Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File:                     VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier:          hGqrUmfyhweefB3gNC13NM0fSIQdBCTJXzJNxqRS3oU=
Subject key identifier:   1E:94:46:1E:8A:C3:3D:B4:C7:3B:79:1A:B3:34:6F:FB:F4:37:7F:33
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer:       /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial:       01962F74BD34251FA085906BA71E62034148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number:          130B
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (hash: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=)
                          2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
                          3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: gpS07KQqVQmRjjAkSVlXO+9R3oqZPoSevD9niwK3Z5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:34:25:1f:a0:85:90:6b:a7:1e:62:03:41:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=1e94461e8ac33db4c73b791ab3346ffbf4377f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:fe:63:64:92:ae:44:df:33:e0:78:ab:b8:
                    b7:ed:94:5c:12:fe:53:4c:60:a1:64:aa:c5:e9:09:
                    f5:c8:55:27:9f:2a:d4:2d:fd:09:60:fa:3e:88:77:
                    ae:7f:99:7b:af:7d:df:a5:8c:51:e4:fa:e5:57:a7:
                    7a:2e:9f:83:0f:e9:b1:40:f3:b6:ce:2b:6a:d1:64:
                    f0:31:77:67:42:29:80:c9:de:30:d8:c8:c9:09:aa:
                    77:f3:5a:07:51:b3:51:76:ea:8b:31:95:ee:4d:50:
                    b8:67:68:dc:63:b1:00:68:89:1c:ea:37:ec:6c:55:
                    06:01:d5:d6:bd:df:21:d6:40:f8:bc:75:88:b0:2e:
                    db:85:48:c4:e5:e0:7a:b2:ef:af:70:e8:ff:ce:20:
                    f0:e0:51:14:8f:b9:81:92:d3:36:c8:57:6d:81:70:
                    0e:39:14:08:d0:26:68:00:a2:e6:6e:f4:d8:4b:0c:
                    f8:2d:90:48:26:a3:48:9c:6d:db:1b:d0:73:25:96:
                    9a:1d:fa:09:95:67:d6:f0:46:7a:4c:f4:99:d4:e5:
                    95:c7:74:57:cc:bd:81:d3:e2:63:9d:d4:2a:2f:04:
                    ab:a4:7f:ba:9b:7a:a0:96:e3:9a:7e:11:3f:5f:0e:
                    9d:84:96:ec:65:c6:12:4f:62:91:1f:8d:06:bf:a6:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:46:1E:8A:C3:3D:B4:C7:3B:79:1A:B3:34:6F:FB:F4:37:7F:33
            X509v3 Authority Key Identifier:
                keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:0a:48:0c:b3:b4:c0:40:0f:08:4c:17:c9:96:c4:d6:aa:
         67:41:75:65:01:98:06:8a:b1:85:3d:f3:9b:c8:eb:2d:fe:f5:
         f0:80:86:50:47:b2:f9:8b:f8:7a:1b:73:67:ef:41:8a:04:9e:
         86:5f:23:b6:98:f8:8b:d8:da:48:11:e2:47:dd:87:a1:bf:ff:
         b2:9b:e4:9b:50:b7:2f:3a:7a:c5:85:f8:e0:90:b1:9e:23:d7:
         9d:73:7b:ea:9c:16:a2:3e:82:f3:22:44:19:14:40:b3:4c:88:
         ee:02:fa:ea:6d:d1:4a:45:04:dc:35:3c:c4:67:07:ae:63:0e:
         19:62:ee:85:53:a9:32:d4:97:a3:17:74:72:d1:09:04:f2:b2:
         30:4e:a8:98:66:ba:e7:1c:6a:47:fe:86:46:90:9d:00:98:41:
         ff:13:60:99:c2:7e:df:72:2e:a2:96:fb:29:12:d1:8b:23:42:
         4e:c9:98:bc:fe:78:b6:ba:0b:0b:08:50:04:13:f3:9b:56:f5:
         f0:e6:17:13:bf:fb:7a:a2:ff:ba:f0:da:47:96:50:db:3e:82:
         5e:0a:a5:17:00:09:da:2e:d9:6e:48:22:21:36:cb:17:b6:98:
         68:7a:1d:16:9d:61:2b:f2:74:7a:59:7c:b3:c9:8d:15:91:b6:
         c3:19:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----