Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File:                     vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier:          U15wDNKIHk7EG9FXERub9h6WE2KGqsdS9i/Tlr5h9Vw=
Subject key identifier:   F4:E9:13:9D:89:52:33:C6:3A:E5:11:66:C7:93:43:F0:0B:1F:0F:6B
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer:       /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial:       01962E61C0FB98BF108436EE11D5841B298D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number:          0D2A
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
                          2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: R0k9fp0f0D266PTLaeTMSx5ukyo91YDG10sdjjCDo6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:fb:98:bf:10:84:36:ee:11:d5:84:1b:29:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=f4e9139d895233c63ae51166c79343f00b1f0f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:ec:60:6b:a5:5c:61:f3:0c:13:34:77:90:
                    5a:45:38:3d:04:20:3b:d0:4d:33:b6:0d:a2:9e:87:
                    3b:78:70:83:06:99:a9:ca:69:71:ca:6b:67:27:2d:
                    cf:58:c8:22:f6:1c:6d:e0:a8:8f:4b:08:68:6d:40:
                    21:e1:d2:ca:98:36:50:9e:22:5d:da:18:5f:de:12:
                    31:16:89:c5:65:6a:a7:9e:c3:9d:1b:07:a0:e2:77:
                    8d:9b:6e:9b:20:09:4c:6e:7f:cd:ac:49:4c:d2:89:
                    ee:60:41:05:0b:e2:3a:0c:8d:a9:bb:62:ba:ed:70:
                    47:2b:2a:c8:e7:b6:ab:06:38:50:e8:2d:0a:bc:a0:
                    9a:ff:fa:7e:52:bf:1a:53:e7:98:b1:70:47:6a:e4:
                    05:b5:2f:3d:e7:7b:ae:1b:16:5b:fc:ed:65:5d:a6:
                    0f:00:4c:f3:6d:5b:7c:ea:a6:50:eb:f8:46:7f:ba:
                    26:4b:84:41:e0:74:f3:97:39:e1:48:d6:3c:71:4a:
                    ea:e0:2f:3f:24:6f:b5:32:9a:79:0f:07:23:70:6a:
                    d4:0f:f1:33:37:66:b8:ac:96:51:7d:9f:86:a4:30:
                    98:93:2c:67:26:5b:90:9c:a8:a5:90:e2:09:a6:a3:
                    f4:d6:6d:39:08:3d:24:2a:88:c3:23:0d:57:13:f4:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:13:9D:89:52:33:C6:3A:E5:11:66:C7:93:43:F0:0B:1F:0F:6B
            X509v3 Authority Key Identifier:
                keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:8d:3e:b3:f0:55:de:f0:09:d1:b4:81:3e:54:7d:d4:4d:
         ac:03:3d:fb:04:b9:56:74:e3:63:28:ee:01:96:1a:96:3b:a0:
         b0:05:9f:67:7b:5e:4c:e3:f2:65:11:f8:3f:3a:37:6b:e5:ee:
         e1:9c:cb:c6:f2:9a:fb:85:2f:d4:b7:6d:17:2d:e8:32:a1:dc:
         2a:53:07:4b:a7:59:9a:e6:5b:23:b0:c2:2f:16:cf:6d:fc:b4:
         9c:06:2b:8e:e3:22:3c:14:1c:9b:c5:59:9d:26:2e:30:36:8b:
         50:ab:9c:04:9b:34:59:41:03:00:fb:e0:dc:f9:09:12:8f:41:
         61:be:8e:09:4e:a9:61:e6:26:4e:60:1e:b7:b0:01:cc:71:e5:
         76:af:f2:da:86:8d:1c:5c:a9:84:af:cd:3f:79:d3:10:fe:94:
         5f:2f:8f:fe:89:21:79:c0:27:86:32:7e:f0:8c:b6:e5:49:d4:
         3b:1d:e6:f3:d4:32:5d:dc:1a:01:53:f6:4f:40:c4:a8:80:82:
         24:96:ff:cf:f3:0c:45:4b:1a:89:7b:c9:e8:d6:07:d5:bf:d8:
         11:cc:d0:64:db:6d:15:ff:d2:43:7d:34:a8:9e:25:56:d0:65:
         0d:fe:e4:89:73:d3:fe:7c:5a:a8:41:2c:0a:34:46:19:15:00:
         53:56:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----