Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          onc7LipXISxyz7k/LbqXY+bweMnMeBsE3fMXRI4vd4w=
Subject key identifier:   59:9A:43:95:E3:20:0A:2E:B2:6C:87:50:AA:B9:3E:2D:D3:26:24:37
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       01962E2B414F0AD651A2DB11A122E3EAAA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
                          2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
                          3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
                          4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
                          5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: 6prnofHvBMWiU0T+t50SatIbbKtcaKS1WmKVsokOkSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:4f:0a:d6:51:a2:db:11:a1:22:e3:ea:aa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=599a4395e3200a2eb26c8750aab93e2dd3262437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:1f:04:8a:20:4e:15:d5:29:a2:44:08:9f:
                    10:49:25:a2:e1:c9:76:73:be:a6:d5:ee:8b:c7:1d:
                    a9:e4:54:68:50:05:57:61:19:b3:fa:77:b9:78:61:
                    86:a5:2b:30:aa:49:46:d0:7d:22:79:a1:f5:46:dc:
                    ef:ae:9d:d2:ff:7d:ac:80:44:3b:10:02:b1:c4:b6:
                    d7:0b:72:3a:16:a2:d0:e4:23:6e:83:63:b6:f0:4d:
                    9d:af:91:f7:e3:54:64:f3:b3:75:72:69:11:f1:66:
                    83:2b:8a:c8:d4:61:8c:e9:a8:46:8f:f4:07:c1:82:
                    6b:13:2a:a1:b6:38:f7:6f:c9:0d:95:ea:35:7f:8a:
                    7f:8b:ff:e9:0e:dd:2b:0c:6a:da:36:3d:14:ca:18:
                    09:7d:c9:21:ef:a5:6c:c3:b5:3e:a1:35:ff:02:c9:
                    de:e3:d4:24:b5:e5:9e:3d:9f:22:91:68:35:2b:3c:
                    e5:1a:4c:d5:e8:cb:d9:3d:b5:58:5b:1f:86:01:8e:
                    f8:28:5c:ba:d2:fb:eb:22:54:91:b6:52:5d:66:06:
                    bf:82:06:bb:50:3b:bf:77:eb:26:41:af:ee:dc:20:
                    56:b6:d1:e5:c8:5d:53:17:9b:b0:cd:31:22:e3:67:
                    b6:f3:80:f9:c1:44:93:b5:08:5e:e5:4f:c9:ee:76:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:43:95:E3:20:0A:2E:B2:6C:87:50:AA:B9:3E:2D:D3:26:24:37
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:0e:3f:5b:10:e9:71:8c:71:36:5f:04:51:15:96:6d:22:
         0c:8d:af:09:73:56:e3:1d:f0:46:26:76:33:c9:2b:62:d5:9c:
         1a:91:79:a2:27:73:11:76:6d:36:af:4a:00:a4:ad:0f:47:c5:
         65:15:fc:2f:18:8b:71:89:2f:3c:66:71:72:2e:44:4a:0f:86:
         4f:e0:f9:c0:cc:d6:8c:f9:ec:ff:49:69:6c:1d:ea:ed:25:89:
         ac:8a:d0:6e:2d:bc:2e:f8:cc:f4:eb:e4:8f:55:d0:f2:0b:18:
         a6:71:0f:f8:85:71:d3:be:c9:e4:5a:38:8c:05:0e:36:75:fc:
         3b:5c:21:22:77:a1:d1:b1:9f:b3:f1:01:35:4f:83:7d:4b:dc:
         6a:dd:28:94:8e:fe:7a:18:d0:5c:58:41:fc:5e:ad:80:7f:4d:
         f8:fe:c5:89:f9:c1:e5:28:b7:11:c8:10:2f:8a:bb:91:be:20:
         12:ef:d1:24:d2:6d:91:0a:27:f4:c2:18:4b:9f:89:9c:f3:37:
         12:cd:f1:86:5f:94:28:4b:25:1b:e3:da:cf:40:26:46:a0:31:
         34:b5:6a:a6:d8:e6:5e:ec:ac:b7:55:f4:81:a8:69:17:64:b9:
         89:8a:ae:a0:2f:8d:a8:10:5a:4d:0c:da:ef:3c:8b:79:4f:e8:
         f4:99:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----