Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          tN+YcRG0AMip05K3OlsEbwRrb4cbFsLasujYu+t++RA=
Subject key identifier:   88:E8:F1:34:DA:00:7F:95:B8:98:37:0D:A5:D3:9E:F4:1B:A7:7C:2D
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       01962F74BFB61B8C5880A475BF2301CEDC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          04FC
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: wKzukBQw4m/uWRYH4/GJeJHKF15VAz80XDHDDKjXzaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:b6:1b:8c:58:80:a4:75:bf:23:01:ce:dc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=88e8f134da007f95b898370da5d39ef41ba77c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:8a:55:82:8d:72:9d:65:97:29:60:29:6c:
                    84:0b:6a:e2:b4:30:83:34:16:61:1e:de:60:4b:1b:
                    f2:ce:30:41:5f:cd:c3:ce:41:17:9d:ea:ec:78:f2:
                    ac:7d:83:f4:5d:bf:0f:45:6c:7b:f6:6c:09:58:95:
                    0c:94:a3:91:a5:1f:a2:97:ff:97:94:93:09:f0:f8:
                    e3:84:20:13:cf:fa:74:70:61:78:75:a5:ec:4c:3d:
                    9a:c8:2e:1b:81:57:7a:2b:ed:0e:ef:c6:6f:13:db:
                    06:3e:fa:58:02:c5:66:13:63:13:4b:ee:97:bc:a0:
                    06:6b:c7:3b:e9:fd:b0:f7:a3:0b:ac:4d:ee:82:49:
                    2d:cf:5b:f9:1f:98:01:56:e4:16:61:f4:16:d4:56:
                    48:0f:eb:ad:be:59:4c:9b:f5:68:c0:70:cf:57:c0:
                    8a:f6:c4:13:59:aa:4f:c9:73:21:24:bd:6b:0e:4a:
                    c2:c0:04:39:25:4f:c3:4f:7f:95:ca:0f:47:c3:fe:
                    f1:24:b3:3c:2d:b0:08:e2:c4:ed:0c:ca:c0:d7:50:
                    c1:3b:d2:2f:18:34:12:36:4e:6e:18:28:8b:7c:d3:
                    21:80:40:ae:5e:6e:c6:16:cb:4f:70:5f:a1:03:80:
                    54:eb:f4:05:f5:99:82:8b:29:4c:14:0a:be:aa:d1:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E8:F1:34:DA:00:7F:95:B8:98:37:0D:A5:D3:9E:F4:1B:A7:7C:2D
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:cd:9d:31:27:eb:f3:77:7a:a7:e9:91:e0:0c:c1:d0:82:
         eb:92:6f:a8:70:d9:5d:44:1a:c0:7a:04:fc:4f:6e:d5:31:b1:
         af:3b:1d:f4:bc:47:b8:a2:0c:91:9f:3e:d6:a9:1a:7c:34:2d:
         a8:bb:3b:e3:50:4d:05:12:7f:f9:23:b1:ed:bc:15:8e:8e:11:
         0b:cc:72:dd:f7:28:df:2b:5e:bf:75:2e:58:11:84:62:c2:58:
         da:ee:50:e5:81:84:33:12:1f:c7:bf:f5:a6:db:28:44:3a:9f:
         66:24:32:2d:af:a9:cb:a2:1b:2e:18:dc:ff:c2:42:2f:ec:f5:
         09:55:d8:bb:22:c7:01:ce:6d:7f:69:5e:f8:03:4a:20:88:e6:
         e5:9d:cd:48:e3:d7:65:50:3c:f2:01:ec:20:57:b3:cf:b3:43:
         66:74:a0:ed:78:37:3b:37:2e:04:c8:3a:85:ba:a7:29:14:93:
         0e:53:3b:7f:63:13:9e:bc:04:27:73:65:aa:13:5e:d2:5e:58:
         ab:3e:ef:53:ec:27:30:4b:8f:9f:f0:36:87:0e:60:e7:1f:ae:
         d6:83:c2:bc:00:fa:4e:90:95:bd:30:4c:e0:b4:8c:87:12:37:
         c2:c9:53:e3:f0:8e:c5:2f:75:b5:be:cd:08:de:68:72:5f:62:
         06:ca:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----