Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          AuUPbgcp2gYtZY0e8plWC85wfTPn06E1W5zjvV0zSvc=
Subject key identifier:   BE:3D:E2:35:CC:17:1E:4E:D4:20:3C:C6:9F:A3:B7:E7:47:90:A8:04
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       01962F74972C80107E94E0DA7EA32DF086AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1139
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: oSC8tRAkbpnCT5beLNoVAnIY/XRvoc0+PeDHU6vpFMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:2c:80:10:7e:94:e0:da:7e:a3:2d:f0:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=be3de235cc171e4ed4203cc69fa3b7e74790a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:d0:a7:c9:9c:44:61:96:53:90:f0:c6:ae:
                    67:a7:97:77:16:53:8d:f7:20:86:a7:c9:18:5a:35:
                    ad:ca:3a:7c:a4:8c:10:b1:b6:77:34:63:c3:20:f3:
                    e6:d0:c4:72:52:4d:19:9f:d8:a6:c3:5d:30:42:7a:
                    db:b0:1e:fa:57:fc:91:91:14:8c:1c:7c:63:cb:30:
                    f0:e7:fa:50:80:ad:97:90:a2:04:99:31:a0:b8:4d:
                    89:13:41:2e:aa:c2:5c:5f:54:f0:af:6e:10:2e:5a:
                    ca:3d:98:51:32:30:51:de:88:78:79:86:d7:61:62:
                    ad:83:fd:db:65:c4:1e:29:4c:cc:e5:52:1b:58:5c:
                    b9:a9:a5:d7:c6:0e:49:d7:be:56:3a:9f:0e:91:b0:
                    db:3e:3d:e6:e4:5a:04:30:bb:ed:48:e9:03:20:49:
                    e0:1f:c4:a6:50:bd:0f:e1:7e:3c:82:cf:66:88:b5:
                    a4:75:14:07:5c:6e:d5:2a:16:22:eb:76:55:5d:35:
                    f6:45:81:56:93:74:ca:ef:1b:34:ad:49:18:0b:3b:
                    1d:ed:43:48:37:29:19:be:7b:69:49:68:3b:80:45:
                    28:44:02:ff:bf:23:09:ba:3e:83:aa:a3:cc:b8:73:
                    5d:01:c8:b0:16:b7:e8:5a:50:98:56:ef:f1:c8:ed:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3D:E2:35:CC:17:1E:4E:D4:20:3C:C6:9F:A3:B7:E7:47:90:A8:04
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:2d:15:81:df:d4:54:b1:71:43:f0:51:db:eb:55:7f:58:
         fc:91:33:0b:b3:f5:4f:0a:a0:21:6f:bb:e8:dd:e7:02:b9:fb:
         23:33:e6:07:f5:0c:20:94:ad:57:3c:11:20:ec:a2:2d:36:e3:
         72:37:76:61:23:88:a8:3e:72:10:07:1e:34:d4:bf:68:7c:f9:
         42:8e:4d:fb:6a:4b:17:75:65:c4:af:7b:4f:7e:3a:1b:d6:26:
         31:be:be:d3:87:4f:d7:67:ee:12:db:00:53:86:c9:11:73:9c:
         90:dd:f8:f6:99:f0:62:8b:ea:e6:89:6f:e1:db:82:f7:4d:d2:
         4d:ad:ff:fe:86:a5:5e:e1:75:f6:f6:ee:0a:24:39:c2:02:eb:
         60:98:cf:4d:35:95:ab:14:a3:e0:55:e0:0b:f9:03:cc:54:3b:
         1f:63:45:6b:1f:39:97:bd:8a:ea:ef:0c:12:9e:f8:f0:d8:b8:
         d6:11:dd:48:f8:26:69:50:e1:b1:31:27:e8:22:6f:35:59:5e:
         1f:58:11:7b:0d:2f:c3:31:20:02:a1:63:73:59:a3:7b:01:9b:
         9b:7b:1d:e5:a0:ab:ba:86:eb:a6:51:eb:21:31:1e:a0:31:cc:
         ac:d2:2d:c6:18:ad:3d:04:81:08:0e:04:e3:9e:55:70:8f:f4:
         69:83:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----