Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File:                     runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier:          usoRFQdSzSPrsfhHad/ry7Yay0XYjY6Q9T/8lHN3t08=
Subject key identifier:   9F:0E:CB:5A:86:C8:FC:89:3F:4B:9E:9F:A7:1B:2C:43:72:52:AD:E8
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer:       /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial:       01962DF3D8EE025D34620182AD0A971020AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
                          2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: Zdapdso0oUXQ2SnkzuuMZCgQe5XAMK9s4gu+bC5ud5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:ee:02:5d:34:62:01:82:ad:0a:97:10:20:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=9f0ecb5a86c8fc893f4b9e9fa71b2c437252ade8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:c5:be:7a:5c:0e:84:71:a1:92:cb:71:8d:
                    47:2a:6a:c2:19:e3:de:14:9b:b8:69:1d:82:12:c0:
                    5e:d5:20:ee:db:65:be:0b:4b:50:23:49:11:16:d3:
                    21:97:4d:3c:19:8f:b7:f2:90:ec:1b:bb:5b:db:76:
                    21:27:12:24:68:d3:61:98:82:a7:b4:9a:64:02:44:
                    5b:82:9f:cd:27:ce:8f:ab:46:3f:79:3c:65:1a:72:
                    4a:e2:35:9c:6d:77:f6:51:80:56:d3:68:e5:1e:f4:
                    84:a3:6b:4b:80:0e:24:c2:59:e4:2e:86:74:d2:db:
                    3a:70:10:e0:5c:d2:bc:13:85:57:a6:82:09:c5:09:
                    67:b8:91:9b:49:43:49:e7:b1:db:47:b2:54:a3:3d:
                    17:70:12:b3:26:15:d3:eb:e0:e7:79:61:7e:06:1c:
                    79:1e:58:ac:66:73:bf:3f:6a:c6:82:0a:12:02:e4:
                    fd:74:f3:fb:51:fc:b2:17:9a:02:56:d9:af:de:f1:
                    19:44:7c:69:55:9b:d7:46:2b:d4:47:7e:29:da:a0:
                    0c:3b:d4:5e:a3:08:28:5a:3a:a6:42:31:03:3e:d9:
                    be:7a:ef:21:5c:62:36:88:df:b9:7e:bf:91:9d:42:
                    30:a6:76:8b:dd:fc:0a:e1:d7:a7:d1:86:08:5b:e4:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:CB:5A:86:C8:FC:89:3F:4B:9E:9F:A7:1B:2C:43:72:52:AD:E8
            X509v3 Authority Key Identifier:
                keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:2b:ab:30:c2:d0:44:ba:3c:22:7e:d2:3e:1e:39:16:e4:
         26:45:b7:0a:83:f0:bc:53:9c:e8:56:65:c2:92:61:ef:64:d3:
         0b:e1:b2:7d:2e:c8:f2:7d:57:9e:69:25:97:c7:0b:1d:8a:46:
         7d:dd:b8:67:5a:dd:71:6b:c8:86:10:7a:97:89:f5:23:69:01:
         72:b7:cc:6e:9c:1a:ad:6e:4b:87:8b:22:6b:ba:4b:b8:fd:34:
         30:1c:7b:2a:d7:a9:3f:66:c4:95:ee:bc:5a:c3:2d:65:6d:28:
         85:dd:f4:0c:e5:9f:8f:87:c7:e9:10:40:e4:54:1c:e6:e2:9e:
         b5:02:d9:a0:5d:37:c5:b5:e5:44:7b:1b:ed:1b:73:07:18:c7:
         3c:27:49:3a:88:15:cf:f2:c9:81:88:97:f7:ac:75:d3:8f:64:
         9f:7a:41:58:46:ff:75:62:07:6e:a7:6f:98:01:f5:61:7e:dd:
         62:16:c5:c3:bf:a3:8e:9d:93:cc:93:30:1c:2d:94:d4:6b:0e:
         71:d9:91:d6:72:cb:8f:eb:dd:3d:c0:d1:28:2c:94:68:a9:96:
         ae:ec:1f:1a:30:10:eb:e4:e9:04:28:79:e8:a7:84:ac:da:05:
         d7:7d:0f:4d:b2:d0:b8:62:c4:b3:84:0a:8c:84:b1:df:15:98:
         41:31:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----