Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          /jIn10/MUHy0TiSIF1JYtTZtD6xon+nFi6RHi1Yx2mM=
Subject key identifier:   3E:84:35:B7:F5:F0:A7:73:52:7F:75:85:A9:26:64:97:5D:D5:2D:0A
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       01962E99BE11B45B20C8ACF93F462A31ED9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0CB1
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: Mt0xf20oPQcrmXPYhEARrEnAm8H6XXybXTJhGe5OvZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:11:b4:5b:20:c8:ac:f9:3f:46:2a:31:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=3e8435b7f5f0a773527f7585a92664975dd52d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:3f:97:97:b8:42:23:ba:50:a0:f9:84:ba:
                    29:e6:b8:be:d3:5d:41:71:d9:f1:08:e4:ab:88:94:
                    95:5c:61:1e:27:ad:f9:e2:e9:50:ec:82:45:5d:b4:
                    2c:93:2e:10:bc:92:d9:a8:2a:0b:65:a5:3e:c7:49:
                    cd:31:e8:6c:51:7c:97:92:2d:dd:43:3c:99:43:83:
                    72:3b:22:16:fd:e4:e3:7a:5b:6b:60:18:fb:07:63:
                    46:1a:cd:2f:4f:da:0d:5a:fb:54:e2:4d:2c:29:ce:
                    67:af:3b:06:99:9e:18:62:2e:af:92:52:60:28:a0:
                    df:0c:1e:10:d7:3a:37:34:f1:03:86:79:88:ff:57:
                    f5:af:03:da:8a:fc:3c:f7:90:69:0c:cd:47:8c:7a:
                    cc:5e:75:79:bd:72:33:63:02:8a:70:91:17:f3:05:
                    38:e1:7e:ac:d4:7c:76:45:23:50:79:6b:56:0b:23:
                    55:6f:f0:97:11:f3:e8:5b:4c:bc:72:86:75:04:71:
                    54:5b:c0:18:12:05:44:42:fa:09:43:f5:e0:5b:2e:
                    49:15:e3:7a:00:a9:1c:99:78:f8:cc:f7:96:43:ba:
                    ec:f2:9c:61:01:eb:b5:cf:d5:09:a6:70:eb:6d:38:
                    63:ea:a8:35:96:37:ba:01:8e:19:d6:57:80:bb:f5:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:84:35:B7:F5:F0:A7:73:52:7F:75:85:A9:26:64:97:5D:D5:2D:0A
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:56:54:0f:cc:47:6f:b4:a6:cb:1d:54:9c:c3:98:da:e2:
         ad:1e:76:63:c3:e3:2d:31:24:9d:43:39:15:38:41:f0:3c:a1:
         60:34:df:81:57:d7:29:6c:93:83:5d:a7:93:82:94:92:ee:ef:
         89:f4:c3:40:57:29:94:2f:b0:90:35:84:50:f1:e6:91:a0:ac:
         b9:6d:ef:a0:9e:6a:71:0a:a1:59:ff:90:2b:d2:b7:c0:a5:3d:
         61:d0:e0:ad:6b:2e:78:69:09:19:c8:ec:02:66:a5:2a:32:b3:
         13:ae:2e:d6:71:75:22:95:5e:40:53:8d:98:9d:93:39:61:b8:
         79:f9:3f:a1:9b:94:ed:5a:25:8e:01:c8:2a:5f:d5:d9:f0:ca:
         aa:e1:04:43:bf:dd:4b:99:1b:68:90:2c:1c:4f:21:36:6e:df:
         25:b4:5f:18:be:f8:05:43:dc:44:72:90:12:7e:29:cd:a6:33:
         6c:ef:4b:23:b2:87:0e:c5:a3:a4:e1:2a:ef:9b:63:cc:d6:dc:
         b1:43:21:40:5e:8e:f9:4c:e7:65:95:86:69:07:f1:3a:67:1f:
         d3:01:2b:43:45:be:c2:e4:18:ba:da:df:7e:f1:17:7c:6c:85:
         9b:88:15:39:2f:e3:75:ae:04:95:d5:26:95:43:77:0a:47:da:
         ea:8c:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----