Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File:                     VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier:          1q/fF7aXIxLLTZptbWIZT3I3ojQxHNvawQiacREYYVI=
Subject key identifier:   D0:B8:89:02:78:83:25:DF:1F:91:42:FD:21:1A:34:5D:4B:0E:CD:A5
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer:       /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial:       01962F74254E123CD4024327EAC3235CE83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number:          1082
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
                          2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: 2qQ2uONw+bXdQYRyZh5ezC9ct7lPTCeym5Vrat/cxws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:4e:12:3c:d4:02:43:27:ea:c3:23:5c:e8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=d0b88902788325df1f9142fd211a345d4b0ecda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:f0:9e:9a:10:d5:8b:93:37:5b:5e:21:17:
                    d2:61:0b:f8:5f:9f:aa:12:e4:67:20:18:b1:9c:c3:
                    4d:78:6f:b5:7d:cd:98:68:87:56:e9:f4:a5:4d:11:
                    50:f5:02:e0:43:95:e6:69:11:81:37:75:de:9d:51:
                    b0:99:f1:72:30:b5:f8:ff:66:c7:b4:ed:ef:a7:ff:
                    5e:27:87:3e:62:3d:d6:85:96:61:ca:5c:dc:62:e7:
                    ba:47:d2:b2:64:40:bd:1a:5f:33:82:91:16:0c:a0:
                    df:8f:4c:a3:d8:66:5d:24:27:d3:ed:13:3b:60:1e:
                    64:7e:5e:87:33:24:2b:21:53:f0:fb:51:04:98:b2:
                    08:33:9d:5b:1a:4e:2f:7d:bd:22:cc:f2:d0:f6:08:
                    b6:24:21:cb:e3:8f:57:f9:34:95:8e:c9:34:16:bb:
                    eb:b1:4e:5c:f6:79:f4:52:7b:90:86:ba:1a:61:03:
                    54:39:e8:81:e9:3b:ff:79:bf:63:63:71:88:ce:4a:
                    38:83:5a:fe:06:88:af:56:ef:50:57:0d:c0:93:15:
                    1e:48:70:7c:92:df:27:37:a0:d8:46:fd:cc:00:f5:
                    a4:8a:ce:6a:65:67:be:5f:28:92:ce:c1:2f:c3:b2:
                    cb:4d:45:18:9b:04:2d:f3:1a:ee:7e:46:81:12:a7:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:89:02:78:83:25:DF:1F:91:42:FD:21:1A:34:5D:4B:0E:CD:A5
            X509v3 Authority Key Identifier:
                keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:df:3f:b3:77:3b:f8:76:3d:0c:90:8c:ec:d3:e9:66:aa:
         9a:8a:7a:9c:30:de:24:d7:17:10:45:fc:3a:60:d5:30:52:38:
         4b:05:fa:d9:29:7a:35:13:ee:39:7d:91:62:be:ae:0e:fe:95:
         5a:69:8e:f5:35:c3:80:5d:6b:61:5d:d1:aa:ed:1d:d6:af:02:
         cb:8d:50:61:9a:85:de:5b:2f:68:30:b5:f7:40:20:46:36:a8:
         37:77:f9:cf:e1:45:2f:bb:b4:a3:88:e6:fb:f7:03:fc:1e:ab:
         ef:c4:c4:26:d7:c0:ce:e1:52:49:6e:cf:cc:77:e6:40:f3:48:
         15:89:5d:c4:88:d2:44:7f:f4:2e:38:bf:a0:1a:5f:90:30:9b:
         93:21:be:c5:91:c5:53:24:8f:4e:e4:1c:d5:ec:b4:0c:7c:28:
         49:f6:a5:15:11:b1:cd:6d:7d:79:40:5c:9a:39:e4:47:3a:bd:
         e1:bf:e4:0e:36:29:4b:65:df:fb:90:43:bf:cd:48:e2:65:b3:
         ef:8f:96:60:2b:dd:5b:6f:f9:c1:29:05:b1:18:6e:48:56:67:
         c7:fd:fd:84:e6:cb:44:c3:de:7d:38:94:ee:e1:e4:bb:12:bc:
         b9:7a:49:b6:0a:1b:7e:87:f8:d3:50:c1:16:d3:4b:e3:8e:67:
         03:83:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----