Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File:                     vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier:          hqt78IVULADQywIvuwL7HapDu1/H6ZmLhzTA6ELWH6s=
Subject key identifier:   8E:19:90:FC:F1:F7:90:8E:36:9F:67:47:EE:BC:EC:99:6B:13:84:5A
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer:       /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial:       01962F063B80EF3F0E7B32B7FF0825C4724A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number:          0857
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
                          2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
                          3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: hJdHePKGxEYpwI7SJhbepSyzt3aNoRWwHyq9rx8i+Pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3b:80:ef:3f:0e:7b:32:b7:ff:08:25:c4:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=8e1990fcf1f7908e369f6747eebcec996b13845a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:1b:fd:c5:96:1b:dc:98:6f:97:6d:6e:a6:
                    91:51:a2:53:dc:48:66:3e:8d:7a:38:56:17:11:2a:
                    2a:29:a2:dd:fe:ef:b7:8f:f9:8f:c7:6a:81:3c:d3:
                    af:ec:aa:31:b7:3e:c8:ef:cc:c1:68:75:f3:f1:88:
                    61:78:c7:95:1e:ee:8b:66:8a:03:ce:42:70:48:cd:
                    b3:fe:4b:83:db:38:5a:1b:08:d4:0b:b7:9d:d1:4f:
                    f5:f9:3c:fa:31:1f:2b:3e:21:e4:5b:5e:cf:5b:2b:
                    07:d7:75:7b:67:9a:d4:3a:70:b0:87:9f:94:a6:1c:
                    54:fb:28:42:c4:ee:f3:ab:94:90:31:3d:71:a2:ed:
                    8a:4a:6a:b1:6a:48:54:83:fc:86:76:39:ba:07:3e:
                    b2:5d:e4:23:9e:d8:0d:be:81:5c:ad:46:4b:5a:be:
                    41:1a:a8:6e:b2:56:e3:45:bf:26:58:ba:1a:32:b3:
                    97:40:f7:6d:25:b2:c4:d7:0d:24:bb:ce:6e:6e:8b:
                    67:3b:0a:4e:06:4a:2d:0c:2e:77:0e:c8:b1:6d:eb:
                    a1:67:12:fb:7c:46:b3:d5:42:9e:dc:e8:b2:21:f6:
                    2e:57:27:13:bf:e7:51:1d:d1:95:d0:de:ed:f0:36:
                    f7:a8:a5:ad:87:ff:ad:57:06:84:42:fd:11:41:be:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:90:FC:F1:F7:90:8E:36:9F:67:47:EE:BC:EC:99:6B:13:84:5A
            X509v3 Authority Key Identifier:
                keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:74:1a:d4:a6:b7:16:06:8e:e2:c7:93:79:ae:d2:09:1d:4d:
         00:68:86:a3:e9:dc:77:75:8f:f4:be:b8:69:01:a5:ef:90:bd:
         e1:69:d7:3c:37:47:8d:94:55:70:30:d7:c9:24:30:b5:90:33:
         34:e4:d9:7f:b1:52:28:c7:40:e5:2e:40:98:46:33:d8:38:61:
         5b:5e:14:0d:6e:be:f4:e5:96:f7:5d:49:49:99:32:52:6b:2e:
         d2:1a:01:c5:58:98:b1:87:ae:82:06:1b:ad:c5:d4:4d:f0:f0:
         dd:db:a8:2d:98:77:a7:87:0f:69:bf:88:37:67:c8:68:d8:ad:
         aa:90:67:80:d1:48:e6:e2:1e:93:31:b7:5f:f5:0f:f0:07:bc:
         2b:16:86:e9:50:86:b9:5f:b1:02:96:ae:76:ab:d3:55:d2:ab:
         27:97:fe:66:b9:62:98:62:50:9d:b0:60:c4:a9:5c:ac:5e:d6:
         1e:cb:ca:a3:2d:a5:35:6e:69:89:df:7d:1f:26:79:a1:23:35:
         3c:19:af:06:a6:bb:b1:92:b2:50:03:ba:f5:45:16:fb:eb:c8:
         49:5a:2b:12:e6:3e:06:3a:81:95:4d:28:7c:34:2d:6e:da:db:
         5c:84:0b:e5:6e:21:9c:81:86:a6:7f:e8:1c:20:c6:29:d0:3b:
         d2:37:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----