Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File:                     vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier:          QArjXhKaA6RImcJF4vgmHjZPIDf08+4CEvCpd1UgNek=
Subject key identifier:   F2:8D:57:B4:F9:1D:18:6D:89:79:F1:BF:9F:74:6C:EB:F0:DC:A6:99
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer:       /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial:       01962FAB7F2D8AD0EC513E12BE08D6D7E764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: JM0QcLsrwT_eugusMmdMbrHJgBU.roa (hash: k9PhP6FnC8suh0XvxnjFZIavQZ38oGedxbmkq9050Xw=)
                          2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: 06wKXoHk4f90/xs5wT7KudmPlQ+8QDtdQy/VWiyasWM=)
                          3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:2d:8a:d0:ec:51:3e:12:be:08:d6:d7:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=f28d57b4f91d186d8979f1bf9f746cebf0dca699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:a2:e3:0d:01:4b:cc:72:4f:16:73:c0:46:
                    4d:01:e2:83:b6:a0:d4:0b:0a:b7:4c:a0:87:a6:1f:
                    35:2e:3a:15:d6:2b:ab:03:50:1e:89:d0:6c:f9:ef:
                    c0:ee:43:ab:fb:03:41:c8:9e:c7:50:18:62:cd:e9:
                    7b:14:cd:51:c3:ec:56:0f:20:0a:9a:ba:62:a3:80:
                    3a:1d:48:98:21:78:1e:85:ad:9b:28:34:88:82:17:
                    a1:c9:e2:47:c8:56:a7:13:73:b6:fc:a8:2f:4a:08:
                    5b:04:9e:0f:63:ea:f7:f8:87:68:9e:30:22:60:67:
                    b4:79:46:a6:2c:db:01:11:21:b2:a1:3a:f7:4d:7a:
                    7b:96:64:d6:01:0c:a2:51:60:dd:da:8c:b4:36:fb:
                    a8:e3:d0:61:62:4f:4e:e4:19:e7:94:0d:25:89:a5:
                    ec:da:56:42:43:4d:93:fb:05:38:0e:d1:f2:b0:4b:
                    be:35:96:b8:78:98:7b:50:5c:e0:d1:f8:77:5b:ba:
                    20:b9:a2:e1:92:67:4d:1a:82:3a:cf:73:7c:06:89:
                    dc:b0:ff:bf:74:82:05:4c:3f:11:a8:ce:22:0c:2d:
                    1f:37:36:a1:e7:5f:3b:4c:ce:14:77:65:ab:1c:7a:
                    ee:81:f3:d1:f8:3e:32:4e:2d:e2:00:2f:18:88:03:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:57:B4:F9:1D:18:6D:89:79:F1:BF:9F:74:6C:EB:F0:DC:A6:99
            X509v3 Authority Key Identifier:
                keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:aa:a6:ab:a5:e0:c1:0c:92:07:81:7b:ee:08:03:ea:23:
         9b:f2:0a:6b:6e:c9:06:f6:ad:4b:b7:08:70:2b:4f:b4:91:5b:
         0d:03:b9:e9:7d:c2:52:eb:2b:69:90:20:94:bd:a0:e1:f9:57:
         57:22:af:06:97:28:9b:be:78:de:e3:2f:28:16:68:7f:6a:08:
         ae:59:14:69:2b:6d:6e:cf:a8:15:21:18:ad:6e:09:1d:43:6e:
         ab:4c:4b:5f:4e:e9:81:d7:4e:25:c8:ab:01:b5:68:0d:c1:43:
         28:62:c1:77:45:ed:cb:93:eb:04:2b:e9:84:aa:93:cf:bc:4b:
         07:1e:51:d2:46:31:66:27:8f:ce:33:ac:59:51:b5:58:94:7f:
         5d:49:a8:63:e4:54:5e:4c:80:a6:d7:ea:04:c6:ae:01:b0:13:
         0b:8f:2c:11:16:41:f2:bf:88:97:a4:df:1c:fc:d1:46:45:67:
         88:b4:35:0c:17:ff:1b:96:4e:55:67:94:28:66:58:ff:55:f0:
         a7:eb:f7:a5:35:02:0f:ec:32:78:19:e8:0c:ca:b0:b6:6a:b0:
         c4:3f:65:66:32:56:3c:33:b1:c8:c9:7c:47:93:90:a9:9d:3f:
         40:88:d2:82:7b:80:c2:27:21:f6:5b:32:c5:38:ba:01:05:99:
         7c:d6:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----