Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File:                     vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier:          iINP27DsSSiShc2UGpdPjTAeFUXIPcP6Oo74Isn/iu8=
Subject key identifier:   F6:E1:B5:C5:D1:91:C4:1D:61:C0:F1:A6:AE:2B:57:32:69:9E:83:90
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer:       /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial:       01962F3D47E249EF14BDB84420DBB472BC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number:          081E
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
                          2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
                          3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: cCxko/0ncauMZQwg2+5ZrOQKRL8nIPOwaFI1FRe6YEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:e2:49:ef:14:bd:b8:44:20:db:b4:72:bc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=f6e1b5c5d191c41d61c0f1a6ae2b5732699e8390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:07:e1:3f:1c:74:f6:c0:d7:0c:c2:30:e2:
                    bb:96:d7:a3:f4:8b:36:21:87:24:bb:9e:ae:2f:b1:
                    86:37:53:e1:45:b5:d2:39:b3:3c:55:a0:33:00:99:
                    6b:fb:de:59:39:60:aa:a1:73:17:81:b6:3a:c9:be:
                    01:e1:38:be:9a:e9:79:34:16:64:09:56:b6:ac:77:
                    00:7e:20:72:7e:62:06:1c:89:07:b1:3c:e0:07:3b:
                    70:cc:a0:07:42:61:15:83:18:61:ef:1d:05:87:05:
                    a2:3e:13:50:19:07:64:fe:11:6e:d1:17:7c:8f:d5:
                    16:2d:4b:a5:a3:f5:ec:a0:6d:57:4e:71:7e:3c:24:
                    0f:af:a4:4f:41:0b:3c:2d:af:e0:ac:41:16:8e:21:
                    b4:73:bf:59:df:ee:d8:8c:37:fa:44:b7:fd:5e:d1:
                    3b:31:5b:e5:70:a3:fd:1d:cf:d4:4a:59:65:f3:86:
                    fd:0f:6b:75:08:1c:5a:8f:13:94:be:99:9a:55:7e:
                    6c:19:33:76:f7:1d:f8:8e:56:0d:23:92:3c:a4:e1:
                    5e:83:08:0a:ae:2e:d5:93:1a:3c:c6:fd:2e:f5:ce:
                    1a:ec:6b:ea:18:ed:39:82:14:28:af:d0:f4:52:89:
                    a5:c7:8f:14:71:43:39:c5:3e:22:1a:aa:76:60:ee:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:B5:C5:D1:91:C4:1D:61:C0:F1:A6:AE:2B:57:32:69:9E:83:90
            X509v3 Authority Key Identifier:
                keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:58:e1:f0:f6:41:8f:15:a3:b9:5f:f1:42:eb:ea:96:97:88:
         ee:f6:4d:16:93:f5:66:76:e8:df:7f:4b:d1:55:b5:86:90:09:
         d3:e3:b4:46:33:9e:2e:2b:16:b7:44:97:23:30:41:61:da:a3:
         e3:42:79:d8:aa:ab:89:8f:b0:de:95:11:d3:58:d9:6b:bf:53:
         b8:17:f0:1b:82:70:1e:be:9f:46:67:60:89:54:87:d9:27:f4:
         f5:55:46:a2:86:46:dc:b6:ae:23:66:78:26:28:1a:96:a9:1b:
         8e:e3:76:ec:76:c6:7d:29:75:ae:99:b6:b6:b2:f1:bf:9c:7a:
         ec:e8:59:7f:8a:aa:0c:e8:4e:18:7f:b0:67:e6:eb:15:d3:81:
         f2:23:06:7c:b8:da:0c:e5:05:ee:00:97:cc:80:f0:e0:f5:cb:
         c2:0b:58:9c:ca:aa:e9:28:46:47:c1:e9:a2:94:5b:c1:19:ee:
         10:1a:c2:c4:38:33:aa:3b:8c:0b:bb:7c:1a:7b:d9:c4:a9:75:
         ef:1d:12:83:24:dc:3f:23:55:07:c2:7a:de:6a:56:00:28:a7:
         ce:95:82:87:2d:ec:60:4e:a7:24:82:37:d7:8d:76:b1:54:64:
         af:46:d2:50:6a:2c:91:da:32:b3:3d:a5:f9:b4:b6:35:68:28:
         79:be:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----