Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File:                     VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier:          pMFBe6/VotlJJ7KMG+RhE/9AzAKYmhuLaXw4BhMtY8I=
Subject key identifier:   CA:E2:BC:ED:5D:D8:0F:5C:03:8E:41:7A:39:4E:E0:95:99:03:BF:B1
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer:       /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial:       01962F3DAD026FDD2FD4B1E92E4630F11D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number:          036F
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: RlHwhR54JFo3eiYjQ0HNmngGq1c.roa (hash: Zd+He0y/cu8f6yOcHa/4lo5/3/FYNL3U25I+7MQxDIs=)
                          2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: 61W3yyI5b6ALYigEmxUQq20NIJorgU2Bse6il8R5nEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:02:6f:dd:2f:d4:b1:e9:2e:46:30:f1:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=cae2bced5dd80f5c038e417a394ee0959903bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:6a:7a:b0:bc:b7:1d:c9:c8:1a:87:18:86:
                    97:dc:c9:47:5a:b5:92:5e:db:95:0f:b2:d4:ab:05:
                    98:78:5b:49:83:06:80:f0:aa:56:ab:89:b6:82:f2:
                    c5:a5:b7:26:72:0b:f5:fe:d9:d9:82:82:45:e0:38:
                    17:a3:52:99:c2:60:fd:5b:3a:52:aa:7d:7f:67:83:
                    5c:67:80:80:61:d7:25:98:59:ed:19:0d:7c:1f:75:
                    70:7d:c6:ab:b3:e6:3a:0a:a7:9a:de:4c:04:4c:53:
                    78:9a:58:aa:69:ff:db:2e:02:d5:c9:80:05:b8:b1:
                    b7:d8:45:87:36:c9:17:dd:33:09:2d:21:e8:64:17:
                    1a:58:d6:99:bc:0c:61:f3:a8:9d:99:d7:47:a5:25:
                    50:b5:94:1d:14:a0:a1:22:45:bf:d1:8d:94:0a:9a:
                    a7:7a:95:be:dc:0d:ce:56:b3:6c:33:b8:0f:fb:1e:
                    15:cc:a2:2f:db:e2:61:76:7e:0a:95:47:68:ff:cc:
                    31:19:d9:d8:f6:2d:a4:59:dd:7d:4e:1d:33:f8:cc:
                    0e:44:1d:47:8f:d4:97:dc:13:ba:57:c7:a9:d5:ad:
                    06:ce:78:b4:50:1f:a9:23:f8:b5:1c:73:b2:04:fb:
                    cd:4d:5c:55:89:7f:7d:45:44:ed:28:6d:68:41:78:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:BC:ED:5D:D8:0F:5C:03:8E:41:7A:39:4E:E0:95:99:03:BF:B1
            X509v3 Authority Key Identifier:
                keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:94:1b:39:08:9c:0e:ae:0c:72:f5:65:c0:2b:5d:ef:07:
         c9:a9:24:de:c9:dd:cf:a2:ff:6e:40:21:09:50:33:4b:74:5d:
         da:fe:19:8c:7d:27:6a:f1:cc:01:4a:1f:9f:51:53:ba:47:32:
         51:8e:a2:bd:31:67:ae:98:97:a7:57:66:50:07:cf:a2:d6:3a:
         4c:24:6f:23:69:69:32:43:01:4f:32:56:ef:fe:01:1e:c8:f8:
         13:a3:8f:ad:df:b2:44:67:6e:5b:23:be:5a:f0:01:9a:3d:b7:
         97:0d:8b:b6:18:fe:2d:36:d6:e3:98:d3:f7:ed:9c:56:42:a5:
         18:58:7a:b9:bd:c6:9c:f2:4c:4e:cb:9e:5d:7a:16:d8:c8:2f:
         9e:e6:29:00:4c:9d:e7:2a:c7:75:b7:bc:2f:56:5e:b5:cb:68:
         1e:fe:ce:de:da:03:36:69:16:33:08:2a:4c:ef:53:84:bd:08:
         7a:18:ca:25:29:83:b6:eb:24:99:5a:1a:17:c5:8d:33:ed:8f:
         ba:7f:20:2f:a5:c8:0f:8b:1c:fe:f1:72:b1:b6:92:c4:28:ee:
         fe:41:e6:b7:25:92:16:27:fd:8c:9d:ba:1b:a9:44:7a:ae:1c:
         95:5a:93:7d:95:8d:1c:be:16:88:cc:fe:ff:85:24:51:5b:b6:
         c0:c4:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----