Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File:                     vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier:          19kmWySd/FvqyOhptnOdBTpraRjjBTd+z2dmSPSYAb4=
Subject key identifier:   E5:9F:AE:94:8E:BC:0F:05:93:B2:0E:44:E8:AB:21:16:3D:9C:8F:7C
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer:       /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial:       01962DF3F7FAEF023327B1FCD7AC1FD07226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number:          12F6
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
                          2: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (hash: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=)
                          3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: LboMfn4y4FeZFrs08Hs8Gi01Ixj7Ugq/qjL04V6YzBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f7:fa:ef:02:33:27:b1:fc:d7:ac:1f:d0:72:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=e59fae948ebc0f0593b20e44e8ab21163d9c8f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:37:11:b1:fa:c4:7a:5f:09:70:f8:0b:22:
                    75:38:29:bf:d6:a6:f1:61:02:01:a1:93:3b:c8:12:
                    39:a5:27:12:3b:59:f4:8a:bc:68:18:e3:69:28:51:
                    c6:b1:f3:d9:8f:2a:53:53:cb:fb:80:9a:74:72:b1:
                    18:2e:75:1a:eb:71:0b:af:d9:82:61:4d:0c:4c:54:
                    e3:fc:45:dc:fc:eb:e6:8a:ff:ac:a7:53:e2:6d:6f:
                    7c:f1:f4:74:a5:64:08:4b:63:3c:8c:d4:6b:69:44:
                    8e:ed:be:a5:14:96:0b:39:a0:45:b3:96:52:0c:83:
                    9a:6b:77:d4:61:8d:c3:e7:da:dd:59:49:c7:0d:d8:
                    d8:59:f4:af:e6:33:3c:5d:41:01:c7:2c:28:f3:0f:
                    36:c7:1a:c5:7f:6e:64:70:ac:f4:90:69:e8:9b:04:
                    c7:bb:2c:13:4c:90:d8:f0:cd:67:6e:19:6d:c4:6f:
                    b9:cb:47:1e:06:e2:11:d5:c1:26:bb:ff:41:15:67:
                    e9:26:7d:42:0f:9e:16:e0:96:aa:e1:49:85:49:ba:
                    12:5c:08:f9:bc:1a:65:a3:32:40:ab:b2:95:55:8f:
                    82:fc:4e:2b:a3:02:88:15:f4:2a:28:54:6d:17:d5:
                    44:c8:46:49:72:ef:67:9d:b1:7c:ea:da:5e:05:37:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9F:AE:94:8E:BC:0F:05:93:B2:0E:44:E8:AB:21:16:3D:9C:8F:7C
            X509v3 Authority Key Identifier:
                keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:85:31:07:2b:4f:46:04:41:65:f0:5b:15:cd:29:73:d7:
         a4:ab:5c:1d:cf:a9:c0:c6:a2:7c:81:49:2f:0f:ef:39:3c:57:
         33:72:c0:ef:76:88:0d:f4:ff:74:27:fc:fb:2b:a6:56:52:23:
         8f:2c:53:a7:07:07:8c:b0:3a:1e:60:7c:b0:f5:08:88:f2:a2:
         90:3b:eb:f8:4b:ed:54:b6:33:de:ea:75:9d:45:be:7a:ca:97:
         54:83:bb:b6:47:49:63:76:fc:f6:95:9e:95:19:85:ea:1d:bc:
         65:88:1b:9e:c0:37:6e:fb:51:fb:2c:57:f3:5d:f0:9f:1f:2e:
         2d:86:68:27:a3:38:1a:eb:0b:24:46:06:65:02:c0:e0:38:44:
         4a:2d:2f:d9:3a:9c:ac:cd:c2:a6:f7:90:18:d9:61:1d:48:ed:
         48:de:73:16:5b:04:d3:38:38:15:fe:6a:b9:12:d7:65:2c:7a:
         82:03:40:d1:80:e3:c1:a4:dd:b6:ab:44:76:51:7d:cf:33:07:
         ba:8f:01:28:eb:e6:a6:42:3e:94:7a:26:dc:22:8b:b5:66:a0:
         58:98:61:a8:f1:1e:bb:40:15:12:67:02:8e:5c:78:5d:d7:70:
         e6:a4:6d:d0:f7:5c:29:d9:2f:73:25:e4:f2:32:64:22:e7:cb:
         9e:08:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----