Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File:                     VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier:          dPSzwVKNcdSf8f/H6+X5hTjTl4lt5ZZLVf+dOyok90I=
Subject key identifier:   AF:EF:64:C9:24:BA:C2:65:00:29:A5:EB:E4:E3:76:5A:73:C5:99:17
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer:       /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial:       01962F741D447D58C8D34E7C7F31D2EB9481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number:          022C
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
                          2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: k7iW5CrRpSNehf7KuvGngjnpz92suGbZ1ojcQUNiHzE=)
                          3: Wlq8JczS5O9x_-wRlhfNjfhOXSo.roa (hash: gCijQxztNK0z51fdMos9bsaBQa/7dff7n+52J3xqq5M=)
                          4: xK4HULlNXz23y2RfmIl2fRaQseI.roa (hash: wEwmfIEU0PyZxLE1YCmfzfppUZP/HwJLHEZYM0grOOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1d:44:7d:58:c8:d3:4e:7c:7f:31:d2:eb:94:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=afef64c924bac2650029a5ebe4e3765a73c59917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:5c:00:be:0d:80:31:ea:23:47:b1:7b:ea:
                    41:92:61:e4:19:ad:8d:5c:c6:8a:22:db:90:1b:2b:
                    42:e3:e9:ba:c9:59:58:ae:d8:98:79:bf:a2:8d:8e:
                    c4:f8:43:7a:67:dd:ec:c9:7e:79:31:26:79:00:55:
                    4d:d4:20:41:91:a1:b5:e1:c5:99:96:50:98:eb:28:
                    66:e7:22:a5:e5:56:9b:db:33:9c:9f:46:1d:97:c6:
                    9b:a3:cc:83:62:e2:d3:4a:6e:0e:bc:f4:95:69:3e:
                    e1:72:eb:80:48:a5:1b:3c:fb:5d:ce:0e:11:6f:fc:
                    17:a3:86:2c:8b:ad:26:e0:78:58:c0:57:88:e1:6a:
                    82:c3:83:30:fe:76:c8:58:75:96:c3:e3:fd:35:b8:
                    89:be:57:1d:9d:ae:0a:08:e1:fc:a8:2d:72:12:7e:
                    0c:5a:0c:0e:28:6e:06:c3:a9:c8:9f:8f:98:62:89:
                    9c:bf:24:d3:b9:30:fa:0c:a0:76:2f:e2:6e:10:89:
                    20:91:82:62:50:da:50:57:ea:56:0e:09:32:49:2c:
                    fd:c4:26:09:97:cc:8f:39:19:1a:c4:58:6c:3b:d9:
                    b8:44:78:6c:e4:12:52:8a:4f:7d:b9:d5:fd:b0:bb:
                    d6:8d:3e:71:27:7e:0e:1b:39:41:a3:a4:6d:03:a5:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:64:C9:24:BA:C2:65:00:29:A5:EB:E4:E3:76:5A:73:C5:99:17
            X509v3 Authority Key Identifier:
                keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:24:23:9f:8d:10:f6:11:89:75:6d:bf:1c:4e:04:72:d8:14:
         ec:3f:52:60:7a:72:bb:8e:f4:a0:f3:c3:ec:8d:a6:90:86:c7:
         3e:99:97:99:90:b4:92:70:29:4c:31:bf:74:ac:3c:6c:12:fa:
         3c:d0:7b:00:4f:73:d6:66:c6:61:75:a5:c4:cb:b4:83:1c:aa:
         77:aa:d8:be:5c:42:53:03:bb:15:82:76:68:05:11:8e:04:c1:
         f5:8d:cd:7d:24:63:67:a2:a2:87:01:28:ba:3f:b4:0e:e6:93:
         d4:2d:b0:70:e4:6f:3a:df:3b:75:c6:bc:14:de:22:47:3b:1d:
         dd:9e:4d:ed:14:98:9b:bd:8a:18:1f:ee:c2:b8:d5:1b:04:f5:
         11:c2:dd:0f:4b:0c:3f:df:69:15:4a:08:8b:a6:43:84:1b:45:
         6c:e2:f5:a4:48:52:ce:10:63:2c:81:33:4f:37:06:79:e0:f6:
         a7:a3:0e:ff:10:44:a2:a1:98:2e:78:8d:f0:4b:a5:cf:73:cd:
         be:90:43:4b:7b:fa:64:5c:92:9a:52:c9:e1:fd:40:bb:01:20:
         e9:e2:df:8f:42:43:be:2f:00:42:14:9d:9f:a9:d9:1f:74:4f:
         6e:1b:c6:34:bc:ed:cb:82:94:b5:a6:36:53:6a:19:5e:7e:28:
         e8:35:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----