Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          E4LfKQ04eRnqBIhGNCqwa5zi4m7RIpcd4nGb7xoD8UM=
Subject key identifier:   66:73:AB:AF:F7:3A:3A:A9:1A:85:AC:02:1D:AB:5B:2E:9A:21:0F:63
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       01962F74D06668EC3213A2D49353C61CE54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          02C6
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: 44XZEzC5eB/AYOjSbIcReqgn184udqvEQgjg3uZYxZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:66:68:ec:32:13:a2:d4:93:53:c6:1c:e5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=6673abaff73a3aa91a85ac021dab5b2e9a210f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:0f:15:f1:88:16:cf:ca:94:1a:ce:93:14:
                    dc:63:5e:86:30:33:20:dc:5e:fb:a8:50:94:7d:e5:
                    9c:49:ae:d6:1d:71:84:ba:e6:f7:a2:c8:3a:b5:bb:
                    77:79:46:97:9b:12:5c:db:c3:5a:a6:c2:f0:90:88:
                    12:8f:18:b1:ba:9c:c5:44:3c:0f:8c:82:df:8f:71:
                    a8:a8:c4:d8:6d:c8:68:0e:fd:1f:f3:f0:d8:46:2e:
                    76:8d:b4:96:41:bc:3e:85:bd:0e:e6:ad:fb:82:0d:
                    96:3c:76:6c:0f:4c:e2:d1:1b:b6:8d:81:dd:9d:af:
                    f7:41:9a:66:ed:e4:42:76:ed:de:dc:c3:20:b6:08:
                    10:db:54:98:f7:5b:b3:4f:d4:8b:11:17:00:f7:30:
                    e5:ff:1b:8a:f4:29:a8:e8:ed:57:3c:ca:61:2a:67:
                    ec:b2:19:61:76:35:3b:45:69:2d:11:ea:79:35:ff:
                    da:cb:0b:3c:12:84:e9:bd:8b:7b:82:a5:9a:e0:d4:
                    ba:a8:3f:83:d6:89:3c:1a:de:40:6b:2a:96:a1:00:
                    02:3f:07:be:c2:67:18:1f:74:c2:75:90:17:74:ab:
                    0a:09:38:c7:a3:6e:e9:c7:e1:e0:15:5b:79:55:a9:
                    74:8b:e9:b5:ee:0a:8e:7a:c6:a5:05:2e:f4:68:15:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:AB:AF:F7:3A:3A:A9:1A:85:AC:02:1D:AB:5B:2E:9A:21:0F:63
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:45:ab:82:12:b4:ce:fb:7f:12:b8:ee:8b:43:d2:8a:10:15:
         a8:a4:f8:3c:ce:f4:5d:30:3a:bd:0d:9b:50:c7:dd:8c:f5:1c:
         8e:14:d7:58:ed:d1:f8:ef:c3:ba:04:13:cf:ca:e6:62:f3:2a:
         20:51:95:34:06:df:25:25:f2:91:5c:bd:b8:6c:7f:de:a8:ce:
         a7:1f:c9:28:ef:89:c1:fd:03:44:55:81:54:a1:66:d8:3c:0c:
         47:da:5f:01:8e:78:49:64:d8:ac:d1:5e:d0:a9:4b:6b:f2:25:
         9a:ef:6e:ce:8c:ed:56:a4:f9:f0:f8:6f:a6:30:3c:40:97:28:
         88:a3:ab:4b:a8:6a:9b:47:78:bb:5d:1f:7b:4f:7b:2f:3c:17:
         7a:f4:2a:b2:e0:c7:03:4d:59:98:e4:26:56:a2:57:3d:7b:f0:
         90:bf:b4:11:0e:24:e5:ed:70:df:42:07:7c:d0:d5:c0:17:0b:
         61:ba:82:ba:0d:99:f6:e7:ec:cc:96:b1:9b:13:19:4d:45:0a:
         dc:ea:f7:b0:ee:ee:34:9f:66:d6:d5:ad:e4:04:a1:1c:00:a1:
         a9:35:9e:e8:8e:85:aa:78:08:a3:c8:94:e1:80:19:a0:a9:e3:
         21:c4:ec:3b:7f:5d:8c:52:77:be:96:03:06:66:c8:6e:b2:8e:
         f0:d3:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----