Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File:                     VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier:          ZSXiTqKHKB/zPZ7sao3Ia8EVroGupUMih7Jd1MYYpek=
Subject key identifier:   E8:8F:D9:74:64:FB:02:C8:60:DD:1D:E2:CD:40:1D:49:C3:FF:0F:79
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer:       /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial:       01962F066C72505755A85091306554E2355C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: wi0KT/kMdbQsHDwO1dUQr5l9GNLyu5tuT8eIXnOm3mU=)
                          2: ZI5xHGAAawem8l14dj3kmApEGWg.roa (hash: gQVQJokb8l7v3e3ujraYshzYQvAhAvVrZfuw7H2HApU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6c:72:50:57:55:a8:50:91:30:65:54:e2:35:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=e88fd97464fb02c860dd1de2cd401d49c3ff0f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:51:e4:3b:5a:2e:45:e7:7a:13:07:16:4e:
                    6b:c8:82:f8:50:1e:68:e5:06:60:e7:21:fe:cc:e2:
                    42:99:2d:4b:8f:b0:a2:e9:d0:7b:71:bf:c6:dd:9d:
                    96:aa:4a:6d:68:5a:2d:d8:cd:8f:ad:6f:4c:91:c2:
                    73:45:ef:b6:1d:c2:2e:f1:4d:37:8c:6f:27:c9:68:
                    1d:f0:10:d0:82:3a:04:96:75:07:3a:f9:28:e4:97:
                    35:fe:f1:10:05:42:33:5e:e1:21:26:e0:b3:b9:7e:
                    32:ac:3e:0b:7b:1a:b5:21:36:e0:36:4d:f8:6b:ea:
                    b6:0e:a1:91:ca:5b:9d:da:cb:e4:9a:bc:de:b0:b4:
                    1e:3e:3f:12:86:de:60:33:5a:ad:86:48:b8:69:4d:
                    62:fc:73:ce:ae:e3:b6:fe:8d:c0:d7:ee:e9:68:2d:
                    b9:be:d9:f8:f3:13:39:cf:a8:06:53:3c:7f:26:f8:
                    75:7d:9f:3d:5f:4f:c8:bc:bf:c2:a1:b4:4b:d6:92:
                    9a:60:c9:84:c0:18:ca:a8:18:24:bf:af:f1:ab:0e:
                    0d:26:98:c4:ab:c6:25:fa:f4:98:da:fa:58:2a:ef:
                    f9:bb:fd:73:a9:44:d6:d9:65:61:ea:9b:a5:90:66:
                    c9:1b:9d:eb:ed:27:40:37:40:3e:e3:18:43:34:50:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:D9:74:64:FB:02:C8:60:DD:1D:E2:CD:40:1D:49:C3:FF:0F:79
            X509v3 Authority Key Identifier:
                keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:36:66:4a:5d:30:7f:16:86:8c:de:a6:f3:3b:e0:99:b9:
         66:1d:59:ea:32:aa:c0:44:4e:75:ce:2b:a9:f2:b5:b0:4f:54:
         ef:61:75:48:b6:45:eb:bb:28:7e:47:96:c0:4f:a2:0a:03:b5:
         79:56:9b:f6:f1:8a:86:e5:bd:8a:38:38:c0:e3:86:a3:aa:3e:
         ec:c1:69:5c:7d:87:cd:e6:ba:9f:15:0b:c4:b8:ac:f4:75:7c:
         51:fc:2e:e5:cd:15:7c:62:98:9d:0c:0a:9b:e2:d8:4e:98:ff:
         fa:89:26:d2:6c:b7:eb:4b:d4:14:63:ed:03:3a:5a:ef:d3:44:
         ee:82:20:f6:17:1f:82:c6:58:33:55:18:69:fa:b6:42:4d:4c:
         9d:2f:96:81:16:da:c1:a3:cc:a8:90:74:6e:83:08:c1:77:ad:
         7e:bf:4f:e0:ac:52:eb:f2:47:d8:13:87:7d:37:95:66:9b:e1:
         eb:0d:63:e2:4f:71:df:cb:41:19:21:4d:16:08:33:17:9b:43:
         ce:51:96:73:18:6f:f8:dd:47:34:67:10:ac:29:8a:8e:67:4b:
         57:ec:ce:04:9e:92:eb:f5:00:35:28:f1:92:bd:9a:37:85:6a:
         f6:a9:47:7b:7c:ed:3c:c8:1f:3a:29:ff:a1:d6:50:0b:31:6c:
         45:bb:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----