Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File:                     vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier:          Kfuh1uejlWlH/Dd+XWt9g1ampBomf+R0F7VL1qqpZVY=
Subject key identifier:   F0:9C:A5:1D:A4:CE:03:44:E0:C7:D3:51:E1:0C:37:FF:5A:B9:A5:18
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer:       /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial:       01962F7499172B96C11C1FA74452DE1ECCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number:          0E6A
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
                          2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: LRTx9guNlCWwmSFbyZ+rNj1u4pKNv/dquJxTP379GKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:17:2b:96:c1:1c:1f:a7:44:52:de:1e:cc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=f09ca51da4ce0344e0c7d351e10c37ff5ab9a518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:a7:3a:2d:4d:0d:4e:45:d8:f3:24:d1:b6:
                    2e:52:d6:10:fe:a0:63:fc:c5:6d:4e:32:61:f4:b5:
                    d7:1c:79:3e:69:a3:c9:2b:aa:fb:1f:5a:d4:34:91:
                    ae:0c:b7:1a:0b:f9:b3:b7:3c:54:6a:81:7b:a0:bd:
                    3b:36:a2:d7:d1:f4:76:f6:93:38:04:90:1c:1e:f3:
                    a7:e7:e8:96:48:c5:81:2c:20:a9:b4:97:dc:7a:ae:
                    9b:bf:17:88:93:75:5a:40:55:dc:02:45:82:e8:36:
                    95:c4:2c:66:37:7a:d6:63:9a:f7:fc:66:b6:b7:0a:
                    d8:ba:03:90:a2:5c:e7:7a:5f:97:a9:63:dc:81:fd:
                    eb:dd:63:44:85:fd:d0:8e:b2:7f:2f:69:7e:40:a6:
                    3a:c2:42:97:18:8d:0c:fc:a8:6a:d0:e0:b3:33:f7:
                    a9:ea:0b:52:3b:4c:64:db:1f:1e:c6:3d:59:2d:28:
                    d8:ba:24:43:5b:9e:ef:f0:69:b6:70:12:51:9f:fe:
                    2f:74:df:0f:58:fe:09:3c:e9:16:c7:01:d9:f2:64:
                    b3:82:98:c5:ad:52:80:09:11:6c:ee:91:ab:8f:bd:
                    61:2f:f6:ba:52:5a:77:e5:3f:15:4b:83:a6:04:1d:
                    9d:c0:39:de:a9:0a:8a:4d:86:25:ec:a2:8d:b7:91:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:A5:1D:A4:CE:03:44:E0:C7:D3:51:E1:0C:37:FF:5A:B9:A5:18
            X509v3 Authority Key Identifier:
                keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:44:ed:3d:e7:33:45:3d:46:6d:a8:e8:14:31:6a:aa:ae:
         41:bf:36:5c:a7:a6:46:3c:03:52:b3:7c:dc:db:c5:a6:bf:73:
         4e:33:f8:e5:01:4c:2f:4c:c0:5f:e0:c8:25:a2:4c:80:c1:22:
         20:2d:33:11:e8:5b:37:3b:e9:74:fc:94:ca:c4:62:14:82:37:
         42:3e:5b:7a:74:c8:60:a6:33:6e:d5:f5:49:77:23:e7:b7:71:
         cc:42:ff:cf:d6:c7:d9:3f:ec:0c:10:8d:23:bd:1b:15:a5:e2:
         02:72:4a:bc:d4:0e:6d:af:44:a0:15:da:5d:35:d9:a1:ba:4f:
         85:e1:a6:b0:bf:8b:1b:67:b4:bf:f5:69:5d:5d:e0:20:b8:93:
         30:c3:bc:2a:cf:67:1a:16:b4:03:19:81:75:57:ef:19:52:38:
         6d:e0:f6:fe:ae:f6:d9:df:2e:92:1e:82:58:cc:46:f2:2f:b3:
         25:d3:06:94:ad:d8:c0:f0:ec:40:d5:b8:6c:0d:be:ab:90:b7:
         4a:91:53:ac:19:bb:fe:fe:05:31:54:88:0a:f8:43:91:33:20:
         bc:b0:13:64:38:2e:30:87:29:47:90:f9:4e:64:60:48:d0:70:
         a7:14:3b:68:ba:be:de:21:cb:12:18:fa:c3:4b:0e:e1:81:05:
         93:d9:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----