Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File:                     VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier:          IpqGp8XbW3n4DBPhmW+vFFfxZ3G6E+mRhOMuGzZHjuU=
Subject key identifier:   AC:80:E6:E0:E6:57:90:8D:94:A4:9E:41:D7:32:30:30:4D:BA:79:8F
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       01962E99A14366B910512AE4F64D16752332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number:          094A
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: AStoJCGBoZy4KH8tZ1McVkUaP6uInrp1QJY96klopHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:43:66:b9:10:51:2a:e4:f6:4d:16:75:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=ac80e6e0e657908d94a49e41d73230304dba798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:0f:b0:80:d2:2e:24:6c:3b:ff:9e:22:a4:
                    03:b9:c5:b8:19:b2:23:d9:b5:2a:48:b7:02:c8:e7:
                    bf:26:63:14:1b:37:50:e1:e4:bc:6c:17:21:55:81:
                    4e:34:8c:29:ec:65:4d:70:b4:1d:fa:be:3a:37:77:
                    7a:b5:5f:6f:54:8e:21:2e:27:3d:71:71:56:a7:37:
                    21:e9:06:80:df:9b:5f:dc:c2:71:46:cf:5e:7f:dd:
                    80:3d:dc:c1:a0:6d:a7:f1:b0:5e:51:5a:7d:05:40:
                    85:26:34:b5:b3:0e:df:3a:a2:ac:9c:f3:a5:29:57:
                    24:f8:6e:e6:3a:0f:92:3a:1d:15:aa:84:d2:72:1d:
                    4d:63:aa:5b:1f:02:5d:35:a1:af:37:4a:6d:68:fe:
                    23:d5:dc:7f:c1:60:4a:9e:55:5d:47:81:38:31:1e:
                    f1:74:44:55:25:b7:c7:8c:c9:fb:0b:e3:c7:c0:46:
                    3f:b7:d1:6b:8b:90:05:05:f4:59:fa:6c:3c:88:78:
                    21:f8:7e:18:36:e1:4a:f5:84:79:55:fe:d3:a0:a1:
                    b7:0d:7e:ab:aa:86:84:93:cf:5f:3e:ec:0d:03:c7:
                    87:19:3b:28:30:c8:47:fc:6b:e3:92:78:3c:d4:f2:
                    45:c9:5c:64:da:6a:5d:c2:47:c9:26:a6:c3:ca:55:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:80:E6:E0:E6:57:90:8D:94:A4:9E:41:D7:32:30:30:4D:BA:79:8F
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:34:20:36:17:86:8f:67:2d:b3:c3:00:fc:87:38:0c:8c:
         64:49:79:c2:c7:84:6b:63:45:4d:25:18:ab:83:6b:fa:66:c5:
         9c:5d:e7:48:8c:ec:8b:be:b7:c1:fd:7b:4c:9d:98:dd:5d:8a:
         c8:62:b1:47:a3:82:35:c6:e4:16:4b:a9:77:28:68:0b:27:2a:
         56:d2:75:36:be:11:5e:b2:3e:ed:7f:56:29:a2:62:f2:05:24:
         82:1b:95:0a:d9:aa:98:2e:85:55:2a:db:18:a4:dc:20:26:f2:
         b7:63:a7:1e:41:40:eb:58:07:f6:1e:58:c7:c3:1d:0a:54:bd:
         16:71:ad:c5:a7:f0:04:dd:29:1e:53:fc:c6:43:57:6f:bc:2e:
         12:95:4f:d9:32:aa:12:8d:a2:34:9e:6e:fb:15:89:79:71:8d:
         95:be:e4:61:81:48:1b:76:c6:c0:1e:e7:a8:4c:79:75:7e:ff:
         d0:6b:7c:6c:0b:a3:6a:ce:72:d6:ab:87:80:40:87:52:7b:55:
         ed:a8:68:63:68:4e:02:56:3d:7f:ec:1b:11:80:3f:a5:4e:a2:
         8a:9e:c5:34:f5:ad:a4:e4:f6:49:47:7f:ef:9a:27:cc:c5:05:
         d3:15:b7:7f:a9:73:21:a5:a3:ab:ac:57:33:fe:80:24:d9:fc:
         9e:b8:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----