Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File:                     vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier:          X0XnrV96KMell0pECAwuvY3TgsJEPkfG9uujQkQAb9M=
Subject key identifier:   E8:E2:99:5A:80:EB:99:44:FA:BF:A5:3E:28:CA:2E:D3:8A:FB:6F:1F
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer:       /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial:       01962E99A7AEF7EA680FDAC6DACB1BC8DC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: Ro/z9oS0nHvylZoTsXTvZESjuSPHNL6wqMTJXTdt6I4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a7:ae:f7:ea:68:0f:da:c6:da:cb:1b:c8:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=e8e2995a80eb9944fabfa53e28ca2ed38afb6f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:55:c9:67:4c:df:3a:a7:be:cd:74:b7:4b:
                    58:35:3f:12:c8:ee:72:97:79:96:b1:22:58:6f:b7:
                    c8:7f:35:9e:ac:e5:70:7e:f2:b5:69:d5:dc:7d:8a:
                    3c:a4:21:34:cf:f1:bd:f1:03:c7:8d:d5:a4:ad:ad:
                    19:ca:3a:95:b5:ac:2f:1e:ef:15:d8:79:8e:7a:36:
                    4e:dc:fa:35:6a:ee:27:4e:90:ec:5d:46:0e:2b:14:
                    85:08:19:25:c1:0d:a4:a7:0f:f8:58:33:be:f5:6d:
                    d1:ef:e3:75:39:41:a5:53:b4:24:4c:09:cb:9e:c8:
                    59:d7:4d:ac:c3:d2:f6:fa:89:83:3e:58:fa:ca:ab:
                    59:8f:22:cb:fb:81:71:ab:0c:9f:c6:f5:d6:e7:f4:
                    b8:84:61:09:c7:55:f0:cc:67:33:4d:05:13:e4:05:
                    42:b6:3a:2f:c4:52:eb:ea:ba:e2:a8:46:85:c9:0f:
                    ee:f8:52:33:51:c4:da:22:dc:af:88:4c:f1:a6:04:
                    5b:ac:4f:13:4b:10:07:a7:ab:94:55:f6:44:83:42:
                    95:d5:7f:e7:e2:95:3c:cc:83:5c:0b:06:33:d5:4b:
                    84:0c:f3:57:13:1a:6f:18:dc:80:21:f6:d1:2d:67:
                    d9:cf:b4:38:8a:ad:19:ef:06:e4:e7:7b:3a:19:d2:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:99:5A:80:EB:99:44:FA:BF:A5:3E:28:CA:2E:D3:8A:FB:6F:1F
            X509v3 Authority Key Identifier:
                keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:ea:43:34:b8:c7:81:bd:99:66:2b:0e:b3:94:af:83:4b:
         96:30:c6:34:a9:b4:60:eb:e8:ae:54:ca:ae:b6:6a:e5:d8:99:
         a0:49:10:0e:19:68:c2:fc:c0:25:8c:49:3b:44:de:0c:14:f2:
         40:34:c7:ff:f2:4e:f2:e2:af:b3:6b:08:10:4d:1f:d2:e9:90:
         0d:07:0d:bc:10:86:48:61:36:0b:5b:5a:31:3f:7c:91:05:9e:
         a8:5b:50:56:64:d7:31:87:6c:73:20:3b:59:e8:cb:4f:22:db:
         28:0e:53:ad:a5:f9:ca:d0:76:43:94:66:bc:91:47:a4:f0:44:
         d9:b9:cf:ef:8c:33:e5:47:23:6b:03:b6:a9:0e:2b:75:ad:bb:
         f6:60:a4:c6:0a:bb:25:aa:c1:83:e6:70:11:6f:aa:f1:17:86:
         42:8b:af:83:fe:b6:16:59:67:76:db:97:1d:4a:a3:61:8d:11:
         39:0a:e4:fa:4c:7e:9a:f1:bc:03:d7:7c:46:a4:c7:97:64:d6:
         3f:46:80:c9:b9:61:6a:fc:36:1c:37:da:29:95:86:fc:5d:18:
         d8:24:c0:b3:fe:bf:f1:64:20:60:b8:b9:90:f4:c9:3f:7b:5a:
         1a:2e:70:13:99:02:a9:11:94:b1:19:43:51:e7:09:40:ad:f1:
         10:55:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----