Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File:                     vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier:          o+lhywWD+EHcL0rj4W4pag6HYzuYE/zmCmICdtQHcgk=
Subject key identifier:   E1:67:2D:C4:2A:DB:AA:7B:72:0D:EF:CC:69:B8:85:3A:1F:22:9E:C9
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer:       /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial:       01962DF4310F1173EC4672B1626651F5BAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
                          2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: Mx+f8ioFReEnBJGLiu7BjMNI1nEGreyBK8tbvrr1YHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:0f:11:73:ec:46:72:b1:62:66:51:f5:ba:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=e1672dc42adbaa7b720defcc69b8853a1f229ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:c2:81:8d:68:a9:6f:b6:1e:49:04:09:f1:
                    7e:a5:bb:fd:cd:3b:b3:59:37:d3:f3:9e:cb:7c:38:
                    d7:41:a0:b6:c2:04:ef:e7:62:e3:8e:2b:44:91:87:
                    86:16:8e:b6:87:ee:d5:83:37:2d:91:84:f1:71:34:
                    80:4a:c6:ce:dd:36:9f:21:ba:55:78:01:f7:1f:c2:
                    21:e0:d5:36:a0:cf:0d:8c:6b:5f:c3:2f:e2:14:33:
                    8f:1e:f8:57:c8:b4:f1:63:c3:89:0e:27:d4:fc:b4:
                    fa:96:31:02:f4:d5:ee:23:bd:c4:54:48:65:e4:1a:
                    22:b7:bd:4a:5c:6e:93:e5:cd:0c:e5:df:fc:33:df:
                    c1:57:87:43:44:78:65:3d:00:96:38:5e:d6:99:40:
                    e2:91:bd:88:5a:e4:b7:5b:55:74:ef:a6:5e:b7:52:
                    b4:4d:31:b7:46:3f:8a:6d:78:08:8b:ee:ca:db:f3:
                    28:a5:e3:69:70:ed:1d:a6:b6:8c:af:44:4e:bc:47:
                    9f:ed:fe:df:79:23:32:0c:cc:89:26:d2:8c:0d:1d:
                    c2:44:78:f2:cc:d2:c6:6f:ce:74:82:cd:3c:fa:78:
                    d7:d0:06:69:e6:d7:cd:d4:ea:40:0d:bb:6e:c4:ca:
                    94:64:ab:ca:2f:bd:23:db:35:3d:5f:b4:7a:8d:8b:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:67:2D:C4:2A:DB:AA:7B:72:0D:EF:CC:69:B8:85:3A:1F:22:9E:C9
            X509v3 Authority Key Identifier:
                keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:d4:b9:40:7b:2b:4d:49:d7:74:aa:b3:36:ee:68:61:7e:
         25:81:8a:be:8c:e0:1e:b6:12:75:2e:29:80:eb:63:33:7e:b3:
         2f:3b:7b:44:e5:38:a4:55:2c:4c:c3:ef:1a:28:cf:e2:b8:4c:
         77:8e:88:86:0e:4c:cc:c3:4b:75:43:ec:05:f8:aa:8c:f3:9b:
         c1:0f:81:98:e5:84:ad:4c:fa:87:73:50:33:3e:b4:47:c6:38:
         32:0f:cd:00:9c:1c:fe:cf:4c:b9:f6:79:99:7d:80:2a:b8:a6:
         fe:13:e2:a5:d5:50:0d:63:47:1c:d1:97:b5:17:fd:17:64:fb:
         67:65:4b:c2:89:0c:87:76:08:db:1e:96:74:fb:b7:3d:a8:1a:
         ce:c1:6a:26:0c:52:84:d2:81:dd:a0:27:ce:aa:b3:ee:fd:2b:
         b2:b5:68:ec:ff:4c:cc:2e:c7:e5:57:d1:06:4c:54:b9:cb:48:
         e5:eb:ca:8a:ed:09:60:97:73:cf:ef:29:12:d9:82:b7:73:c2:
         d0:f1:fa:00:00:2d:fc:63:f5:ee:05:22:0a:a2:b3:0e:cb:b7:
         50:10:db:33:c9:ab:02:4f:44:e8:67:f4:cb:3f:e1:8a:a0:f7:
         77:d3:f3:f1:fd:24:f6:a1:ff:91:cc:a8:e4:0c:f7:9b:d9:c8:
         33:13:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----