Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File:                     vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier:          nbuhjHlgKlYEq9e4t5taN3tPdNN8MmVrCWkbjTKKnr8=
Subject key identifier:   95:E2:1A:B2:2B:60:06:1C:37:30:3C:B8:CA:90:A0:E4:00:C6:55:80
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer:       /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial:       01962F745BC5F660B60EBA863EB5969E7C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
                          2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: SdXGZkkr3/D/J4P5duhd6RlKGm2UUDuARM5o2xdSyEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:c5:f6:60:b6:0e:ba:86:3e:b5:96:9e:7c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=95e21ab22b60061c37303cb8ca90a0e400c65580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:07:7f:aa:ae:3c:99:89:f6:d5:b4:b4:8e:
                    92:49:48:be:f0:f0:4a:50:82:13:cb:95:51:c0:ec:
                    de:4a:97:9e:6c:c1:68:55:a3:34:3a:dc:4e:c0:60:
                    46:fa:1a:1c:bc:3b:de:70:c7:fa:fb:3b:71:7f:a4:
                    ed:6e:c5:29:2c:5e:2e:2c:d0:c6:eb:e6:0a:aa:cf:
                    96:2c:08:58:4f:66:5f:4d:a2:57:16:16:fb:1e:eb:
                    d9:da:e2:84:f1:b6:ca:ce:bd:c1:c2:84:68:f4:3a:
                    cd:ab:6b:1a:89:02:eb:81:da:f4:de:68:b1:df:f6:
                    3e:ab:5d:66:0d:71:fc:7e:fb:f5:e9:b5:26:b6:84:
                    e7:f7:5e:79:24:49:c4:99:55:50:1b:25:26:94:c5:
                    67:9a:7a:eb:72:e0:3c:f7:aa:1b:1e:77:21:a5:a9:
                    d4:af:ff:7e:ed:44:63:c3:3f:6d:52:99:bd:a0:8c:
                    70:26:d9:01:fc:49:73:f4:30:62:39:c7:ee:a2:b6:
                    49:db:12:5c:60:7e:4e:88:3f:80:1f:f6:85:9b:11:
                    5d:10:76:d7:e2:13:71:3d:fa:f5:e5:74:a5:59:e1:
                    fe:77:4c:c0:fc:5d:32:dd:62:c3:31:97:82:c7:4a:
                    11:ae:3c:81:4e:be:8b:82:90:cd:40:cd:b2:b2:f4:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E2:1A:B2:2B:60:06:1C:37:30:3C:B8:CA:90:A0:E4:00:C6:55:80
            X509v3 Authority Key Identifier:
                keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:14:93:ba:e8:af:11:45:d4:89:2e:01:49:bb:50:fd:ee:
         1c:5a:73:ea:9a:1a:c2:1f:d6:a7:2d:ee:e2:53:14:26:da:83:
         80:89:76:05:e7:c2:65:13:0f:1f:83:f9:ae:03:36:42:77:cb:
         3a:07:aa:c4:67:21:05:88:1a:c8:6b:9d:bf:c2:1e:ff:83:02:
         c9:b9:dd:72:17:08:00:62:57:57:cc:92:ae:c6:70:5c:34:57:
         72:e3:cc:7c:57:6c:e9:79:27:e3:67:8d:90:a1:4d:68:8e:84:
         2b:83:22:b0:4e:08:1b:2d:33:24:de:7b:0a:9f:29:5a:e6:ac:
         53:ca:b6:94:6d:30:fe:fd:92:ce:de:be:69:c7:6a:cc:12:6a:
         ef:34:a5:ae:32:43:ae:2c:d9:06:a1:d8:4d:5b:12:f5:c9:b5:
         57:e7:75:5b:9c:aa:2f:a1:bf:23:23:1e:46:17:76:c4:7a:0a:
         9b:42:0b:7e:34:4b:87:96:f0:0d:fc:de:96:17:7e:29:ed:12:
         6c:4a:8b:4d:c7:de:a3:c5:5f:5e:99:40:a5:6c:fd:89:8b:e7:
         36:c6:0d:6d:65:85:dd:c8:07:9a:e5:f5:f3:10:0c:93:10:8b:
         81:cb:93:b2:62:61:df:21:ac:1d:97:03:d9:76:3f:6f:9f:ef:
         5f:0b:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----