Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File:                     vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier:          3PnJJBPd69z1ENscJgvF9mmK4oAL62wNtgVIMkCMm/8=
Subject key identifier:   D0:9F:9F:13:93:18:C7:CF:48:3F:26:63:E0:98:BA:69:B5:FA:68:4D
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer:       /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial:       01962F063CE71BEE113036ACD2984D7873B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
                          2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: Ss4FMX2v1G0nu+GXo66TBX1pnc6Yvf4708jdUVoLghg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:e7:1b:ee:11:30:36:ac:d2:98:4d:78:73:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=d09f9f139318c7cf483f2663e098ba69b5fa684d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:9a:41:6b:60:d5:09:63:10:73:6a:86:a9:
                    eb:64:40:86:81:91:4e:ac:fc:ae:7e:0c:3d:ac:2e:
                    d5:89:9f:db:f9:38:5b:b1:f7:46:18:57:f9:3c:63:
                    a5:23:43:46:b8:f7:ba:8f:8f:9e:1d:b8:0f:75:16:
                    6e:21:1f:e4:8c:15:0f:16:0f:0c:6a:f3:2f:69:59:
                    27:38:7a:85:5c:cc:a8:2b:cb:0c:c2:07:65:c1:29:
                    69:d3:2b:bd:e4:e7:48:dd:bb:5d:ef:80:e4:45:35:
                    54:fb:d9:81:9f:b7:f7:57:cc:e3:c6:6b:87:68:e1:
                    aa:51:e4:2e:50:68:35:65:35:89:5c:3b:9c:89:5d:
                    6f:c6:e5:65:1d:10:9c:2e:d7:d8:63:c6:14:83:ed:
                    75:39:97:c7:61:f9:2c:2b:d7:33:00:be:ff:a5:e8:
                    f7:c2:b2:ed:c4:d0:9a:48:6e:56:80:a5:79:ce:a0:
                    30:9e:12:6f:85:a7:75:12:ed:ff:28:bc:9a:14:f2:
                    6c:86:74:6b:de:73:70:1d:ab:be:e0:3e:dd:3f:f2:
                    50:14:4c:9b:a0:b0:d5:00:53:0c:c4:dc:8b:00:c7:
                    bb:33:33:b7:57:f6:54:67:d0:0d:84:35:2d:40:29:
                    d2:19:d3:f1:b6:28:d0:2b:2c:7a:76:a4:ea:bd:08:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:9F:13:93:18:C7:CF:48:3F:26:63:E0:98:BA:69:B5:FA:68:4D
            X509v3 Authority Key Identifier:
                keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:5a:c6:5a:b2:54:01:41:7b:78:60:7a:81:f6:79:77:ec:
         b4:b9:cd:10:8a:9e:1f:b3:1a:50:39:4f:c6:39:31:d3:23:37:
         1e:85:4f:7d:82:b2:df:18:98:8a:e8:03:23:32:17:54:38:0b:
         a0:d9:d1:60:43:57:2e:04:1c:9d:c9:ce:37:fb:d8:7c:ee:e8:
         9e:11:02:a4:69:56:2e:56:57:40:3f:82:98:63:6c:14:f1:01:
         fc:96:84:4f:4e:7e:c2:3c:18:73:55:c8:d0:fa:95:97:e4:72:
         9b:21:47:84:9e:6e:4e:57:6e:77:73:ba:8a:96:9c:47:27:4c:
         77:42:05:7c:08:5c:a5:ab:7f:c4:ee:81:85:07:a7:aa:73:b6:
         06:03:94:9e:cd:76:37:8e:a1:d3:b9:3b:32:80:c0:bc:f3:26:
         89:0a:7a:69:16:0c:12:3c:73:5e:a1:a5:a2:aa:51:4d:16:40:
         5f:20:6b:87:dc:46:3f:26:dc:c1:c6:0f:66:1c:28:2e:47:ef:
         33:c0:be:d2:14:20:c5:e6:ff:b0:c9:ad:6a:21:3d:96:08:80:
         96:c0:06:37:d0:be:e8:2f:fe:ea:7b:9a:7d:15:79:ec:a8:d7:
         d2:be:29:1f:60:ed:ca:c2:80:14:5e:a5:43:16:53:8b:ba:6e:
         ed:70:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----