Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          /7teMG3YRQzyGrN0V2Tn4Ej9VAvnv9ldF57VyFZyQn8=
Subject key identifier:   E6:23:F7:95:19:3F:FE:B7:A1:18:17:6F:1D:1E:23:74:91:F5:9F:0F
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       01962F06F15341032DB5129B1E97F41AA8B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          0BB2
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: RuphKY7hG0sLuxBCDpzS+lyzM/RshZsxzVP9PFtC59Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:53:41:03:2d:b5:12:9b:1e:97:f4:1a:a8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=e623f795193ffeb7a118176f1d1e237491f59f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:0d:de:ef:1c:d2:b7:ff:a2:2d:c9:d5:7f:
                    bf:d7:16:0a:c4:4d:c3:cb:91:4e:88:57:d7:d8:8c:
                    1d:81:cd:63:8b:c9:3a:57:07:36:53:69:52:20:c6:
                    29:3d:97:e3:2b:c6:1f:ca:39:48:c0:98:e6:9c:b2:
                    6f:5a:5d:dd:25:42:c5:92:79:64:87:41:e1:5a:43:
                    2c:ee:f8:a4:49:1d:2b:72:ae:a7:3b:b2:a8:ee:8f:
                    6b:fe:77:32:e9:f6:38:2e:42:d5:9f:5d:68:30:ef:
                    a7:44:23:42:e0:68:06:17:37:82:b2:2f:80:eb:c2:
                    d8:87:a3:3d:60:63:65:2c:8d:18:e1:f6:39:1d:12:
                    15:42:d5:6f:55:c5:76:98:57:13:f3:bb:9f:8e:d4:
                    b6:99:2f:e2:28:2d:2e:08:b9:47:6f:f0:08:2e:a4:
                    65:c8:12:d7:d4:4c:07:2c:b4:c6:4a:20:3c:1c:70:
                    16:15:33:c0:eb:22:48:fe:c0:b2:e1:53:35:49:5a:
                    be:3d:56:21:b6:c2:1f:43:fb:4f:62:90:64:88:09:
                    1c:e6:f4:28:01:8d:60:93:7e:33:b1:87:d4:11:a4:
                    32:41:0e:7d:88:aa:6b:ec:e8:32:40:84:83:d2:6e:
                    75:5e:2d:c7:5b:c9:bd:c6:04:a2:21:19:d6:a8:10:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:F7:95:19:3F:FE:B7:A1:18:17:6F:1D:1E:23:74:91:F5:9F:0F
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:98:3b:99:c8:89:92:11:64:47:c5:ba:b4:e7:97:b8:71:cb:
         6d:be:f9:4b:53:14:d2:c4:b8:71:f3:42:21:d8:cc:0d:1e:7e:
         9a:4d:82:03:8e:d9:81:c8:bd:07:26:22:ad:0a:73:8a:60:eb:
         49:4d:36:00:d4:a1:d6:a3:e7:b1:4f:8e:2c:c9:dd:04:8e:56:
         dc:d8:fe:93:e1:75:51:a3:f9:86:b2:66:c6:30:a9:7e:81:fc:
         ba:c8:a6:cc:51:db:f1:27:fe:88:e4:f5:e7:aa:82:58:11:07:
         36:27:ef:ff:f7:a8:0e:1f:55:47:01:2f:cd:3c:aa:63:18:11:
         1c:b3:f5:df:59:66:8a:74:c4:69:30:d7:25:ca:ad:8b:d9:80:
         91:2e:8a:82:a2:41:eb:8a:82:5d:0c:5a:34:57:8d:e6:78:2c:
         c0:0c:22:7f:d7:87:4c:dc:08:dc:c5:b5:7e:de:2b:71:31:61:
         28:69:92:bc:c6:1a:ac:0b:3b:51:22:4b:c3:52:5a:1d:78:8a:
         71:70:e5:97:2e:a2:d8:ed:49:da:00:5d:19:ab:7e:aa:6b:5a:
         18:61:09:e9:4b:95:11:69:dd:19:23:aa:23:d7:84:ca:f4:01:
         95:be:5a:61:97:ba:24:02:df:42:95:35:be:1d:3c:4c:8e:04:
         e2:84:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----