Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File:                     VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier:          aN1Thuc/RS7I3GMvIsiL5MJc5ykA6WHrftPh9BXJ65A=
Subject key identifier:   80:7C:1E:69:5D:EA:51:D4:B1:18:58:E5:98:FD:C3:6A:5B:AB:65:56
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer:       /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial:       01962DF3B1AFDB9DA37F5BCCF5CFB4DA522B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: pljIdoOaTqeDMj34KTiGhUAkjo85AOd8o4RvBsdRyDs=)
                          2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:af:db:9d:a3:7f:5b:cc:f5:cf:b4:da:52:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=807c1e695dea51d4b11858e598fdc36a5bab6556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:05:b1:75:4c:fb:a3:36:c0:84:53:5e:95:
                    4c:2b:93:ed:94:03:0f:42:61:1d:13:d9:f7:23:d6:
                    81:0a:d5:06:b7:34:80:c8:07:e8:3c:df:c0:b2:31:
                    2d:71:1d:d1:c1:82:73:ce:8e:64:c2:79:18:48:f6:
                    1c:32:6b:81:57:7f:6b:12:66:4e:ee:35:83:47:5f:
                    a7:53:cb:7f:e8:80:de:c8:48:03:b8:09:54:ea:7c:
                    9e:d4:8b:84:54:18:f1:04:d5:5e:8c:3d:00:78:bc:
                    f3:7a:f1:80:68:4f:d7:64:6b:35:e3:8e:04:58:a4:
                    58:a4:19:0d:c7:72:0a:11:38:ce:c2:2c:0a:b7:c2:
                    c9:31:21:72:5b:54:7b:cb:23:06:cd:a8:9f:c9:bb:
                    21:b6:8b:76:83:1d:ce:20:f3:83:13:fe:ae:d0:53:
                    cd:b4:64:d0:ea:13:d9:70:dc:d3:cf:58:4f:12:ac:
                    fd:27:6c:d8:11:e5:13:83:52:b3:ca:28:84:65:9e:
                    e3:c7:9c:b1:09:43:b9:b3:53:0e:46:72:04:6b:f6:
                    a7:54:86:04:f7:0c:6f:19:8b:b7:2b:7c:8f:fb:f6:
                    af:63:be:3d:9a:bb:38:c5:9a:26:fa:ce:fd:2d:d3:
                    5a:6c:0e:27:49:9d:83:2a:99:33:ca:07:53:19:fa:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:1E:69:5D:EA:51:D4:B1:18:58:E5:98:FD:C3:6A:5B:AB:65:56
            X509v3 Authority Key Identifier:
                keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:d7:0e:5e:29:12:2e:37:1e:6a:33:04:ba:1c:a7:4a:81:
         7b:f7:7e:32:cc:8d:79:d2:de:aa:64:62:76:6b:91:91:f3:21:
         20:64:31:f4:5e:d7:54:41:ba:c7:66:a0:6d:3e:2d:41:57:b0:
         f3:05:d8:ef:db:88:50:e1:dc:85:b3:00:20:99:df:dc:0e:ff:
         09:4a:de:7c:66:08:ad:33:52:e0:0f:ec:10:88:8d:51:91:cd:
         00:41:d1:aa:be:a9:5a:62:12:8c:12:8e:53:f7:f5:da:fc:4f:
         b4:70:4a:47:b3:e2:08:d4:e2:03:7e:86:d9:01:0f:19:5d:fa:
         81:4d:88:8e:29:c9:41:a2:7a:21:e6:50:0e:a3:e0:4f:ea:58:
         d0:2d:fb:ba:3d:3a:73:88:3d:45:bc:89:cf:4d:df:57:2f:55:
         6e:04:f7:7b:25:47:51:a8:d2:02:83:01:fa:2b:b6:7c:7f:54:
         c5:fa:81:75:b7:b2:ab:65:08:fd:7c:c8:ea:51:84:c5:ab:51:
         1f:54:c0:86:9f:95:2f:94:c9:9c:70:02:5c:93:e9:9d:d8:4a:
         8c:c5:a0:ca:2a:f4:c4:e2:b4:ba:bf:92:a3:7c:4c:7b:97:91:
         a4:93:b7:37:e5:8a:e0:98:a3:95:1e:bb:cd:ea:97:f7:fe:3c:
         36:76:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----