Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          ErvVYvBKf3P1TCHLoOdEnLd9d2QwXFjklebDPk6JsCU=
Subject key identifier:   2D:41:C7:E8:7E:A2:8A:8E:57:17:B6:0F:A3:B0:D2:90:FF:BF:9B:18
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       01962FAB5CB0B687A94FAF664A3F748CF611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: N6NqKfdmSzrbqejeKrq+hqca7AqAWFckjia001B4/yk=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:b0:b6:87:a9:4f:af:66:4a:3f:74:8c:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=2d41c7e87ea28a8e5717b60fa3b0d290ffbf9b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:c5:d3:d3:14:e8:7d:84:48:79:5b:d9:e8:
                    ec:21:26:09:0b:31:de:b9:91:d9:ad:f7:0e:95:fb:
                    4d:6e:5f:4d:c1:ac:bd:3b:4e:9a:8e:22:7e:e8:e4:
                    fc:0a:87:b7:b0:43:53:fe:7d:85:e9:fc:98:9a:0a:
                    a3:74:17:9d:b7:2c:85:10:d2:71:a0:c4:a6:3d:31:
                    13:6c:d6:2d:9b:a2:f1:91:dc:f2:a2:89:22:8d:95:
                    7e:61:6f:c8:17:e7:14:91:2b:b5:8b:df:ea:db:20:
                    3d:c5:80:87:36:99:fd:13:51:90:bd:be:a8:02:28:
                    45:63:6c:b9:35:4d:6d:ed:6a:64:48:50:60:e3:9c:
                    b6:ed:0e:df:2c:25:5c:de:7b:26:8e:ac:28:36:85:
                    65:98:a5:a0:95:ad:f7:f8:15:59:de:ef:db:dc:c3:
                    c9:e4:15:1b:ab:48:df:00:3a:87:3a:fc:42:85:f4:
                    8a:f2:b5:8b:ab:9b:9c:aa:00:68:68:53:40:2b:ac:
                    3a:69:15:79:f4:83:fe:e9:f7:6b:48:15:02:04:41:
                    c9:bf:ee:38:1e:28:8b:40:0f:df:d8:e5:1d:99:f8:
                    84:49:f7:f3:73:fc:2b:29:54:4a:bd:18:e6:ad:26:
                    6c:c3:71:45:db:f1:7a:06:37:5c:6f:66:aa:0f:8c:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:41:C7:E8:7E:A2:8A:8E:57:17:B6:0F:A3:B0:D2:90:FF:BF:9B:18
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:0a:35:8f:7e:b4:b3:9e:0b:03:7f:b1:0d:11:f8:b2:19:
         20:9f:1d:ad:85:50:51:2d:aa:51:ee:4e:24:f0:46:34:d8:e0:
         ae:08:56:df:94:a5:e2:c4:3c:69:18:7c:7f:79:28:83:6a:bb:
         6a:0d:04:9b:d1:64:b8:65:cf:f2:7e:a1:20:02:6e:fc:24:4c:
         59:8a:00:36:41:e9:aa:16:d2:6a:19:75:c8:c0:3c:03:7f:b0:
         2f:11:6b:5d:03:b6:83:32:b8:fe:d5:2e:ac:f6:3c:14:9d:45:
         36:60:85:eb:51:3a:70:ac:a0:3e:f7:00:3b:58:f9:c6:42:02:
         5a:ad:44:ec:24:6b:a8:32:24:bf:1a:6b:0c:d2:be:ad:96:40:
         6f:90:da:f0:2a:2f:28:6c:33:67:ec:6f:9e:5f:8d:83:3e:6b:
         36:40:b9:8a:a9:0a:ae:29:1e:f3:dc:75:42:df:f5:d6:e0:0e:
         d5:59:95:3c:ed:00:eb:4e:0f:f7:bf:c4:de:3d:19:ca:83:ff:
         77:d6:0e:95:71:4c:ce:2f:d7:10:70:94:1e:db:eb:2b:93:e4:
         cb:61:fd:04:16:fd:7d:ab:39:3a:1f:46:09:d6:db:c4:63:5d:
         01:5e:5e:19:82:4a:7f:a7:71:97:54:fd:73:65:56:58:9a:68:
         16:52:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----