Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File:                     vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier:          lgE9SUir7aPoQK9PkD7xV6EQ1zF7sQaCpvUrvszYz5k=
Subject key identifier:   D6:5D:1E:C8:1D:04:12:1E:27:31:28:5E:E5:CA:F2:31:86:30:94:3A
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer:       /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial:       01962E2B51716B6EB36A862BF8B6003141C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
                          2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: SCOA4mFR5xRVnxwz4WI9+iCjoTXiQ+Grx7O/Xdg/ow4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:51:71:6b:6e:b3:6a:86:2b:f8:b6:00:31:41:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=d65d1ec81d04121e2731285ee5caf2318630943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:05:96:66:57:e2:7b:45:75:c3:0d:2b:b3:
                    0d:58:56:b7:2b:72:10:cd:83:b4:c6:ce:c3:df:a6:
                    d0:09:e4:e4:17:79:f7:d9:cc:0c:b7:5c:83:ca:d4:
                    45:c9:72:c3:8b:b4:06:a8:89:e6:03:42:1f:46:16:
                    8a:49:bc:14:84:48:21:04:a8:96:ed:02:a9:d9:8c:
                    b0:87:ec:7f:73:09:d5:7c:29:dd:fd:1a:eb:38:ce:
                    e6:a7:4d:11:a4:86:19:3d:b3:4f:32:69:0f:e1:b1:
                    5b:a5:ce:2f:cd:a2:b1:63:0c:86:95:70:40:16:7d:
                    d0:ae:3a:43:ab:d1:58:b4:08:29:c8:ff:30:d6:46:
                    45:1d:04:de:0d:00:7a:28:52:c0:9b:11:18:75:01:
                    94:d4:b6:80:44:f2:16:f7:04:7e:d0:84:49:37:38:
                    51:3c:cb:fc:01:89:f8:a1:6e:0c:59:7c:67:60:41:
                    75:f9:31:8c:60:84:18:46:93:98:f3:93:0b:7f:bd:
                    c6:ca:f6:3f:8f:eb:e1:80:6a:ac:fb:8c:41:59:1d:
                    7e:7c:da:f6:4b:68:8c:39:ff:a0:00:bf:8f:f4:dd:
                    9b:65:54:f7:83:af:69:3c:97:27:9e:bf:16:e1:b4:
                    7b:1e:41:e8:8b:cb:56:8c:79:ef:45:88:70:73:f0:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:1E:C8:1D:04:12:1E:27:31:28:5E:E5:CA:F2:31:86:30:94:3A
            X509v3 Authority Key Identifier:
                keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:17:22:d4:47:d7:50:54:27:c2:9c:37:18:40:3a:a9:ba:
         0b:7b:9f:d8:d8:80:1f:fa:de:39:c5:03:d4:35:6c:d9:d5:73:
         26:1a:79:fa:a0:57:49:8f:fb:90:6b:7e:96:21:cf:72:e7:22:
         f4:66:7d:8f:11:91:c5:29:4a:7f:f4:02:4d:75:c3:6e:51:a7:
         b5:32:58:d7:2f:b8:fd:b6:44:3b:f8:27:66:31:25:0f:2d:a9:
         dc:e3:8a:a5:ea:7c:7b:3f:30:fe:ba:c1:4e:bd:7c:6d:62:44:
         3b:f1:d1:ab:18:91:6d:4b:09:1b:c6:1f:4f:ef:67:cf:d9:97:
         19:67:f2:9f:cd:d8:75:db:93:fc:22:75:8a:0c:b5:5a:00:be:
         fe:8c:c5:92:01:d8:c6:77:2a:5e:42:48:51:15:9b:ef:31:65:
         72:ec:96:0c:a6:db:3b:6e:04:a3:40:b0:76:33:01:77:3f:26:
         77:8c:62:67:45:57:71:13:4e:7e:82:a1:9d:a8:33:c5:db:c0:
         56:43:54:9f:7d:a4:8e:18:21:6d:55:bd:1a:57:41:be:2c:61:
         5d:cc:a3:48:31:c2:97:4e:1c:1d:68:94:43:81:ba:3c:7e:1b:
         67:a4:06:b9:99:69:ec:c1:98:69:ac:b5:d4:79:6d:b5:80:bd:
         41:38:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----