Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          +NUrl+TAqgW4a/3ZdX5IcCiwPrJvc10bTIT37usYjaM=
Subject key identifier:   61:E0:8E:69:89:0D:BE:DC:D4:82:43:E4:EA:F0:AF:04:56:7A:F3:88
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       01962F3D3650CC663311DD298018840E453C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          11F7
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: axs/cNpXEJQL5OWb7s5W26wP7pCrBhwcG4AcxN19l6Q=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:50:cc:66:33:11:dd:29:80:18:84:0e:45:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=61e08e69890dbedcd48243e4eaf0af04567af388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:0a:92:6f:df:59:45:03:17:c5:30:4d:7b:
                    5b:2d:ee:76:c1:c5:ff:3f:1c:d9:95:5e:16:70:27:
                    db:33:bc:a1:94:10:91:c4:04:5d:ca:c5:6e:2c:ce:
                    55:e0:85:57:4e:0e:ce:f2:30:7b:bd:f8:f2:c8:19:
                    b4:ff:8f:33:36:95:b4:2a:18:00:0d:c6:cc:e9:41:
                    39:8b:9f:a4:c6:e0:84:6a:95:8b:9b:3f:24:75:4d:
                    5f:90:cc:b7:63:47:dd:b7:f4:da:23:e6:50:0d:06:
                    ba:8c:32:fa:6b:3d:d1:3c:75:b1:91:e8:67:3d:06:
                    63:2a:3b:09:fe:db:2e:d6:de:c9:07:dd:19:a5:6f:
                    1c:6d:c2:2c:5a:f4:13:7a:94:a3:99:3e:bf:b8:bc:
                    b8:cd:37:39:49:8e:70:b8:d4:a8:e0:87:c9:4f:cf:
                    ea:4a:90:8a:44:16:4e:c2:19:13:de:69:f0:d4:8b:
                    af:c0:0f:7f:2e:54:a4:71:3a:5d:73:61:0b:59:9a:
                    a8:11:28:bf:fa:51:10:ec:8a:63:85:db:6c:4c:54:
                    ed:34:48:86:f1:b1:c4:7f:6c:8f:e4:bf:e2:43:32:
                    7d:97:96:78:10:d6:74:a3:65:9c:84:46:62:a4:f8:
                    ed:1b:38:a5:a8:35:dd:7d:cf:e6:c7:50:ef:fb:18:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E0:8E:69:89:0D:BE:DC:D4:82:43:E4:EA:F0:AF:04:56:7A:F3:88
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:59:f2:1d:95:e7:81:76:fa:48:d7:89:cb:93:49:fa:aa:55:
         51:a4:a8:8c:06:84:3c:cc:b7:d4:86:22:15:f9:d3:e6:36:4d:
         f2:b6:0c:3c:d0:07:d2:51:78:be:32:d3:2d:23:76:49:55:eb:
         71:49:b5:1a:db:95:35:e0:6d:31:5c:39:94:32:44:b5:67:5e:
         44:9f:94:64:e4:25:9f:77:96:76:7d:0a:e3:db:f1:00:63:65:
         6d:c7:d8:ba:04:a8:40:8e:77:3a:2a:dd:d7:af:c5:e1:62:db:
         ce:f3:59:58:1b:af:d5:8f:66:1d:83:06:b0:64:4b:b4:af:91:
         90:d6:57:c3:96:93:59:d0:db:f6:97:40:07:ed:30:5a:65:39:
         76:b6:33:43:48:9a:96:67:e7:01:68:26:5f:0b:f6:af:4c:0a:
         6e:75:bf:d5:3b:dc:2b:e2:2f:aa:3c:78:19:d5:ed:d9:4c:be:
         53:06:5b:d7:1d:2e:e2:f8:48:6c:b1:c4:66:da:c7:c0:93:64:
         7f:dc:50:0e:8e:58:d0:99:22:9a:57:83:73:b8:61:72:85:c4:
         98:3f:b1:64:7b:05:54:d3:cc:4a:90:09:8d:c4:03:b1:ed:55:
         69:6d:d3:99:33:1f:87:70:4d:f8:b2:aa:8e:c3:b2:28:86:b7:
         21:73:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----