Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File:                     vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier:          qubo/DD6mVhu92jZCstUpjyjArmstw5ZBLpd6MuGhXU=
Subject key identifier:   2C:84:37:2A:64:36:CD:10:E6:F7:DD:17:93:40:D4:06:95:52:22:91
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer:       /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial:       01962E98C9D791C8672AD3DFA0263D81CCFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number:          11BA
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: KjXGEtnp3kTy87xDX5GGe4AFswbkz8HrmZzGf/mVock=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:d7:91:c8:67:2a:d3:df:a0:26:3d:81:cc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=2c84372a6436cd10e6f7dd179340d40695522291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:57:67:56:9d:14:04:8d:9f:e4:3f:5b:98:
                    d6:94:7b:7e:cd:1e:13:a3:25:1b:0d:02:cb:ad:98:
                    28:28:f0:f2:ad:41:9a:9d:23:fe:e2:b7:69:97:f5:
                    a8:dd:87:a0:52:e8:74:0e:b1:53:59:bf:36:0b:b4:
                    7a:b1:1d:8d:30:98:39:95:f3:49:29:41:83:ca:ef:
                    7d:50:a6:e0:4f:48:9e:07:47:3d:11:70:f2:01:db:
                    c1:df:21:c1:5e:b8:0d:42:74:26:56:4c:55:34:c8:
                    ff:0f:cf:62:1e:e0:a5:86:9a:af:6f:78:7f:a5:ef:
                    78:1d:7b:47:f4:d1:b0:64:e8:b9:43:c5:42:4d:02:
                    30:2b:57:98:8e:6e:ab:53:f3:b5:52:fe:fe:58:a0:
                    2d:55:9b:b6:da:c3:cf:7f:98:78:ee:c1:93:17:24:
                    47:4a:5c:b2:f0:4b:c8:8c:48:fa:50:c1:46:27:65:
                    87:a0:2e:91:40:3a:de:98:2a:96:74:b7:8f:25:70:
                    cb:06:82:ba:57:bb:15:c3:c6:fd:a1:f5:4c:4d:2a:
                    e7:4e:0a:53:1c:61:c6:ea:81:06:52:fd:91:93:11:
                    3d:a6:89:54:8c:81:cb:5d:e6:fc:15:e5:bd:68:c2:
                    62:f2:ec:b2:06:7f:e3:38:bd:df:59:dc:3a:a6:7d:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:84:37:2A:64:36:CD:10:E6:F7:DD:17:93:40:D4:06:95:52:22:91
            X509v3 Authority Key Identifier:
                keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:98:30:e5:e2:5f:b4:94:22:7c:05:cd:23:1d:0e:f7:ce:
         9f:d1:c6:1e:dd:5e:66:c2:b8:be:9e:ab:27:64:26:62:80:87:
         39:20:7f:90:d4:25:fc:1e:6a:7d:2a:2f:ca:23:ad:3a:f0:a5:
         08:42:36:6e:63:b1:70:cd:5f:76:5c:c7:f9:45:ed:3b:de:5e:
         5c:ea:2c:0d:cf:6e:c8:94:d4:86:aa:27:f1:fc:3a:cc:ea:d7:
         11:a9:8a:ad:58:02:3d:6c:8f:1c:e5:97:5b:d1:6c:f3:81:ea:
         6f:ae:39:6a:be:a6:2b:89:02:2b:94:89:b7:1f:f1:e4:ae:a0:
         32:7f:88:13:9b:bb:69:b5:7f:30:29:5f:5a:b2:90:e0:88:7b:
         de:7f:34:fd:70:3e:e6:e6:8b:6f:7e:11:33:ec:6c:94:1f:5d:
         74:d1:24:41:1b:28:aa:8c:a4:12:b9:64:82:8d:dc:06:4d:18:
         16:f3:c9:6a:f9:1b:24:fa:98:49:8c:b7:87:e5:e5:22:9b:1b:
         cc:2e:c2:8e:53:38:74:f0:9a:01:45:8a:1d:0d:31:cd:d0:d4:
         c5:5c:ac:6d:50:9a:09:cb:20:ae:56:b9:3b:48:e0:b8:e6:24:
         9b:6f:13:47:12:f8:72:90:7c:51:d4:4c:c6:aa:7d:d4:8a:bb:
         4f:be:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----