Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          DlPbXRMEEWrm0eF0ksiCirhiUYmQxhk72YriFz3uXAo=
Subject key identifier:   0F:A5:CA:07:8C:E8:93:CA:E6:EF:C1:A9:FF:BC:CD:0B:07:A5:C7:81
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       01962E61C350ECABBCDF348BE2E1C0596710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: VuSE7weS4UMkoqtyd+6MP3um6m2OwGRjG7PacR4fPmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:50:ec:ab:bc:df:34:8b:e2:e1:c0:59:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=0fa5ca078ce893cae6efc1a9ffbccd0b07a5c781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:aa:cb:5c:18:61:28:3a:39:bf:09:0a:7c:
                    93:5d:59:39:04:06:34:d2:3c:35:c5:1c:14:e4:d5:
                    e1:40:69:9e:49:12:2c:43:c1:32:cf:83:80:7d:ce:
                    04:33:51:96:0c:f6:b2:78:d4:fd:ab:73:d8:a6:35:
                    85:cd:9c:f5:88:f3:e1:10:89:b2:1c:b5:a0:b3:09:
                    12:13:15:0c:31:94:b7:6c:fa:46:1f:42:5b:e6:d9:
                    f6:a1:87:29:fd:9a:f3:eb:53:8b:0e:fa:0b:12:18:
                    12:29:0f:42:cc:ba:91:73:0b:07:ee:4a:72:27:a0:
                    75:d3:fc:ac:87:a8:11:c2:06:34:cb:ce:b0:5a:9e:
                    d1:4a:28:aa:ec:d2:1b:8c:6d:63:76:2d:34:2f:ef:
                    1e:d8:b7:16:89:01:ad:6f:91:17:1e:2b:9e:e5:44:
                    74:29:c3:48:0c:16:37:06:f8:5b:5b:25:3b:d6:4e:
                    e6:d9:8f:4c:45:91:5c:7e:94:b2:f1:73:27:d2:db:
                    e8:b4:3a:48:14:c4:16:9b:d5:61:53:c8:fa:f7:61:
                    cb:37:86:ad:fc:fe:2f:26:ab:09:73:0e:82:e0:b1:
                    04:1a:31:11:4b:31:8f:4a:ac:f0:ea:73:86:a2:f3:
                    d8:fd:37:b8:bc:ac:0b:24:49:37:f6:b2:44:1a:ec:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:CA:07:8C:E8:93:CA:E6:EF:C1:A9:FF:BC:CD:0B:07:A5:C7:81
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:39:7b:1f:93:5f:6b:fa:5f:c6:7a:52:d6:da:da:2e:37:b3:
         8e:2d:65:36:e1:c2:21:bd:5e:b4:ca:51:24:17:82:1e:b6:58:
         63:8f:50:cb:86:d9:1a:a5:d6:b6:6e:dc:10:3b:34:c1:31:f0:
         81:95:ba:3b:ad:ab:07:bd:da:d2:f7:39:ac:8a:13:92:57:26:
         2d:ba:1a:e8:23:c3:0f:b1:f2:2f:41:eb:a8:5b:98:2c:04:3d:
         8c:93:02:ae:f1:17:e8:f5:d7:95:83:66:5d:c8:4c:d9:dc:e6:
         e0:a6:12:35:82:4d:02:91:e5:e5:66:3a:10:40:a3:14:9d:56:
         38:a5:4e:82:81:c1:c8:6e:66:75:e9:61:9e:47:8c:9f:64:21:
         e3:d7:bf:8d:80:02:da:33:2b:66:bf:e2:b8:34:1e:9a:16:0f:
         58:80:18:19:64:07:5a:8f:91:1f:ac:0d:90:cb:a3:de:47:2e:
         ec:a0:fd:1f:f3:8f:60:1f:dc:3f:c6:30:65:9f:2a:10:e9:58:
         74:e6:42:0a:f3:15:b5:fe:e7:f4:97:a4:ce:ff:72:1c:b1:be:
         42:30:ea:d5:e5:9d:65:cb:b7:bd:5a:62:7e:9e:cf:ec:37:98:
         40:d9:e1:ea:db:4e:c0:87:bf:52:09:42:9e:f6:a9:96:d1:8a:
         0d:a4:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----