Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File:                     Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier:          Z22UJYUSL2VSwbdnStbCtUb/LAP+QCiVZCkxiaf/BrE=
Subject key identifier:   00:FE:A6:D5:1E:46:11:5A:8F:DA:A6:8D:76:65:BC:4E:3E:E2:B4:73
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer:       /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial:       01962DF3EF3DACEF6A9534A50159D690F95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number:          0239
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 7uuYIODPb_AxpEbSkXG4ikwEz-8.roa (hash: H14+KgaSvxKeyLjcS++jAl+BQPd40Sm8S2VRvJlA/xs=)
                          2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
                          3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: nrAs2/QTbxepiZc+eMW0E93mVYVj5hUyObPxu+XZtUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ef:3d:ac:ef:6a:95:34:a5:01:59:d6:90:f9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=00fea6d51e46115a8fdaa68d7665bc4e3ee2b473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:83:63:61:a4:1d:ee:9c:35:29:b2:d8:f1:
                    eb:9b:5b:1c:9c:10:0c:1c:9b:80:36:3f:b7:27:a1:
                    a1:46:0e:a6:09:24:66:f3:54:83:2b:81:75:d1:25:
                    c2:ed:3a:0f:cd:8f:ef:6b:3f:26:1b:70:a9:d1:16:
                    7a:97:1f:49:76:9f:23:c7:7e:69:45:72:6d:01:17:
                    84:e0:c7:b0:ca:68:6b:4a:ea:75:96:7a:54:1e:a5:
                    c4:2e:e8:e4:2d:7c:57:da:48:47:e0:32:a3:eb:94:
                    fa:bb:d3:94:f8:9d:e8:66:28:f2:c8:b3:bc:3a:8a:
                    35:a6:58:ac:3e:f5:9d:f3:f2:4b:3a:3a:9e:85:b8:
                    af:e7:4e:a5:a5:61:77:e1:13:0d:b3:f6:2a:47:75:
                    f4:b6:f2:75:4e:0b:00:cd:9b:5a:e1:bf:d1:59:1a:
                    a5:28:c2:63:1f:1b:63:87:d0:a5:a5:35:18:cf:85:
                    07:49:a6:39:0d:e9:77:bf:87:94:3d:38:35:89:e6:
                    29:43:21:60:de:41:91:49:53:2d:f3:b2:85:5c:43:
                    cd:30:03:ac:72:a9:7b:72:9d:2a:64:c8:71:29:ba:
                    19:be:10:f2:47:88:40:3d:fd:f1:a0:23:ef:ff:5e:
                    a4:35:4f:56:00:07:fc:31:76:f3:79:24:63:56:7f:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:A6:D5:1E:46:11:5A:8F:DA:A6:8D:76:65:BC:4E:3E:E2:B4:73
            X509v3 Authority Key Identifier:
                keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:f9:f5:e6:23:af:99:da:9b:64:b7:9a:98:d5:da:42:34:
         16:c6:7f:9c:e0:74:37:62:6f:00:4c:bc:f6:0c:bd:f7:06:9b:
         66:03:ee:ab:3f:9f:41:4a:5a:5e:b8:75:11:90:94:ff:99:b2:
         10:b1:74:22:2b:b7:63:f8:11:57:a9:05:db:a2:b1:ca:e9:90:
         93:18:a8:3a:b3:1b:2d:7d:6c:11:f9:83:af:37:66:40:39:88:
         69:c7:02:fa:d6:2e:4a:bc:d1:09:0c:02:3b:14:c9:bf:49:47:
         80:b5:61:5e:a4:55:7f:de:55:04:15:59:0d:9f:99:51:bc:ff:
         ef:fc:a4:fc:b6:6f:9e:8f:42:5a:d8:0b:36:84:db:10:c7:e3:
         41:a9:9d:63:f8:6f:77:16:49:5b:7a:62:29:5a:ef:91:f6:1c:
         24:80:91:a8:0e:fe:4d:27:08:d6:45:42:a0:73:d3:bb:64:60:
         3a:26:a9:45:b0:af:e0:73:05:bc:d1:a4:30:e0:0f:eb:a0:88:
         21:68:67:6f:bd:6b:da:70:0a:4b:7a:4a:8d:17:2d:39:8e:ae:
         79:54:9e:d7:7a:9c:fa:98:74:d5:2d:2c:cb:ed:58:17:ff:16:
         95:b2:ee:d8:81:1c:8c:11:9e:52:67:25:84:80:a3:92:50:73:
         68:a6:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----