
         3c:bc:a4:0e:9a:85:33:e3:7c:5f:80:9c:a2:46:0c:88:49:24:
         43:9b:3a:4c:75:e9:89:5c:05:b3:7b:06:8a:ed:1d:59:52:2b:
         c6:9d:19:92:5c:98:e6:26:f7:c0:ed:68:dd:b0:0a:75:2b:a5:
         fb:f1:37:84:74:a7:22:28:2a:60:92:27:69:29:bd:65:16:9f:
         51:04:3b:44:97:79:3f:1b:0b:29:42:f6:52:17:05:cd:02:54:
         68:f4:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----