Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
File:                     vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft (raw, json)
Hash identifier:          aCHC6p6yDNfGfUgLx1qKeuZmC/L5Bbg1fFUDUjObTLM=
Subject key identifier:   5F:57:05:EE:09:EC:20:4D:90:19:9F:33:D1:F3:6B:0C:69:0A:52:0D
Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
Certificate issuer:       /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Certificate serial:       01962E99A07626402059BE47F9F4780349D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
Manifest number:          5C
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: EkTaUypg_pd7rGnsbGXftVikPSk.roa (hash: sEhgMg8C+XnNqF8zClrkN2E7JsFwEbgtXl2it8CHZBU=)
                          2: vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl (hash: 5sAWvdD6iqpEQja9O7SBQ6KYeFzsXVUnDzEVJa4C8WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a0:76:26:40:20:59:be:47:f9:f4:78:03:49:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=5f5705ee09ec204d90199f33d1f36b0c690a520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:35:31:39:3d:c0:e4:22:d2:59:c1:9e:e8:
                    a3:8d:35:52:9e:66:ee:41:14:83:71:50:a9:76:87:
                    88:07:5c:e7:24:fe:bd:88:b8:3f:70:66:05:95:2e:
                    9a:a4:b2:04:4e:de:51:37:58:ee:ca:8d:7c:9b:78:
                    ba:ab:cf:06:cc:9b:0d:5f:9b:15:9f:6b:0c:e5:1c:
                    49:50:17:83:c4:9f:be:c1:00:7b:1b:0b:0a:91:a4:
                    fa:70:36:97:a7:01:39:85:27:b6:46:1b:22:c5:1f:
                    c6:50:08:92:25:d6:2e:d8:5a:ca:fa:b9:e5:0d:ea:
                    90:e5:77:4a:aa:9a:d5:14:9b:2d:c3:1d:57:34:d2:
                    0f:9f:26:77:d1:a6:a4:12:60:38:e9:b8:51:93:f3:
                    e2:1b:4a:b8:06:5a:d1:46:ae:9d:7e:c9:72:f9:10:
                    b8:8c:09:96:93:bb:83:dd:e7:c4:da:49:7d:c3:e5:
                    2c:31:74:eb:2a:da:f7:10:a9:54:b2:88:57:a7:54:
                    29:e1:8b:7d:e3:ad:9b:b8:54:39:38:f9:15:c3:ae:
                    ab:aa:4c:45:a4:5d:f0:c1:1f:be:59:5e:c8:28:78:
                    6c:1e:85:c7:ad:62:86:02:74:c4:a2:9e:7f:97:14:
                    5f:60:c1:4a:52:01:22:90:33:90:d3:a3:9a:36:ae:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:57:05:EE:09:EC:20:4D:90:19:9F:33:D1:F3:6B:0C:69:0A:52:0D
            X509v3 Authority Key Identifier:
                keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:1c:8e:ca:e0:9d:8f:a7:98:c6:9b:a5:d9:54:55:aa:21:
         0a:a2:68:00:35:b7:9b:da:d6:6a:6d:33:d3:c0:20:59:07:49:
         b8:c9:d6:42:6c:a5:5b:ce:39:34:87:b3:33:36:6a:79:b5:8a:
         e5:82:12:ca:48:47:f1:3f:03:ca:f7:d4:a0:bc:00:56:a2:5e:
         f4:b9:aa:82:d1:37:9f:66:1d:b5:a9:58:8c:05:81:8a:97:b3:
         de:19:d4:e9:c8:76:68:81:15:fa:ed:d0:56:d6:34:1e:a9:8f:
         55:3c:75:8b:5b:d6:9b:f1:7a:dd:85:d8:04:34:db:15:23:8f:
         04:7d:d4:23:fa:a7:27:db:aa:4d:c1:2f:85:c5:c4:9b:c2:8c:
         16:fc:6c:eb:aa:25:a4:9c:3f:ff:ef:53:e9:44:23:78:81:01:
         d2:7d:32:0c:22:25:dd:98:87:2c:79:dd:45:38:b8:28:c6:98:
         fa:8b:2f:39:66:5c:64:87:de:15:ac:9c:35:38:c3:ec:06:5a:
         0f:5f:8d:37:fc:55:16:f3:92:49:56:4d:f6:0b:1d:f0:08:1b:
         2d:a0:19:5c:cd:31:7a:c8:d7:25:7e:78:58:17:64:03:90:a5:
         10:42:a3:c3:2c:de:76:64:5a:fb:f7:39:5e:d9:ac:1f:66:62:
         75:c7:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----