Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File:                     vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier:          9c7f/s4zgmm6ow3WvUqVul19BCvx3BEYdvWXHxr63Ak=
Subject key identifier:   BB:CC:CD:25:2A:AE:5B:86:C1:D4:75:28:25:A1:F1:F5:7B:C5:24:49
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer:       /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial:       01962E2B0F6BFCFB157D0E5C848D56756148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (hash: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=)
                          2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: uS1rUh2elZUaw+yAYAWdZgkbaJ8BGn4WVWZcUiw042U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:6b:fc:fb:15:7d:0e:5c:84:8d:56:75:61:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=bbcccd252aae5b86c1d4752825a1f1f57bc52449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:97:30:e1:f9:63:6d:28:d7:a2:de:1f:92:
                    63:11:d3:fd:9f:59:cb:42:61:ac:60:71:1b:cf:3d:
                    14:65:f6:61:b4:c4:d1:59:28:e1:13:11:3e:0b:b4:
                    f0:0e:17:e4:a1:e3:a0:24:23:2e:fe:6c:33:e1:3f:
                    7a:e8:42:71:90:e0:6a:5a:93:54:8f:73:04:e8:02:
                    7d:9c:dd:e7:77:1d:b1:95:9d:c7:52:10:e7:ad:3f:
                    7f:c5:ae:6d:0e:eb:5c:af:8d:64:e5:c7:23:fe:c9:
                    12:4b:01:fe:37:18:75:68:90:cf:5a:5e:9f:47:b4:
                    b3:69:c4:b9:e4:3a:1a:e2:24:a9:6b:cd:5a:89:6d:
                    27:9f:16:0d:30:b9:ad:6f:46:25:82:bc:7b:8a:f1:
                    57:b4:0f:49:77:0b:24:25:8b:da:a9:d2:3c:e9:d2:
                    0e:07:a2:a9:c5:ca:63:65:b8:ef:b5:f0:02:4a:84:
                    be:4c:3e:35:a6:a1:e2:cc:6c:02:e4:0d:a7:05:ef:
                    63:d3:fc:b0:9d:0a:e3:15:86:8c:af:0c:be:0f:73:
                    92:80:ce:b0:d4:d5:32:49:fe:4e:69:f3:1a:d8:74:
                    b8:a8:9a:ec:3b:bb:f0:e8:60:49:e3:2d:a5:f3:c0:
                    12:cd:55:44:e2:37:c2:cf:06:48:14:bc:d5:69:f7:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:CD:25:2A:AE:5B:86:C1:D4:75:28:25:A1:F1:F5:7B:C5:24:49
            X509v3 Authority Key Identifier:
                keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:1c:9b:01:87:c4:69:c5:a3:0a:d9:45:74:73:43:e8:01:
         4d:96:88:e0:2c:a4:54:ce:83:db:b5:46:30:c6:4a:77:b4:e7:
         7f:05:0f:7e:e4:70:9c:93:c3:e5:71:f7:1d:a8:31:66:37:cc:
         0b:9f:87:8b:20:43:a4:90:8d:e4:3f:dd:43:c3:bc:6c:35:4a:
         ca:0f:94:cc:fb:4d:5e:94:60:4d:15:d9:c0:b2:46:6a:67:79:
         60:be:51:fe:fb:d8:9d:a2:a5:78:da:b0:9b:16:1c:68:63:20:
         e7:22:3b:f7:25:a4:70:10:d6:5f:e8:d2:65:45:bf:92:c8:6d:
         ae:43:9a:b4:bf:69:04:52:ca:9a:7a:3b:1e:04:9f:9e:51:f6:
         b7:b5:cb:d9:2d:57:d0:35:60:68:c7:4e:d7:c3:94:a0:5a:90:
         c0:d1:3c:69:f9:04:a8:b3:9a:c4:4f:72:8f:a0:f9:eb:9b:1a:
         43:86:7b:88:0c:93:d3:35:bf:52:f1:22:be:37:5f:35:54:d6:
         8b:c9:6c:a1:7c:12:4c:83:71:f1:4f:c0:94:3e:7d:93:df:fa:
         bd:f2:cb:48:98:06:52:98:c0:cc:51:52:0f:97:e9:ed:9e:36:
         01:b9:bb:b5:65:5c:66:da:88:0b:ef:f7:bb:3e:3b:83:c1:fb:
         64:53:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----