Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          25nPXoWKmEYL2c9Pc7m3jlpeTLXCjnwmdFOGKl9fGiA=
Subject key identifier:   A1:FC:BF:E7:EC:EB:CA:6C:E1:40:74:F9:E2:2B:BF:05:83:A2:89:CF
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       01962DF421166F58171660D6CD4E006C6CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: AjFOsIYrRwjFCpVuFXrD9MA5hkRT6fPvuQo6gUwua1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:16:6f:58:17:16:60:d6:cd:4e:00:6c:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=a1fcbfe7ecebca6ce14074f9e22bbf0583a289cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:90:e8:69:58:c4:17:5e:ea:87:aa:25:91:
                    d4:47:94:3e:b7:2a:7d:18:95:9d:3b:99:26:ec:65:
                    f1:3c:20:75:96:cd:87:2b:a0:ab:db:5a:bb:12:bd:
                    6f:a7:37:73:dc:4e:8f:5b:4e:0c:6c:7b:d5:66:3c:
                    df:7a:a1:cd:43:75:7b:76:70:34:16:1d:c2:a0:71:
                    07:f5:04:27:c7:69:6a:35:4e:16:76:a2:11:3b:d3:
                    bd:55:84:6a:85:db:dd:6f:3c:14:72:48:73:32:1f:
                    55:e7:b6:62:ed:33:06:51:61:89:ad:4f:f3:19:4b:
                    eb:5d:0b:07:db:3d:6a:82:26:95:91:40:85:4b:68:
                    c0:83:9f:e5:b2:53:a4:88:2f:11:50:aa:23:6f:87:
                    63:8d:6c:ed:25:8e:4d:d8:db:bf:31:3d:55:ae:a3:
                    99:18:d8:3c:47:ba:8d:e3:e2:83:c3:27:0c:cf:0b:
                    71:7f:a8:c1:37:1f:8b:03:d3:da:de:2b:cc:7d:4f:
                    13:86:0a:e3:0e:4b:7a:03:cf:65:54:ab:8e:9b:65:
                    33:b3:66:f8:8e:bc:8e:6a:2b:30:9d:52:d2:7c:f9:
                    d4:89:41:5a:fe:f1:1b:14:07:82:db:5c:4b:9d:44:
                    57:fd:2c:3f:05:3a:62:3a:fe:73:cf:36:46:2d:a5:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:BF:E7:EC:EB:CA:6C:E1:40:74:F9:E2:2B:BF:05:83:A2:89:CF
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:90:e9:57:7c:51:ad:dc:aa:46:e7:1e:a4:81:3d:3a:e0:5d:
         d5:cb:5f:89:51:bc:72:6d:b1:24:07:b7:18:7a:e0:5e:59:e9:
         0c:ba:9f:1d:1f:56:83:e5:4b:d5:2e:6b:5f:9d:cb:16:78:bb:
         ae:ef:79:34:1d:85:25:bd:9b:5c:3d:d2:a5:c5:e5:9b:74:01:
         55:8c:b0:3f:2d:d1:78:2a:b2:c9:68:40:ba:0a:75:75:a7:5e:
         98:83:6d:30:00:1d:c0:70:91:e1:45:34:2a:ec:fb:b2:28:97:
         12:9e:48:bf:c8:3e:42:48:d3:0c:96:3c:b0:af:2b:2b:69:71:
         3a:54:ba:0b:66:da:d2:84:22:5a:1e:9a:58:7b:20:75:5b:a5:
         1e:9c:2b:ff:b2:97:69:40:9d:c6:48:53:7d:c9:7a:8d:7e:3f:
         4f:73:7d:f2:ee:ff:8b:d0:88:e3:1a:cd:cf:64:f5:98:72:84:
         21:23:0e:ef:77:92:fe:7b:18:88:f4:d0:09:d5:76:64:c1:67:
         12:f0:f0:6d:be:b8:23:04:85:fd:1a:29:8b:6c:a4:4a:74:70:
         be:c1:cd:b4:5c:76:df:7d:5a:ad:f7:d7:94:ca:b1:97:b5:e7:
         7c:40:d0:36:69:91:7a:99:cc:6d:e0:97:64:df:e0:4b:8d:c5:
         88:1c:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----