Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          doqMtaJEn47JfqSf6S4mdmK89TacaSeOhbIhDhle24E=
Subject key identifier:   A2:42:E8:99:21:41:0E:B6:43:1C:3B:9E:E6:B7:98:26:4D:D7:07:13
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       01962F06ACC065161C2BAD5A4CEA133245A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          088D
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: W49Ss3uZ40DIurpQftbbDbkQ4EPky2RkmxrocNWGWeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:c0:65:16:1c:2b:ad:5a:4c:ea:13:32:45:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=a242e89921410eb6431c3b9ee6b798264dd70713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:d4:8c:47:17:da:1d:e7:0d:84:13:65:8e:
                    ba:26:6b:a8:4c:60:5f:88:d8:d4:19:fc:f2:88:b4:
                    52:bd:29:8f:ff:77:06:a3:e1:eb:d1:1b:c7:b9:13:
                    4a:0d:25:7b:b3:7e:c7:2a:00:7c:00:fe:a6:a2:0d:
                    e5:f1:4d:bc:8c:27:34:83:9c:82:84:ac:72:ff:01:
                    f7:a6:e9:27:12:c9:13:78:98:29:65:32:13:29:65:
                    4c:dc:49:06:18:8f:9f:0f:3f:ee:c1:54:18:7c:f0:
                    40:9a:b1:6f:1b:8d:cd:cf:28:2e:0f:27:2a:f5:0f:
                    80:1d:28:a7:f0:38:ce:c6:0f:c8:2b:c4:aa:40:04:
                    46:fd:8b:0e:d2:57:96:4e:d5:76:d8:b3:1d:17:00:
                    20:e0:07:28:cf:86:ef:ae:29:33:2a:bf:4f:28:98:
                    bf:77:c9:e5:f9:4a:f9:90:36:b5:5e:5e:62:82:f3:
                    89:93:a0:6f:f9:7f:fa:e7:b0:e1:73:80:d7:13:2c:
                    a8:47:a2:49:c4:71:d9:b6:54:79:a1:29:a2:1c:2d:
                    13:f9:7f:43:85:8b:2a:e1:6e:bc:e1:74:05:98:61:
                    82:1c:c7:5a:44:b6:ac:56:7b:9c:98:8e:ee:31:e9:
                    21:b7:33:43:78:17:9b:93:f5:70:a5:49:75:ea:c3:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:42:E8:99:21:41:0E:B6:43:1C:3B:9E:E6:B7:98:26:4D:D7:07:13
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:e2:e7:26:81:0f:af:5f:d9:47:19:46:6f:46:24:1a:7a:
         fe:5d:7a:50:f1:84:fa:a7:d6:3a:d8:d3:0c:fc:8f:79:39:f6:
         b1:dd:0a:2a:85:99:31:0a:38:0b:01:a3:69:ec:40:d5:54:16:
         f7:fd:f7:8a:37:eb:98:b3:5a:b8:23:fc:b0:ed:ae:96:c8:a4:
         3f:e8:55:46:13:34:31:cc:17:02:e6:43:0d:38:04:fd:07:05:
         0f:fa:89:d0:2b:f1:f9:be:e7:b9:d6:33:32:4e:f5:30:e8:65:
         a0:d5:a3:04:fc:d1:e6:fc:4b:63:40:12:2a:a4:be:02:b4:5c:
         37:c4:10:8c:e6:42:a8:d4:d1:63:5e:ce:9a:54:51:c2:87:66:
         74:6f:99:ae:ff:1c:e2:df:bd:15:e1:5f:fe:22:42:0c:32:a8:
         e9:66:3f:8c:97:cf:2e:6b:90:07:1c:c9:b2:aa:f3:4c:5c:06:
         5d:8f:a4:1f:5e:5e:36:25:09:71:26:1b:1a:78:5d:89:94:49:
         9b:8a:f4:31:b5:38:31:35:1b:9e:53:9e:16:84:47:bb:10:1f:
         c1:99:44:5e:66:a8:f5:d4:65:62:59:86:a6:83:e1:6f:c2:83:
         28:a2:70:ac:c5:67:e4:22:6a:95:24:e4:56:22:6d:e7:c7:3a:
         ad:e9:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----