Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File:                     vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier:          otirIb4ANBTS9DidRZs4UOEYeFvqSv6inhq5zc6zkPs=
Subject key identifier:   F4:C4:05:B4:8F:6F:DC:2C:05:7C:7A:B7:A8:B2:5C:58:AE:45:E7:C7
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer:       /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial:       01962ECF664EEAECB82AB4F8C877E73E0DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
                          2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: vJJmvewuS6Q1De2RTOfSrV+VTEP40e6OUDJjU63zb4U=)
                          3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:4e:ea:ec:b8:2a:b4:f8:c8:77:e7:3e:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=f4c405b48f6fdc2c057c7ab7a8b25c58ae45e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:27:40:f8:7b:ae:3a:42:e7:77:88:7e:4e:
                    5f:89:b6:93:05:53:82:80:2a:9a:a4:95:16:3f:9b:
                    8c:d4:9e:f0:37:f0:bd:48:42:06:62:a0:60:bf:75:
                    97:76:1d:f9:20:8c:db:ac:8d:81:f0:18:d1:32:24:
                    d8:d8:c5:3a:83:b1:7c:41:62:16:e5:aa:a1:01:34:
                    e4:51:7b:ac:b2:b8:b7:64:d5:8a:50:11:e4:0e:cc:
                    14:16:aa:c3:9c:0a:28:da:c0:1d:16:3a:6c:47:90:
                    e6:49:38:b4:c0:54:3a:d9:de:72:d3:95:93:ee:56:
                    10:86:7e:60:bb:92:59:80:49:9d:00:92:10:3d:79:
                    cb:24:33:0a:f4:7a:5d:88:7e:18:fc:c3:c3:23:e6:
                    7d:de:fc:e0:8a:e5:e6:9c:1a:9a:c1:96:ac:0f:a7:
                    8d:75:90:c0:4e:5d:eb:fd:56:dc:1b:5d:87:75:70:
                    4b:b0:1b:57:1c:40:9f:4c:d6:b2:a4:b5:7e:26:5d:
                    d6:85:8b:56:9b:08:b3:c0:0c:21:7e:77:6d:54:df:
                    f2:c8:1c:59:e3:7b:26:8a:49:ba:96:67:68:ab:4c:
                    41:cb:ed:08:5b:3d:43:60:a2:85:e6:fb:ce:a5:e6:
                    9d:a3:cb:f3:64:58:66:60:29:d0:29:56:a1:98:34:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:05:B4:8F:6F:DC:2C:05:7C:7A:B7:A8:B2:5C:58:AE:45:E7:C7
            X509v3 Authority Key Identifier:
                keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:f5:b9:6b:4e:a5:97:d7:aa:0f:af:32:6a:ad:a3:f9:89:
         4e:f5:5a:44:82:5e:da:93:96:26:1b:ff:88:5f:a1:b3:e8:20:
         f6:5c:be:d1:09:b1:26:6a:50:dd:d8:c2:e2:af:e6:e7:d9:6e:
         f5:98:a2:cb:a6:8c:6d:28:b7:d6:97:d5:60:67:a8:61:7f:16:
         d9:44:f9:38:ca:7c:a0:23:79:2d:d1:5b:82:57:6f:0d:f5:88:
         97:f9:1d:3a:5c:1e:da:2d:ab:5d:de:f4:88:c0:c6:de:35:03:
         90:95:f8:64:b5:25:22:0f:df:82:a5:bc:de:d5:6f:c2:83:93:
         f2:14:df:c7:17:ce:11:c5:b9:61:48:3f:0f:e0:84:cf:81:6a:
         d7:33:8e:90:42:e5:0d:37:09:bc:db:96:a6:50:17:ad:f5:36:
         f0:79:cd:04:7a:43:b3:f3:e1:33:5f:89:26:1b:59:a6:63:aa:
         10:1b:29:07:4e:ec:fe:ce:c3:20:2b:b3:2e:6f:ba:d8:b3:e7:
         8a:db:23:5d:f3:3d:89:41:ed:ba:fb:af:d1:88:9e:1f:d2:a6:
         44:18:fd:a4:e9:ac:cd:d1:b5:aa:23:77:02:52:fe:f7:29:54:
         38:2b:db:2e:37:a7:ae:67:02:36:08:88:36:87:7f:0a:a4:66:
         06:30:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----