Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File:                     Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier:          JigEC2UC8tAKiOLrtypjsiToBiPrsQc6ruuBRZR17Jg=
Subject key identifier:   15:8D:43:CE:26:7F:14:DA:78:22:9C:51:98:F1:E5:97:78:87:C2:5D
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer:       /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial:       01962F0707E4A009E03DBAEC8C83F8ADB793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
                          2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: o+eUP2ghw0G9sFPM42IRclc+MxfO5cPWgZVC18jcLzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:e4:a0:09:e0:3d:ba:ec:8c:83:f8:ad:b7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=158d43ce267f14da78229c5198f1e5977887c25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:7e:24:4a:a5:e8:a8:a8:f4:8a:3f:39:44:
                    09:4f:ec:44:36:16:ca:7f:ff:e4:af:35:29:11:7d:
                    40:9e:60:37:c5:8c:25:18:c4:81:75:55:51:87:cb:
                    22:cd:1f:d4:f8:fb:7f:84:92:20:bc:b3:f3:21:48:
                    6a:47:e6:59:e0:6d:39:b9:3c:13:33:98:35:ba:b4:
                    bf:01:03:7b:c9:0e:94:11:5b:97:55:f4:a6:8f:a3:
                    05:81:fd:6a:d0:a9:0d:fa:50:c9:eb:78:07:63:a7:
                    fa:bf:31:34:08:f8:46:02:4f:ee:fc:9c:47:1d:70:
                    1d:6f:dd:0a:81:f0:0f:14:ba:f6:e9:69:73:86:d1:
                    fd:33:78:06:08:cf:f3:68:a5:e2:0f:dd:c0:00:ea:
                    78:c0:e5:9e:f1:0f:38:c9:96:71:0d:ad:80:50:39:
                    dd:f9:08:f9:e2:1e:93:0d:b2:ad:3c:56:c8:c2:3a:
                    64:7d:96:ff:2e:b7:c5:46:10:6d:34:6a:5b:6c:e4:
                    b8:3a:6b:a0:20:da:3c:d9:86:96:b8:75:d2:7b:31:
                    85:05:25:0c:44:2e:55:5e:bd:61:bb:15:2b:21:24:
                    6f:01:5e:2d:84:fb:cf:8e:f1:71:e4:cf:62:b2:5f:
                    bc:8e:16:2d:79:17:73:eb:4b:b8:7b:2d:51:1b:05:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:43:CE:26:7F:14:DA:78:22:9C:51:98:F1:E5:97:78:87:C2:5D
            X509v3 Authority Key Identifier:
                keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:cc:83:99:5d:16:3c:86:1b:64:a8:6d:af:61:36:f0:6d:
         f2:ba:81:27:27:5f:d7:ad:64:42:d2:32:8f:3a:31:62:08:62:
         19:17:52:53:54:8f:13:1d:7f:0e:be:c7:b6:05:05:ef:7d:fb:
         ac:29:07:33:bf:33:27:96:68:80:45:50:c8:7d:a3:67:f2:1d:
         31:e9:72:02:0d:e7:64:19:e3:75:dc:2d:c4:4b:30:2d:72:d2:
         ff:ef:ab:e4:3c:be:21:ba:3d:45:e8:03:6c:ff:7d:4c:b5:5e:
         ef:7d:4e:3f:21:31:3e:ec:43:73:d2:23:71:be:d8:8b:7d:74:
         c1:a4:d7:36:69:e2:c3:b4:db:6a:8b:0d:e9:0e:ab:7e:cc:5c:
         30:96:b4:51:0b:b5:a9:1e:6b:7b:d3:cc:ef:2d:ed:2b:ba:28:
         a0:53:45:d9:b5:c2:65:8c:0a:fc:61:6b:2b:31:71:e4:bd:63:
         17:f1:90:5a:51:5c:98:a6:f5:9f:84:c8:6e:07:7a:e3:9e:81:
         67:4b:25:5d:81:85:f4:a6:c7:f7:76:e0:fa:28:c0:da:a4:70:
         b3:f1:69:f7:d2:08:d3:91:1f:a0:e4:18:24:77:0b:f1:76:24:
         85:3c:5e:d3:52:5d:71:c4:23:8f:d9:7e:b6:5d:4e:f9:d1:7c:
         d9:31:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----