Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File:                     vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier:          Wmcwa4K9oRw8MiNuy8o41NXduZE6CsoIIVHNwa3TQTs=
Subject key identifier:   CF:AA:E4:75:B7:10:B7:13:C9:78:BA:C8:A2:6C:C3:1A:0D:81:1D:40
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer:       /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial:       01962E991A379263656A26B764644DDA346A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number:          0782
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: +u1O/loH00UZyQqFbBbCA8U5Wf8smTwRrJyc6jXg6HE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:37:92:63:65:6a:26:b7:64:64:4d:da:34:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=cfaae475b710b713c978bac8a26cc31a0d811d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:c4:2a:bb:32:62:a4:be:ba:b7:41:f0:4b:
                    36:eb:9c:81:c1:4a:b9:64:3d:19:a8:a6:c0:33:50:
                    b8:5f:da:0d:5f:62:65:00:7b:50:9b:56:90:a3:13:
                    34:6e:42:f2:e9:40:9f:bb:dc:29:49:0a:af:f6:b1:
                    b4:26:7e:63:a0:2a:64:8f:ff:c4:f0:a7:f0:da:86:
                    7e:fd:d5:3f:89:08:8a:fe:49:e9:d6:62:2b:af:51:
                    f5:1a:d6:38:a4:6c:89:79:d7:f6:df:8b:3b:18:c1:
                    eb:fe:50:9f:94:1f:b3:bc:94:86:33:17:7e:6e:44:
                    70:1c:39:d5:e4:f8:8a:06:0e:7d:f4:30:90:ef:d2:
                    a6:70:b2:ea:6b:44:dc:f0:4e:8f:94:b1:f1:06:c1:
                    af:1d:d2:98:d7:67:5a:29:3a:7f:bf:db:6b:82:2e:
                    da:02:f8:a8:18:85:5e:ef:66:2c:10:cc:72:8e:aa:
                    7d:0a:b9:4d:04:0a:68:16:29:4d:7e:00:17:35:4f:
                    a4:2d:27:5e:75:5c:4b:6e:d0:d0:43:2a:cf:67:64:
                    41:1d:cb:3a:14:4f:d1:81:86:5f:ae:f6:06:f9:d6:
                    f1:ad:35:24:b6:b3:79:28:94:8a:a4:27:f6:2d:e6:
                    41:ca:a4:a7:1a:ce:4a:cb:e4:1c:d8:8c:84:fb:65:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AA:E4:75:B7:10:B7:13:C9:78:BA:C8:A2:6C:C3:1A:0D:81:1D:40
            X509v3 Authority Key Identifier:
                keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:15:cb:2a:c1:22:c7:2a:d2:7b:06:40:9c:11:03:c0:0b:
         c3:d8:a9:ca:3e:f6:04:be:43:68:f9:89:c8:3d:86:5d:20:59:
         b6:03:56:a2:54:a0:25:21:6a:f9:da:ca:12:88:a8:86:78:39:
         ca:ca:95:3b:53:80:b7:1d:b0:b9:b5:0a:14:7a:70:71:a1:ee:
         48:6a:21:ba:82:e9:44:fc:6e:66:38:9a:b6:70:8d:71:c8:35:
         37:69:e3:10:5b:61:70:9a:c5:05:ee:07:55:ef:fd:ab:44:20:
         da:26:67:86:e3:13:c1:86:c5:98:56:fe:5c:0a:da:a0:05:66:
         d1:1f:38:d1:8c:d6:b3:f4:19:5b:95:37:df:32:a6:c8:a6:87:
         3a:1b:04:e6:9a:27:c7:b1:dc:10:da:19:58:c1:47:eb:4c:5f:
         cb:02:b1:5f:a0:c9:4c:9d:93:e1:d2:d5:17:1d:69:a4:ab:8b:
         fb:ad:77:7e:50:4a:1d:93:f4:73:19:5e:93:4c:2b:98:ae:84:
         35:6a:19:a7:fc:b3:cd:c3:6f:2e:8e:cd:47:e6:4c:79:fb:5e:
         34:f8:df:b5:0e:bf:6e:a5:5d:c7:11:10:ca:36:3a:8d:71:71:
         a4:9b:0e:bb:b1:0a:69:99:f4:81:e8:f4:7d:6c:0c:1d:32:f4:
         d8:62:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----