Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File:                     vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier:          vqgewZGDNflYOBIS4fDdYEoN/nsHvhXL2Y7wmYowN+4=
Subject key identifier:   BF:44:C0:E3:1F:A0:0B:8A:1D:DC:F2:40:30:1E:6D:C0:55:52:81:77
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer:       /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial:       01962ECFADCDF3F30639331FE361D333C31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number:          0A4D
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
                          2: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
                          3: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: T9OiePQJ6AZETQGzc77dXBH2nX51MGQziKXbjznyL+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:cd:f3:f3:06:39:33:1f:e3:61:d3:33:c3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=bf44c0e31fa00b8a1ddcf240301e6dc055528177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:cb:b3:15:5a:40:2b:8a:53:61:db:13:25:
                    37:cf:a6:ad:c8:00:49:94:9a:94:6d:4a:09:4d:38:
                    e1:6f:6c:c8:90:c9:70:8d:ee:28:fa:11:0c:c3:27:
                    b9:a2:d4:ea:3b:56:8c:2e:c4:29:93:36:e0:90:15:
                    00:aa:0c:c9:71:5d:95:4f:71:18:04:2e:e9:ea:2d:
                    35:92:37:e3:72:c9:51:80:69:18:48:1a:ed:7b:26:
                    1f:03:37:f9:8f:4e:3f:42:00:b9:d1:bf:83:30:31:
                    dc:cc:f2:0b:df:2f:07:fc:d9:74:32:57:82:97:60:
                    8e:05:79:b5:0c:4d:4b:d5:b0:d0:28:7d:f4:d5:d3:
                    2e:03:54:e8:07:52:42:e5:1a:29:af:ce:94:e1:3a:
                    bd:10:e6:36:ce:61:0b:9c:14:f3:e1:52:17:44:49:
                    89:19:76:43:29:a4:4b:9b:f0:c3:2b:ff:6c:85:f7:
                    e3:93:05:04:ba:a3:e7:cd:03:58:11:8e:30:bd:8c:
                    27:e1:31:4f:7d:1c:67:9e:cd:f9:ef:c0:5d:76:71:
                    13:e1:6e:d4:0e:e0:b1:3d:95:9d:7c:97:64:78:9f:
                    18:cd:8f:60:47:5e:e3:5e:90:93:c2:b2:d5:f3:21:
                    33:6c:77:71:f2:9b:6c:ff:68:77:c7:c2:53:e8:75:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:C0:E3:1F:A0:0B:8A:1D:DC:F2:40:30:1E:6D:C0:55:52:81:77
            X509v3 Authority Key Identifier:
                keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:cc:48:4e:95:12:6d:d1:14:e4:2b:63:6e:46:e8:93:32:de:
         4b:8c:ff:dc:53:30:ea:47:d2:ff:6e:1a:dd:ba:a1:d6:44:d0:
         55:e0:16:bf:3a:b9:d5:d1:0f:22:56:9d:9d:54:7e:ab:11:29:
         c6:5a:ad:e9:ad:ac:c4:04:31:be:98:95:5e:1e:9d:e3:94:12:
         8d:48:58:ed:5d:bd:14:2d:76:55:61:76:2b:cf:bd:54:85:74:
         58:c2:84:13:b4:21:5d:52:8c:b3:90:21:89:31:c3:cd:7a:1b:
         e7:7b:9e:73:1d:20:93:e4:f8:13:f7:b7:c0:b4:a2:ed:47:4a:
         83:7b:9b:36:97:3d:b7:79:e6:46:d7:de:d5:8c:3a:3b:f8:74:
         d3:39:f5:bb:85:3c:21:b0:21:0d:5d:86:7c:0c:c5:fc:db:10:
         c8:00:ab:70:c5:e0:5c:12:a0:98:fc:e3:8d:5c:f1:bb:58:82:
         5e:19:e9:5b:48:74:82:e3:d9:1e:98:85:18:c8:9e:3c:ed:a9:
         c4:b8:0d:e3:fe:57:9b:74:61:50:7e:2c:20:7e:45:be:1f:57:
         db:ea:aa:a2:31:bd:c8:51:02:17:5f:3b:a9:9f:2a:26:c0:85:
         98:b5:85:1a:25:37:47:9d:9a:66:d7:e7:66:ed:a0:d1:5a:dd:
         12:74:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----