Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          GQMUAzagmqlDVQpf3ESW8wK8c6aKG27y/IugugScRcc=
Subject key identifier:   89:CD:54:C6:C6:D1:E1:8D:49:E7:35:F3:1F:F7:A5:7A:34:C4:5B:01
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       01962ECFB2F83012742848B0740E09AC4474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
                          2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
                          3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: 2TR8hGWwkCTOEByjSsPxXJeUvORas4L+miGsoEyZvlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:f8:30:12:74:28:48:b0:74:0e:09:ac:44:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=89cd54c6c6d1e18d49e735f31ff7a57a34c45b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:fe:1f:95:f8:6e:3f:71:22:88:9a:dd:b3:
                    0d:23:39:d4:48:b1:1b:d6:38:83:9c:de:50:f4:43:
                    8a:cf:69:42:69:dc:8a:34:4f:14:1c:9f:60:05:e9:
                    12:58:ce:6a:e0:30:d0:55:1d:fc:81:e7:f7:a6:a3:
                    c5:76:55:d7:11:b3:f0:db:24:fd:ee:dc:31:cc:10:
                    80:68:fb:fe:4d:d4:1f:6a:1f:4f:ae:2c:7e:b3:db:
                    d3:a5:da:b9:6a:cc:9e:24:a4:c8:ba:59:4d:3d:61:
                    3a:cf:2d:24:a8:58:4f:78:c7:d2:a8:46:c4:ff:d6:
                    4e:ef:28:44:d9:e8:58:62:79:05:8b:70:1c:3c:bf:
                    6e:e8:1e:7b:90:20:7c:7d:5a:44:da:e9:01:67:6d:
                    0f:0b:da:d8:07:12:0c:51:0a:d2:bd:72:2d:2c:cc:
                    02:b2:b2:35:4f:3e:15:8a:23:a8:91:99:29:2f:a4:
                    da:37:ba:47:a4:eb:0d:b8:30:9a:c2:10:e7:71:17:
                    6a:6e:db:e7:8a:29:55:dd:99:a7:b7:bc:a2:96:72:
                    85:69:68:09:fd:b1:a0:78:f8:1f:c7:6b:1e:63:2e:
                    c7:66:60:c5:c4:7f:10:b8:0c:21:14:6b:5f:67:70:
                    6f:15:dc:cc:e1:17:74:2d:d6:14:c6:fa:24:16:bb:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CD:54:C6:C6:D1:E1:8D:49:E7:35:F3:1F:F7:A5:7A:34:C4:5B:01
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:28:e5:40:20:d2:ec:f8:d5:5a:f6:ce:0b:3e:ce:32:98:f4:
         cb:f1:51:bf:92:3d:f1:43:3c:21:6f:51:51:76:43:76:45:b3:
         bd:27:14:4c:f8:db:a3:58:34:14:f5:e6:9f:6a:58:f7:1d:ff:
         1d:6b:5b:5b:88:8b:6f:19:35:c3:4e:72:2e:13:64:ce:e9:35:
         a0:fb:b4:f0:33:cd:27:2d:ea:d6:03:25:50:6c:85:7f:e5:0f:
         0a:6b:a9:aa:f9:51:22:38:52:1e:da:da:d6:af:b7:4a:f9:63:
         d1:b8:47:fc:03:62:1e:7e:cb:3e:e1:50:93:81:c5:d5:59:c9:
         2e:1e:24:7e:46:b6:17:b1:0c:31:dc:71:cb:62:26:78:9d:b1:
         da:cc:36:54:64:ba:a6:06:33:42:bd:d9:c1:75:25:29:ed:ba:
         e6:ea:b9:51:e6:fb:3d:3b:b4:b2:fb:1c:be:24:da:25:82:ae:
         66:ec:d9:44:a7:0f:52:b1:07:97:af:f6:42:5f:d9:3f:d6:be:
         1f:5a:c8:b5:b8:27:86:cd:d8:e6:ea:05:cb:e1:5a:c2:4d:d9:
         40:9c:7e:59:a7:c8:84:42:64:f4:b5:8a:f7:fc:d5:e7:d1:db:
         4c:6b:ba:91:5f:db:c8:0a:4d:97:ea:07:34:97:42:e5:b5:0b:
         46:84:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----