Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
File:                     vFxHuPnkKkkot2dDFqcap21AHjw.mft (raw, json)
Hash identifier:          7768qORDuO9WHf2WdJ1lZqxrfb+McZXXIb+gnOl230s=
Subject key identifier:   68:41:76:CC:81:8E:C1:10:46:D1:E1:E5:65:B0:22:32:99:DB:D7:77
Authority key identifier: BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
Certificate issuer:       /CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Certificate serial:       01962E996636D058F8507EF831F6EB6C8F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
Manifest number:          0A7B
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: vFxHuPnkKkkot2dDFqcap21AHjw.crl (hash: uWElEEektYESfcPw4H1f/U3oO8cP7fV9JxLhlzuqVVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:36:d0:58:f8:50:7e:f8:31:f6:eb:6c:8f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=684176cc818ec11046d1e1e565b0223299dbd777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:2e:b7:d7:36:ad:62:85:3b:cf:a4:ef:aa:
                    ea:55:2a:8d:5a:63:ac:18:58:76:d1:7a:19:bf:89:
                    bf:19:f3:ab:99:4a:dc:8e:c7:bc:aa:2c:f1:90:8f:
                    f9:20:f5:be:78:0e:0b:dc:a4:d7:2f:60:da:c4:d6:
                    02:42:2d:b6:39:f1:fb:93:a4:6a:c6:00:d2:9e:f6:
                    e4:c0:1c:1d:55:d1:e9:0f:a6:60:ba:30:fa:29:96:
                    7b:31:cf:50:b7:f0:14:18:8a:a6:be:ac:bc:29:b8:
                    2b:fa:47:aa:6e:8a:02:1c:7d:d7:98:46:c7:ee:27:
                    7b:9e:77:7d:04:50:e2:33:63:16:58:6a:35:60:e9:
                    46:5a:10:55:aa:fd:35:11:3d:c3:d9:04:18:c8:a3:
                    8e:0c:fe:1c:63:bc:50:8c:de:c9:32:b7:0c:4c:aa:
                    5e:e1:70:c0:55:d2:cf:29:cb:22:88:32:33:84:e8:
                    67:67:19:92:f2:fc:ca:71:49:0e:96:24:9e:c1:9b:
                    a9:96:ed:5f:1c:2a:bf:72:d3:3b:08:c9:16:33:b9:
                    15:95:aa:e6:75:64:9d:88:16:74:52:a1:9b:ea:ae:
                    59:2d:a2:47:bf:ac:92:d6:dc:07:39:d1:1f:08:b4:
                    e3:75:a1:07:9b:0e:1e:db:79:f9:95:46:ab:3b:1c:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:76:CC:81:8E:C1:10:46:D1:E1:E5:65:B0:22:32:99:DB:D7:77
            X509v3 Authority Key Identifier:
                keyid:BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:70:8b:ea:e3:5c:d3:40:11:26:e0:a2:2e:ca:7e:76:09:
         ab:61:56:4f:31:17:d0:36:41:89:32:73:20:28:d9:2a:d4:92:
         ff:13:87:0c:87:d9:d3:31:4c:33:b2:ca:ce:28:aa:e5:11:c8:
         ee:af:53:6a:b1:1d:93:62:e2:90:ce:9c:ab:14:5e:7f:44:de:
         78:c1:27:60:0f:a7:4d:15:83:b2:54:ce:43:4d:93:b2:47:86:
         11:7f:95:90:ff:5a:9c:6e:2e:d9:c8:da:32:01:a0:a8:ba:5f:
         11:d1:8e:4c:95:24:0a:83:2b:ab:ed:3f:2d:3f:bb:5d:d8:f3:
         f9:b4:2c:44:8e:37:e9:1b:ed:34:78:ba:1b:4a:4e:8d:48:34:
         fb:77:1f:2a:76:42:ba:4f:48:3b:f0:ea:d9:90:a3:34:ee:6c:
         fa:46:fe:47:7a:9f:48:7a:b4:f4:7f:b6:9b:12:57:0e:de:ab:
         61:07:4f:bc:3a:0e:06:91:aa:97:47:c3:2b:a3:ba:6b:81:7d:
         92:f1:d5:a0:1a:c3:6b:ef:9d:61:f0:58:5d:10:53:dc:bf:87:
         26:0d:5c:02:07:08:28:34:11:30:9a:72:3a:a3:3e:1c:f7:e8:
         10:b4:54:7a:20:f3:4a:92:de:08:bc:f8:ba:ef:5d:c8:b7:5f:
         5b:00:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----