Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File:                     vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier:          uK51S5Qs1Uk81PNEo37AvZXSt5H57f87LbWqKTbUF4E=
Subject key identifier:   9C:50:7A:11:B8:91:CA:37:AD:0E:91:79:86:A6:54:85:72:4D:88:D1
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer:       /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial:       01962F0741FAFDE4C6831DDAD0E2C9BA6C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: mpvAwxVC/LhpsF1XVOaBVwPw3V4YtdmkMzuLOIcD4mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:41:fa:fd:e4:c6:83:1d:da:d0:e2:c9:ba:6c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=9c507a11b891ca37ad0e917986a65485724d88d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:5e:24:ee:f0:21:75:8a:03:02:9d:a5:e5:
                    33:c3:b3:b0:14:69:fd:e2:68:0f:39:5d:01:57:ae:
                    66:28:b4:9d:7b:2a:d9:9e:ac:2c:46:24:f8:fb:2e:
                    9d:8e:c1:23:b6:12:4a:ac:4d:26:c2:8e:dd:10:f8:
                    6b:cd:88:66:2a:77:fc:37:b9:0f:31:32:ad:c4:7a:
                    22:c5:45:9a:a1:9d:72:8f:eb:28:a5:82:48:a9:5c:
                    52:8a:77:03:22:92:30:33:f8:0d:57:b5:82:11:0c:
                    ee:27:28:54:14:f2:0f:d5:ea:d6:44:6e:50:db:cd:
                    fd:17:42:98:f5:36:a2:20:30:c7:db:cd:cc:9e:74:
                    7c:68:0d:42:4d:69:5b:f1:26:5e:1a:2b:b4:1d:36:
                    23:9f:60:a6:46:8e:c8:da:af:64:e2:75:78:71:12:
                    8f:2c:45:3e:64:b0:5f:f6:a5:a8:9f:e3:48:63:fa:
                    35:2d:d1:90:24:b7:47:44:02:d7:a5:e3:38:06:18:
                    a0:8c:5c:fd:57:bf:6f:08:34:5a:24:fb:1e:0d:bf:
                    fc:13:b6:5f:99:3e:3d:da:bc:6c:c1:ff:fc:4b:f1:
                    ef:6e:30:8c:63:96:6a:72:39:62:17:8a:a0:9b:a8:
                    69:f9:b5:bd:7a:26:3b:c1:c8:da:77:01:1f:a4:c3:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:50:7A:11:B8:91:CA:37:AD:0E:91:79:86:A6:54:85:72:4D:88:D1
            X509v3 Authority Key Identifier:
                keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0f:2a:89:88:c7:17:22:79:74:de:74:c7:5c:aa:ed:b9:99:
         e8:e1:b3:14:ed:6b:c8:fa:44:4f:1d:c2:3c:24:90:a7:b3:63:
         ab:e1:1a:20:1a:2e:82:6f:4d:d6:c6:d4:6d:49:41:e8:58:00:
         75:87:28:9e:37:93:0c:8c:43:83:4b:db:56:21:01:3d:02:3b:
         96:de:41:3d:6a:26:06:ad:14:d5:52:63:47:5b:56:f3:37:95:
         80:cb:97:4d:74:45:d1:70:4a:46:c9:fa:3d:8e:f0:e0:2c:bd:
         5a:98:2d:91:3d:ec:db:a3:92:77:56:ff:f1:29:b2:9c:4d:cb:
         cc:73:de:9b:db:e2:e7:71:fc:81:be:a1:e1:e7:7e:2c:4a:5c:
         e5:3d:14:9c:61:73:21:f1:56:ef:cd:36:56:82:73:19:34:8e:
         25:67:c1:06:50:0e:ec:91:88:4e:02:26:0d:eb:e6:01:ef:48:
         58:0f:15:6b:9e:73:ee:c4:3c:db:0f:dd:31:da:f1:98:c2:72:
         08:2d:62:87:e0:a9:71:79:b7:20:4b:8a:45:5b:12:45:07:43:
         fe:26:f8:4a:23:d6:99:01:c4:b3:5b:75:18:6d:79:18:47:19:
         e0:80:ff:48:d2:57:3e:60:92:48:60:d8:37:f7:c2:ac:ab:32:
         2d:a1:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----