Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File:                     VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier:          S4mXKmSJceF7BQ9lq5gGtTrkV51YvOp2QzwFNsW3ZoQ=
Subject key identifier:   40:EC:0B:D1:D9:E1:28:D1:8B:70:5E:85:F5:B6:34:CD:10:77:B6:41
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer:       /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial:       01962FAB2D847AC9E0FCE62B66C5FA2678E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: O5i7RocKjBrjxjQjWfx4nwt5XUtO923EJGTH6m9n9pQ=)
                          2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2d:84:7a:c9:e0:fc:e6:2b:66:c5:fa:26:78:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=40ec0bd1d9e128d18b705e85f5b634cd1077b641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:c7:ca:e7:35:f6:cc:51:c8:d5:c7:f1:e8:
                    6b:ea:e9:bb:24:ee:c0:bf:a3:3b:f0:30:2f:38:10:
                    85:ea:6a:e7:2a:be:62:de:fe:72:17:78:e9:ab:0d:
                    2f:b5:ef:68:7f:54:3b:fa:01:3d:3c:f3:3d:7e:67:
                    f4:8d:43:30:d9:b6:c0:ee:6e:5f:7d:e7:e4:66:71:
                    dd:98:d9:e3:fb:ce:0c:ee:09:43:75:1f:c0:bd:5a:
                    d5:49:25:ff:70:61:50:53:27:f4:22:16:1e:6a:fd:
                    9f:36:9f:b1:1d:7a:59:2a:d5:19:c0:03:75:a8:b8:
                    30:5e:f9:40:70:4c:d0:07:7d:3c:04:f4:69:6f:18:
                    ef:30:bf:d8:0f:e7:41:e4:cf:d9:18:3c:12:6c:f6:
                    22:5a:2a:a3:f0:db:45:22:e4:5b:e9:43:e2:ef:bd:
                    96:5e:98:cd:13:70:ad:59:eb:1c:eb:43:05:67:5d:
                    57:e2:8b:c4:14:54:e7:27:91:af:f2:c7:90:dd:d2:
                    48:12:dc:b5:ce:e5:df:60:81:cf:b2:24:c7:20:6a:
                    96:63:5f:ec:74:b4:88:66:99:c0:17:83:35:e5:d1:
                    ac:7c:2e:e8:28:f4:f8:69:60:52:75:28:63:02:b2:
                    ed:fd:be:fe:db:6a:a7:c3:86:45:d1:d6:ec:86:9f:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EC:0B:D1:D9:E1:28:D1:8B:70:5E:85:F5:B6:34:CD:10:77:B6:41
            X509v3 Authority Key Identifier:
                keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:aa:b1:9f:f9:82:a4:1a:0c:6f:80:6d:8f:0c:ef:4a:be:
         bb:b7:3d:eb:36:ca:eb:41:53:49:0f:07:ac:54:26:6c:91:c9:
         d8:66:26:8f:11:55:eb:aa:7e:a1:a0:4b:f9:7b:7f:e7:27:1d:
         40:36:6f:52:50:8b:53:c3:d8:2c:de:c4:a5:3a:d0:81:83:ab:
         d6:cf:fe:9b:04:2a:1f:2b:a5:05:49:6d:40:a3:86:99:6f:7b:
         72:9e:20:b9:e3:c2:2a:34:0d:36:c2:74:2b:04:a3:c5:f9:7f:
         cc:8f:2b:90:5d:34:10:4b:97:d9:30:74:5f:87:b6:cd:88:42:
         b5:a3:d1:37:ef:97:9e:94:d7:05:68:ac:28:08:5e:90:69:f5:
         cf:6c:9f:09:fc:b8:6e:e2:1b:96:ad:ae:b3:97:0c:a0:2a:57:
         6b:11:1b:76:46:cb:bb:b9:d0:9c:ec:52:5a:17:ef:d2:0e:34:
         13:a6:e9:34:15:0a:4d:28:92:a2:0f:b4:aa:70:67:9c:75:0d:
         74:9f:85:4f:de:50:91:1b:3d:72:48:bd:b8:0f:95:56:c9:3e:
         95:1c:8b:7b:ac:5e:cb:25:8b:6d:d6:12:22:4b:de:00:27:3a:
         de:3f:d7:c1:f7:93:41:f2:a4:6e:68:14:3a:a8:9d:ac:82:fe:
         8f:d2:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----