Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File:                     vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier:          I+LLQGFdA02BJLGD3quOWB4riMUuKL0TEOLjDv8Vyno=
Subject key identifier:   86:69:AF:A6:A9:70:90:B1:EB:E3:5E:19:91:92:7E:5B:C6:FC:F9:85
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer:       /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial:       01962F3DC0F819DB86BDC58F8BF4D5BB5011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number:          E4
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
                          2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: V+vk2UpaPCxkA1vsalixYl2z1t3Ve+cVK2SMk6U7ghM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:f8:19:db:86:bd:c5:8f:8b:f4:d5:bb:50:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=8669afa6a97090b1ebe35e1991927e5bc6fcf985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:32:cb:41:12:d9:d8:5c:52:61:e5:f1:47:
                    e5:8a:ec:db:70:4a:fe:0e:e2:f2:5c:02:12:a6:a9:
                    e6:52:8a:b3:88:c6:7e:a8:48:e9:4c:84:35:7e:2b:
                    87:2d:cc:f1:0e:75:54:b5:25:e1:07:31:62:13:dc:
                    04:4d:48:70:c2:c5:70:6c:0b:17:64:ff:2f:b3:41:
                    b6:00:c5:f5:9d:3d:7f:f3:39:27:5d:c8:26:e6:68:
                    10:3b:92:46:9b:0e:77:40:15:1e:0c:2b:44:3a:38:
                    1c:a8:79:80:16:7b:f5:d7:0d:5d:74:2b:ce:4b:6a:
                    4c:b0:b4:ff:07:17:43:6a:43:1d:9b:21:78:96:a3:
                    a7:2c:c6:e8:f3:7e:01:04:13:99:74:a5:a0:9c:3b:
                    67:1e:20:57:e4:c2:6f:53:4d:47:a5:12:ce:62:cb:
                    ea:8c:83:cf:ec:87:42:36:f0:4d:98:82:90:cd:47:
                    52:7c:7b:2a:20:03:23:7d:bb:f4:a0:ab:da:7a:b2:
                    94:47:54:1a:09:64:72:a1:26:b6:fc:10:7b:1b:1e:
                    67:1e:48:e1:5e:07:2b:d7:70:a5:af:15:5c:17:45:
                    b4:67:f0:2f:62:23:b8:7b:ff:8c:d5:1f:24:f7:25:
                    2d:7c:49:f2:2b:5d:2e:76:75:5f:69:ad:e7:eb:94:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:AF:A6:A9:70:90:B1:EB:E3:5E:19:91:92:7E:5B:C6:FC:F9:85
            X509v3 Authority Key Identifier:
                keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:6d:51:16:e0:69:06:8f:c2:6e:b7:44:4e:f5:2e:8b:9e:
         45:0e:da:78:1f:32:68:b2:a5:ed:82:b3:42:9a:0d:e8:0b:8a:
         a0:1f:12:c7:61:95:80:c6:48:33:ca:07:7e:d1:43:fc:70:e8:
         47:06:14:d0:33:1e:30:39:0d:95:3a:81:c0:dd:21:95:bd:cc:
         a3:bf:7a:c4:7a:64:69:c9:5b:09:b3:9a:55:e7:86:f6:e5:f3:
         e0:9d:4c:e5:fc:ef:39:a8:d3:79:3d:42:bb:0e:d9:30:e1:da:
         41:c6:4d:85:3b:31:a9:93:bb:2d:c5:d0:71:55:80:ec:bc:f1:
         e3:89:a7:b0:27:74:bd:39:01:f8:8c:fa:46:94:a3:4b:6b:7f:
         7c:08:3a:1f:d8:38:2a:b1:37:fd:b3:77:ab:9a:96:33:0a:70:
         3f:b1:2e:4c:a7:93:03:96:2a:b7:17:ed:e1:b7:1d:13:cf:e1:
         54:cd:a0:d4:9e:ee:00:9f:3c:51:39:4d:c1:62:98:8d:bd:bd:
         c6:41:4b:95:57:1c:b2:8a:6c:a0:ad:56:fc:a6:24:e2:fc:a5:
         f1:5a:9d:c9:c4:e4:ce:4e:20:41:e8:28:f3:d4:94:04:45:51:
         e9:24:d5:16:ff:38:6c:b4:f9:f1:49:6a:48:ac:a3:f7:9f:8b:
         1a:a6:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----