Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier:          V83ZTjUwWNp3aHH2e9lgkhPxZ56BT03CerkMOVF1yEU=
Subject key identifier:   77:9D:CF:83:38:AC:D8:E4:95:A7:81:B6:8B:29:A6:ED:66:95:44:26
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       01962E619393CE5B0A4A05BE16B404748D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number:          022A
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: +Rj1VJMk9Vaw+9kC11oU+xJPzpx/BG8n1i+noXDkQtU=)
                          2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:93:93:ce:5b:0a:4a:05:be:16:b4:04:74:8d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=779dcf8338acd8e495a781b68b29a6ed66954426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:95:21:45:41:68:6a:e0:11:70:c1:35:1f:
                    ff:a8:46:1f:33:62:af:f4:d7:25:fe:f8:d1:2e:bf:
                    d6:3c:cd:68:df:60:60:c9:6b:cb:19:54:6c:1c:2d:
                    4e:43:16:14:ed:f2:ef:1a:38:38:15:48:34:3a:6f:
                    aa:28:86:51:e8:bf:be:44:4c:3e:02:39:56:d0:a9:
                    81:e1:a1:f6:b5:1a:4c:84:83:a0:c8:a2:b5:93:41:
                    f0:19:bd:d8:52:30:1c:f9:e4:2b:d8:86:5b:be:df:
                    e3:0b:55:d3:ee:72:a8:fe:59:9e:0d:bd:32:80:b9:
                    a9:ec:ae:b2:5e:b8:62:4b:64:c8:ab:54:9e:ed:12:
                    1a:25:1d:5c:93:47:65:d2:07:1b:1b:4f:35:1a:2b:
                    68:fa:70:3e:c9:d8:5e:9a:24:35:87:22:88:02:5f:
                    8e:17:38:74:c5:52:a9:85:92:d2:e6:71:53:26:30:
                    84:7d:8e:4f:ff:4b:f5:69:ef:50:18:fd:30:c2:de:
                    24:61:ac:9c:db:f3:55:6c:d8:65:95:11:3e:c6:c7:
                    80:e9:7f:2a:0a:9d:1d:8e:74:2d:49:37:74:04:17:
                    ff:98:2b:8e:26:1b:3b:2f:7f:04:4a:d9:63:80:99:
                    58:f7:3b:4d:67:72:c1:30:81:f2:31:74:f5:f8:2a:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9D:CF:83:38:AC:D8:E4:95:A7:81:B6:8B:29:A6:ED:66:95:44:26
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:ba:2d:b1:9b:d5:b6:23:c3:03:88:fc:9f:33:46:e1:ee:
         a3:f0:96:c5:22:37:47:5b:44:94:1b:a7:95:e5:53:e5:bb:a7:
         31:0a:36:11:6e:d5:1f:69:92:24:e2:10:05:af:a5:91:b5:6d:
         a7:ac:f8:60:33:a2:f7:c6:38:38:6a:3f:66:21:3b:e8:13:ee:
         14:e2:7d:b7:bb:96:06:51:d2:ec:f8:fb:58:68:4d:10:b7:a6:
         8c:85:c3:b4:de:f2:12:83:b9:01:37:9f:fd:dc:dd:ab:d0:18:
         fc:47:df:51:ca:f4:b2:d2:a5:60:fb:8b:c1:67:55:9f:6b:a5:
         ad:c2:86:dd:5c:54:20:90:7c:05:8b:7e:f6:62:35:03:68:43:
         9a:a1:dd:c4:fa:05:e9:98:5b:8c:30:a5:24:0c:74:1d:b2:b4:
         93:5e:ef:9d:e1:16:bd:e7:4c:bf:03:32:59:d3:9a:92:cb:16:
         fe:39:a5:5d:c8:21:25:ab:ee:6a:fe:27:0a:38:ee:b0:be:f4:
         7c:68:36:95:f8:e1:10:36:ce:f5:ac:74:85:ee:e9:50:6c:6d:
         1f:2b:57:3e:9c:5c:ec:d8:88:bc:16:d1:88:88:f7:0b:df:b5:
         da:f0:d3:1c:35:6e:24:35:d1:c7:29:4c:eb:71:8c:11:cb:c4:
         db:93:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----