Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File:                     vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier:          Go6IrCPd1U4/JX9JriKLdaa04B9m9lPKbt6fBRtBm7g=
Subject key identifier:   8F:FB:BB:E4:D9:B0:48:EA:22:94:22:B4:7A:63:0E:AB:DC:17:04:3E
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer:       /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial:       01962E98E332CF61A18F13B46E76FE27F611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: RQcPR6VW1lqCldTk3iW7yQNbAZp5s36mlLQe3ZDGkVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e3:32:cf:61:a1:8f:13:b4:6e:76:fe:27:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=8ffbbbe4d9b048ea229422b47a630eabdc17043e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:84:6c:c5:ea:b5:22:2b:c5:e5:aa:0f:90:
                    67:8c:e6:6d:84:3b:d2:6c:0c:b8:14:6d:0a:8b:b7:
                    91:b7:3f:45:d7:5b:4d:f4:d3:29:70:a9:8f:1c:7b:
                    e8:8b:e0:96:4d:55:c2:10:64:92:8a:70:9b:44:aa:
                    33:98:ee:9c:5d:db:e3:94:19:a4:de:fa:57:fe:d6:
                    da:55:c3:3e:da:ce:13:fc:77:04:9f:9c:b5:e7:f2:
                    4f:66:89:61:57:da:3f:a1:47:a4:15:25:54:84:d7:
                    22:7e:a6:45:66:00:95:31:7f:2e:09:d2:94:5d:96:
                    d5:a2:bd:07:03:31:bf:2a:f7:75:70:5c:bd:98:d7:
                    01:45:a3:66:cb:66:2f:a5:a2:c1:e7:02:6e:0d:da:
                    ce:47:0a:ca:10:f2:70:c6:df:0e:74:0a:73:0c:7a:
                    07:e0:43:0d:cf:4f:be:55:a9:43:b8:cb:45:6f:df:
                    10:7b:44:49:02:b9:e9:25:1d:57:3d:57:37:45:38:
                    cd:60:c2:e8:71:5a:4f:5e:81:cd:75:31:4a:d9:47:
                    05:16:3a:5d:86:53:b2:a5:a9:f1:8e:05:ad:a1:16:
                    d8:c5:0b:14:ae:8e:f4:df:2d:7b:f9:45:b4:2e:12:
                    31:7c:06:08:2b:63:ab:7b:31:a0:0d:9b:8d:58:0b:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FB:BB:E4:D9:B0:48:EA:22:94:22:B4:7A:63:0E:AB:DC:17:04:3E
            X509v3 Authority Key Identifier:
                keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9f:23:17:d0:d6:a7:bd:5e:2b:4c:3b:0b:95:38:bc:d9:9b:
         7a:c0:bc:f3:96:9d:a2:be:18:6d:a2:bc:ec:c3:de:c8:3f:f5:
         bf:11:54:3d:fb:6f:a3:3d:78:aa:36:63:be:8e:85:b2:0b:f4:
         2a:25:9c:af:04:85:75:36:25:1c:74:8e:3e:4a:77:b7:31:1a:
         5b:a6:5f:64:23:76:38:87:02:8e:85:79:98:e1:0a:d4:c2:e8:
         8d:4a:37:52:64:b9:c5:b0:e9:aa:5b:23:21:5f:5a:cd:f1:35:
         3d:f4:1c:1d:80:11:14:ea:11:6f:1e:48:8b:a3:e1:c7:8b:b4:
         39:d7:35:bb:83:cc:5f:5e:2e:f9:7b:3a:45:48:01:40:7d:3a:
         78:17:37:e2:76:35:bf:e5:d6:76:5d:d6:95:c1:b0:95:ab:82:
         33:0b:d6:81:2d:60:9a:96:2d:6d:c3:49:3a:63:e8:dc:28:fd:
         c8:cd:01:95:34:d7:3b:5d:45:64:d7:1a:22:28:eb:ed:bb:43:
         c4:42:c4:e2:bc:e0:03:bd:1b:76:1c:95:3e:b8:93:f8:9e:bb:
         a2:24:c4:15:2d:9a:88:90:09:6c:ca:3c:8c:e4:22:06:20:40:
         5a:16:8d:cf:c5:d3:4f:d4:51:12:a7:6b:d8:6c:62:22:02:90:
         22:35:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----