Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
File:                     Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json)
Hash identifier:          ja9J37Z2K+PMEx81xoILZYE7AnXE25r31YrjTFK9x0c=
Subject key identifier:   45:78:61:21:63:3B:A2:80:0A:A4:D4:C0:0C:AC:D1:15:EB:7E:BF:E3
Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF
Certificate issuer:       /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
Certificate serial:       01962E990FCA4AC3421F5AD5CAEDD0DF2C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
Manifest number:          14A5
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: SKTINwD7FXLQEoj2NGHnJ6pbkhOArimCvzoeUjwjixg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:ca:4a:c3:42:1f:5a:d5:ca:ed:d0:df:2c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=45786121633ba2800aa4d4c00cacd115eb7ebfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:5d:0f:6a:1e:3d:dd:5b:a0:88:ae:e5:cd:
                    7d:02:21:23:04:e4:30:ad:11:c1:ef:e9:9d:0a:3e:
                    61:2d:02:40:c1:87:12:72:9b:d4:3a:d5:86:8f:c2:
                    64:34:ce:61:24:dc:cb:59:04:d4:61:41:22:6b:80:
                    8a:ff:d0:b0:11:8f:80:26:22:fc:40:71:7f:ea:bd:
                    24:35:cf:7d:54:cf:53:f0:36:c6:78:f9:1b:a4:43:
                    3d:c1:b0:a5:d9:f4:f1:a0:6e:0b:9c:3e:6c:8a:80:
                    eb:83:f6:80:ef:23:21:9f:0d:16:67:0d:e8:8b:e8:
                    8b:39:55:c2:03:1a:5b:66:20:a6:95:db:51:85:e3:
                    24:43:64:b3:57:c7:7a:f9:96:a1:d6:d2:11:fd:f9:
                    89:95:cc:f0:90:5e:5b:cb:eb:21:c4:5b:03:ad:15:
                    cd:17:8f:d9:9a:1a:87:90:71:48:b3:77:7d:3a:a5:
                    e7:70:4b:1c:d7:23:1b:11:96:1a:57:27:26:e1:3f:
                    8a:91:6e:e5:c7:24:68:d0:8f:16:2f:90:4f:b7:67:
                    f2:cc:86:2e:1f:0f:1a:fe:e7:ad:9c:3f:a3:de:a8:
                    0c:38:56:be:6b:7b:4a:d9:87:bd:43:a8:aa:cd:19:
                    78:ed:7c:e9:da:a7:dd:7e:18:cd:c8:a3:52:44:ef:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:61:21:63:3B:A2:80:0A:A4:D4:C0:0C:AC:D1:15:EB:7E:BF:E3
            X509v3 Authority Key Identifier:
                keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:35:54:53:00:20:6a:fd:89:d2:2e:64:b4:86:26:5d:96:6c:
         ef:9e:c9:b8:da:6e:a3:4f:34:09:8f:31:54:f9:2b:23:f4:e7:
         e0:45:c0:79:ca:98:0a:f0:55:91:28:f5:92:ab:79:b8:31:ba:
         60:87:18:92:73:17:47:42:04:57:bc:6e:72:7a:ba:ed:98:24:
         d1:b0:37:b5:21:c2:43:04:13:4b:8d:f3:9c:af:ab:c9:62:f8:
         4b:98:54:45:e2:d8:94:a2:1c:d2:0b:78:7b:25:08:0f:e2:ae:
         2e:ae:ab:da:64:15:8d:b0:5f:74:85:c1:97:d5:86:4e:37:f6:
         cd:79:d9:e1:bc:fd:6a:d5:24:75:9b:8d:f1:e6:55:3e:39:df:
         2b:b0:d8:fb:05:f1:6a:e9:d1:e2:7a:34:08:5e:31:6c:5a:3f:
         a4:8d:4e:54:e9:bd:1f:fb:ee:b3:ff:9a:8d:c5:39:cf:11:16:
         c1:14:98:e9:67:71:36:1d:cd:fe:51:12:69:18:e6:5b:b5:04:
         b4:c6:d4:dc:59:32:8a:0d:29:ca:de:3d:ba:fd:6e:25:62:db:
         46:d1:76:1c:ed:45:25:5f:60:96:05:10:dc:16:a6:27:35:f7:
         d1:1a:3a:4b:63:38:89:7e:84:39:48:2a:d2:a0:b3:1b:36:85:
         bd:ba:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----