Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File:                     VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier:          LpuzYcS1DQdloI4q2lquIly36PrbfxqvHiES93MnpNM=
Subject key identifier:   47:59:18:9A:AC:0F:77:83:B9:12:F4:D5:52:0B:2D:5C:CA:C4:A2:C9
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer:       /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial:       01962F3DA3B34F5420CF39E3DEC44E958ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number:          1369
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: kr0ddQcsMrvwLlC8QyvKyhUEeZ439YactMGM7xz/4XM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:b3:4f:54:20:cf:39:e3:de:c4:4e:95:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=4759189aac0f7783b912f4d5520b2d5ccac4a2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:4d:85:66:1c:00:17:47:12:97:bd:28:01:
                    cf:2c:ff:55:1e:f4:2e:59:fa:22:85:7f:3d:3b:c0:
                    8e:e3:88:32:9c:78:35:c2:5c:30:19:b9:70:6a:c7:
                    92:d3:a5:36:3c:45:b9:b2:74:94:e9:08:0d:63:b6:
                    85:9e:8f:0b:1d:ed:94:72:b9:1b:55:c5:10:cc:c5:
                    72:1c:09:3f:1f:b5:78:eb:5c:b7:66:2b:5d:e0:00:
                    ea:53:46:00:4a:77:cd:5c:1c:3f:26:d7:bd:8f:45:
                    94:1c:14:8c:08:e6:30:52:cc:64:4f:95:04:5e:97:
                    c7:a8:6d:ae:b9:5e:28:53:f7:73:d3:5e:02:79:29:
                    db:37:c5:bd:3c:2f:08:e1:5c:42:9c:0e:76:76:e1:
                    b5:f0:3f:ab:d4:11:05:bf:a6:e4:00:19:00:5e:3b:
                    5a:23:67:63:2b:d8:6d:c5:3f:3c:71:5e:b0:c7:d9:
                    be:12:96:1a:a4:e5:a5:71:f2:7f:fe:18:05:e9:f3:
                    f0:60:89:02:b3:31:66:0b:47:a8:2b:ac:95:d7:ac:
                    54:24:71:49:7d:77:d8:46:0f:6c:2f:cd:6d:8c:7a:
                    3f:af:f0:9f:3d:08:31:1a:62:a0:eb:32:2e:c4:11:
                    18:0f:72:5b:54:e0:ba:dc:4a:98:d7:4c:6c:82:f1:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:59:18:9A:AC:0F:77:83:B9:12:F4:D5:52:0B:2D:5C:CA:C4:A2:C9
            X509v3 Authority Key Identifier:
                keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:81:1b:99:06:2a:b8:fe:92:2f:05:6d:be:08:48:e8:7f:7c:
         bc:18:30:a7:ff:c1:e8:ba:4e:ac:31:f5:0e:af:91:e6:e7:35:
         38:f4:a7:45:8c:7f:1e:24:56:60:6a:31:40:ae:b8:43:c0:d4:
         c0:ea:5c:53:0b:db:d6:42:31:01:e3:a2:7c:a9:78:e9:29:17:
         83:c9:52:ee:d1:84:ed:dc:93:d6:1d:4e:c8:2d:68:20:b0:fb:
         a3:3e:01:87:9c:fb:a2:99:6f:d2:f4:4b:46:56:fd:d6:17:8a:
         bc:a1:ee:c2:6c:ff:c4:79:f6:dc:c1:d5:91:3a:74:2b:27:da:
         eb:d8:33:69:77:02:c1:0b:91:f9:bf:22:02:43:96:0d:de:76:
         67:13:0a:e4:ae:37:67:8e:df:50:9a:70:38:24:18:c3:d4:46:
         f2:2a:fa:ee:d3:75:23:08:fb:e0:94:72:9f:e5:ef:7a:ec:28:
         6d:81:6f:bb:21:68:08:5c:06:cc:42:c9:87:4c:2d:bc:5a:aa:
         71:ec:d9:a4:8e:35:25:b6:df:42:1c:5c:a9:61:7e:90:6a:4a:
         4e:b3:df:f5:d3:7f:79:0d:98:61:5d:fd:71:10:c7:c2:4e:3b:
         8f:60:06:6a:d2:b2:50:c4:3b:ab:80:a5:4e:fd:e8:58:07:f1:
         94:ec:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----