Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File:                     VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier:          Inx3tXS4/EAl8vvRUZk/6qJlJA+zx/T64ODQmZxhfGQ=
Subject key identifier:   B7:81:5A:6A:AB:41:1D:C2:86:A6:A7:E1:00:EB:04:DB:57:EB:87:FD
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer:       /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial:       01962DF3D1D678B4E53680772371CC77B5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number:          0798
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
                          2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: FXQdnTZTezgarh26aDbl/CXoZx1N/wZYkwqcXvkhStw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:d6:78:b4:e5:36:80:77:23:71:cc:77:b5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=b7815a6aab411dc286a6a7e100eb04db57eb87fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:d2:89:55:1d:cc:74:f8:b9:e4:48:ee:0a:
                    ba:83:84:d3:f3:7a:56:7a:f2:7c:49:d4:f4:d9:59:
                    d3:1b:5c:8d:8e:b1:ce:e7:1f:06:44:50:4e:7b:e3:
                    7d:fc:4f:99:56:1e:ae:38:e6:3a:da:42:5b:02:c3:
                    cf:35:32:9a:ce:0a:cb:e5:4b:3d:71:24:7e:01:65:
                    72:d9:ad:3b:76:56:83:56:d6:be:e4:9c:a0:8c:63:
                    13:fc:c6:2a:9f:88:aa:18:b1:35:19:85:46:a9:e1:
                    61:ea:8f:6e:cd:39:f3:c8:68:7f:70:df:cf:e6:58:
                    64:11:2c:61:56:15:dd:fe:d2:25:c3:48:f3:32:35:
                    0e:f5:ca:5a:35:a6:e1:7f:77:c6:d1:1a:5b:39:88:
                    15:d9:15:73:0b:55:f7:c4:6e:56:df:19:c3:bd:74:
                    3c:ee:cc:02:64:67:f2:aa:76:f7:03:a1:28:95:53:
                    d6:90:f1:65:c6:52:df:6c:bf:58:1e:1b:10:b0:59:
                    83:fd:0e:d9:5e:c1:93:44:a2:3b:f6:f0:85:45:39:
                    0c:34:b1:da:11:54:94:d7:03:f8:00:58:70:e9:27:
                    2f:37:67:f7:36:d0:e7:63:33:15:e0:14:b9:9f:2b:
                    68:b5:e8:96:f3:8e:31:70:af:63:39:d7:b1:77:03:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:5A:6A:AB:41:1D:C2:86:A6:A7:E1:00:EB:04:DB:57:EB:87:FD
            X509v3 Authority Key Identifier:
                keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cc:76:fd:bb:ca:61:0a:39:18:db:1e:d5:de:22:5f:43:a7:
         7d:5b:9f:81:2a:01:f1:33:47:13:61:02:26:5f:4e:1e:3d:10:
         33:b3:49:2e:94:bf:76:23:00:f5:ee:6e:dd:1b:c6:2d:f3:c0:
         f4:be:60:e8:a3:81:96:53:f5:e7:87:1c:34:9c:0a:7b:4a:63:
         7e:05:93:09:e4:32:49:27:c1:9c:11:32:f0:1b:d4:0f:99:e8:
         f5:3a:32:4b:a8:21:77:af:97:d7:d3:a5:ce:aa:e0:ff:f2:0e:
         a3:e2:e9:98:cd:96:29:10:aa:66:80:d1:3f:a4:3e:c9:bf:8d:
         9a:af:1c:2e:93:d1:82:13:7b:72:2a:6d:ba:27:ad:c9:3a:fb:
         8a:76:ff:25:f1:74:b4:9c:13:ce:7c:53:ae:32:e7:f3:dd:46:
         46:58:3a:db:31:2c:dd:27:42:e4:12:d3:96:47:39:80:d5:40:
         95:7d:f6:2d:e4:1b:d7:23:e0:45:96:81:a4:ca:1d:74:00:c1:
         b1:3e:32:ec:7e:e0:8d:8c:ed:f5:81:a6:00:fc:ed:b9:41:57:
         86:1c:f7:da:2e:aa:4d:e5:7f:c4:28:61:1b:e0:99:27:8b:d3:
         75:2f:50:72:a2:ad:3b:f3:ab:0d:c5:7a:82:17:26:79:20:44:
         5c:a1:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----