Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          G7rVnmPZUiR/st6jrlISjQpwNc+Uao6O4PQThqMe4Fk=
Subject key identifier:   52:48:77:DD:70:65:64:72:F7:A0:8E:38:ED:C9:E6:CF:6A:F9:6A:00
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       01962E98F11E07E4A7EC0190A0125C3E7CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          0D4F
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: rrLX/6ZTkNA/ZQCMsvPfrWnu5LrgTHyjRC1SyB+QRGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:1e:07:e4:a7:ec:01:90:a0:12:5c:3e:7c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=524877dd70656472f7a08e38edc9e6cf6af96a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:56:79:9b:65:67:6d:15:42:77:82:cb:43:
                    8e:dc:33:d6:dc:8e:3c:f3:bb:48:e8:ea:3c:fc:52:
                    72:e6:b9:ec:45:0c:b1:ca:20:40:fb:b9:97:8c:86:
                    ee:5c:c5:4b:7f:88:b4:92:97:33:d9:06:67:2c:58:
                    cd:1b:ad:67:2a:36:12:e1:de:59:b2:8d:f1:23:4e:
                    36:9a:90:3d:46:2c:46:9c:7f:c4:5e:54:28:ac:31:
                    76:5b:6a:59:b8:1f:4a:a6:8d:49:97:a3:cb:8d:62:
                    93:6c:1e:38:db:0e:03:40:28:1d:9f:dc:60:66:25:
                    4b:cb:16:1c:06:69:e7:f8:2b:88:4d:cb:cf:27:ba:
                    ba:93:b5:07:79:0f:0c:5a:9b:82:db:ee:f2:dd:e1:
                    a0:67:53:ae:23:80:33:f8:5d:9c:c6:4e:77:15:ed:
                    0c:52:3b:41:35:c3:e8:1d:0f:91:e2:be:4a:17:b4:
                    67:29:60:e7:f7:2c:7d:af:5b:d6:8b:1b:bd:65:1d:
                    51:f5:71:27:c6:43:a7:45:f5:b9:b8:40:fd:60:e3:
                    ab:19:08:2d:c6:3e:28:ad:a2:46:f4:2b:f0:79:ef:
                    03:19:29:3b:87:41:f5:83:4b:01:9b:b6:f2:6c:45:
                    87:c4:27:43:64:ed:02:46:81:14:7d:92:44:56:58:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:77:DD:70:65:64:72:F7:A0:8E:38:ED:C9:E6:CF:6A:F9:6A:00
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:23:e1:ad:62:4e:ba:7c:f3:9f:9f:8f:e4:e9:05:74:fe:
         e0:86:16:bb:95:eb:9b:0d:38:5c:70:07:de:54:c7:f6:77:f5:
         92:e3:1e:8f:fa:86:f8:0e:38:b4:2a:32:9b:ed:86:5b:fb:88:
         f2:9c:45:3a:c4:ac:6c:48:33:30:a8:46:39:e2:f0:41:fe:ea:
         52:4b:da:ea:ca:08:eb:32:a6:e0:20:df:aa:2a:46:fb:9e:ea:
         fd:07:c6:38:ca:06:91:bc:67:3a:a7:47:8d:75:dd:32:6b:21:
         af:3e:e0:54:20:ea:e0:f5:3a:87:18:7e:8e:c0:a8:21:ea:b0:
         25:ed:b3:d1:46:b4:4b:43:c3:9f:52:71:4b:b6:ae:73:46:eb:
         77:37:93:22:30:55:b8:30:bb:08:85:d4:75:38:ec:3e:7a:30:
         02:d5:08:90:1a:81:c1:0b:67:d0:69:e2:18:9e:d0:27:61:b5:
         7b:cd:10:c9:41:8b:27:58:f4:49:a4:e1:7f:ee:73:aa:e5:7a:
         96:6e:4a:b2:4f:05:fd:e6:b0:4e:65:c5:bc:2c:32:9c:50:7d:
         46:96:21:09:93:02:f4:76:34:d4:1a:f6:28:28:3c:c8:c1:bb:
         f1:14:fb:1d:af:c4:e9:98:ef:dc:8b:25:1a:2a:7c:c3:4f:fd:
         e0:42:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----