Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          F/C8btVAaH1qIX5gF7rnCSeU41hYNXAMOWiWjGw5txM=
Subject key identifier:   E2:37:3E:BA:C3:60:0A:F0:96:67:87:09:4A:ED:5F:50:D7:B4:6D:53
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       01962ECFA67874D91CD5F26D5B3B00D31BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          0D54
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: ix3mvXWWY2ZO0N0y3IPQzlZCPXU8tTFlf1rno0Fh4Y4=)
                          2: y77QbXKRiye418rSbAFqIemComQ.roa (hash: ssUcd0LDD/xfi2UdCI3WRFi3tuO7iUpDjNv4QY4EqSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a6:78:74:d9:1c:d5:f2:6d:5b:3b:00:d3:1b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=e2373ebac3600af0966787094aed5f50d7b46d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:e6:35:e3:d7:7c:32:e7:e8:0a:2e:69:b6:
                    af:ce:d0:71:aa:86:4b:d7:51:1a:63:49:4b:eb:14:
                    bc:34:28:4a:fb:04:c6:68:cf:22:f0:f1:62:55:21:
                    93:f5:65:2d:dd:05:3a:f2:0d:92:35:31:3e:e7:25:
                    25:aa:86:87:e1:fb:f1:cd:69:93:ca:1b:ea:ae:f0:
                    c1:99:35:0f:00:66:9e:75:c2:24:b2:fb:7b:6f:18:
                    f5:f7:69:6b:f1:0c:85:99:00:a2:8c:bf:86:58:f0:
                    f1:13:a5:e2:19:a6:05:f2:c9:33:2c:88:3e:8b:4b:
                    de:ad:c2:25:1b:63:d4:a9:ed:06:d3:01:5a:9e:8f:
                    f4:99:45:28:c3:6f:e5:f2:cc:0c:3c:dc:3a:62:c6:
                    9a:e8:a0:f7:c0:0d:6e:1a:fa:4a:bf:6d:3d:26:66:
                    d4:d6:d0:f7:cf:5a:04:46:71:03:e9:d9:7e:b5:3e:
                    eb:2b:c9:91:64:44:fe:6a:73:ed:64:54:ca:b1:74:
                    bd:e4:e8:c7:8d:72:29:9f:ca:e4:30:23:b6:c2:6c:
                    e9:08:21:6d:b6:7e:ad:6d:7a:ee:c2:4b:15:79:55:
                    d8:64:e3:72:2b:34:cc:7d:e4:2c:36:a8:d3:c1:6a:
                    89:4a:c1:07:e4:f4:3e:34:c1:d8:ae:e0:f4:47:34:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:37:3E:BA:C3:60:0A:F0:96:67:87:09:4A:ED:5F:50:D7:B4:6D:53
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:70:2c:40:e4:8b:be:5a:39:12:a2:90:56:13:60:59:a6:
         95:c4:91:a5:99:36:28:b3:7f:84:94:49:f5:ab:12:7a:22:d9:
         3b:d4:f7:13:10:cf:5d:86:14:0b:60:49:12:43:d2:ff:09:d0:
         f7:50:c0:e4:e6:50:d3:39:ef:2e:ff:83:dd:3f:b8:f8:b4:d4:
         0b:cd:00:9f:54:24:06:51:ab:04:fb:80:8d:5f:aa:f6:a4:3c:
         38:a3:da:14:b1:02:a7:1c:d4:4b:af:3a:0c:c4:74:73:6c:c9:
         12:2b:1e:f2:1e:e8:7c:a1:fd:11:b8:53:fd:ee:24:84:7f:08:
         32:63:db:ee:be:86:b0:17:84:7d:ab:e2:34:04:aa:ec:f9:95:
         dd:d0:21:9b:3f:6f:f4:10:bd:57:a1:0b:3b:e6:9f:f8:79:fc:
         b8:9e:ec:3d:b4:04:a8:2b:c1:24:7f:b8:6f:eb:02:ad:c8:09:
         e6:4b:1a:44:0d:a5:6f:68:35:cc:11:a9:4c:a0:41:78:a9:32:
         e7:02:70:70:e5:7e:53:46:b0:77:d0:b2:56:3d:d5:54:6f:87:
         4a:cc:47:20:e7:f1:8c:a1:00:16:e5:5b:d0:47:90:f3:0a:3a:
         b2:f2:1e:a3:2f:44:19:ad:b1:3e:38:e3:b8:a4:b2:7e:02:9f:
         3c:d4:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----