Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File:                     vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier:          XtoKtOVuJYgOxWSj0Xxksu7orJcHGL6xhGZGZHznMo0=
Subject key identifier:   B8:61:FF:D7:E4:A0:46:FD:14:FE:CF:95:9E:C4:63:4D:31:24:CD:97
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer:       /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial:       01962F745541DCB72B8E8CFCFA58B3F0B7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: Mr0KeZ0NItb6HriVcPiB2o7WGw8LoGT/BjL2PQ391lQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:55:41:dc:b7:2b:8e:8c:fc:fa:58:b3:f0:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=b861ffd7e4a046fd14fecf959ec4634d3124cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:96:aa:cc:e8:c9:c5:31:83:62:ef:8b:77:
                    2d:0a:50:64:0c:fb:95:67:1a:70:2e:e7:f3:85:92:
                    47:77:45:62:49:a5:d7:86:83:ff:e7:a9:2c:bb:8d:
                    55:27:97:e5:74:05:6d:ac:fc:82:60:57:28:e5:aa:
                    0f:81:34:ae:b8:bb:3f:44:93:a8:71:62:2f:45:92:
                    73:71:a3:ee:d4:b8:54:fc:b6:4a:38:cb:05:ff:98:
                    32:9f:63:83:a5:21:88:9e:61:9b:45:27:67:a9:51:
                    ff:ba:cb:9c:fb:a8:53:49:cc:55:f3:d6:2f:e7:b7:
                    61:8e:fd:72:8a:1c:dc:6f:9e:60:0f:aa:e1:c4:b0:
                    54:89:39:0d:30:2c:e9:bb:75:43:0f:5c:58:1d:15:
                    83:50:ab:2d:32:2a:63:e0:74:ad:cd:ef:5c:05:de:
                    14:5f:1c:9e:7f:d3:a3:b1:2f:6b:a7:2a:cc:7a:4c:
                    c3:f7:eb:d4:e0:59:8d:dc:3f:0a:36:1a:4a:98:d4:
                    b0:a0:63:0a:58:fa:38:7a:0b:f0:80:e0:b0:8f:fb:
                    ec:7b:00:6d:3f:21:bc:b1:98:c1:ec:f2:4d:2a:18:
                    fb:a0:4e:e3:bf:d2:8c:61:85:6d:4f:c2:c7:96:67:
                    e2:88:fb:88:f2:f7:9e:dc:a9:fb:06:6a:22:6e:a0:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:FF:D7:E4:A0:46:FD:14:FE:CF:95:9E:C4:63:4D:31:24:CD:97
            X509v3 Authority Key Identifier:
                keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:f7:fd:94:e9:0e:d4:13:3a:50:87:3e:58:6c:61:43:d6:
         2f:19:e4:60:d0:05:7e:ec:05:f1:b5:5f:0d:65:82:a0:b4:91:
         72:ad:76:44:ed:28:af:8a:a6:21:19:85:30:e7:2f:a3:3f:29:
         79:7e:31:51:cc:be:50:76:12:49:d3:a9:72:dd:d9:4a:60:94:
         6a:17:ca:2f:ed:ff:95:5e:ed:d3:24:48:2f:da:f2:68:5c:da:
         1e:05:8d:a6:5e:f3:1f:2f:64:b6:1c:a1:5f:94:99:bb:c3:6c:
         94:0a:34:7b:23:6d:06:da:15:c9:bd:d1:c2:1e:49:6d:22:9c:
         c1:b8:6d:a9:ba:18:52:12:b4:80:f2:a3:1d:30:00:fd:1c:c2:
         21:35:aa:e2:31:58:18:59:d1:eb:d9:08:a3:c7:0d:f8:82:de:
         b3:b9:9b:ea:68:54:2a:bb:4a:d8:1c:0a:bc:87:ea:43:5f:f4:
         96:80:a7:3e:21:ff:d8:3f:2a:ac:29:a9:bb:c0:d2:88:ec:6a:
         32:6d:b7:13:1f:62:fa:f1:d6:07:a7:f8:19:d8:a9:55:49:7b:
         a0:44:27:af:3c:e6:b7:ff:a5:18:2d:ea:08:c9:55:69:ea:5c:
         65:69:9a:2b:b5:46:95:07:02:3f:c3:52:ba:52:51:fe:34:92:
         fa:ae:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----