Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File:                     VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier:          gbH2lPszlwd+wES5rm8ccscTVtVQ8B8xjnLe3SjHbQ4=
Subject key identifier:   4E:A2:69:83:D7:01:6E:53:AD:EF:0B:B8:31:25:2E:9A:CB:3D:AB:67
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer:       /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial:       01962ECF8C50938D1A51BCBBFB674DE1486C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number:          0190
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: nhtYLsP5L15g8hNo8P/tKU0rutUG5CWfyF5E9CAQMXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:50:93:8d:1a:51:bc:bb:fb:67:4d:e1:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=4ea26983d7016e53adef0bb831252e9acb3dab67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:75:78:b1:a0:0c:08:74:4e:4a:ed:05:3c:
                    f6:9c:30:40:a5:82:c7:69:f9:54:11:94:91:18:ba:
                    d2:3b:08:3d:81:39:41:a6:60:94:9d:59:c7:a8:89:
                    16:e9:4f:24:3d:11:01:80:20:2a:ef:24:f3:e1:a0:
                    fd:83:f9:35:94:2d:5d:fa:32:3c:6a:fa:12:c6:40:
                    f0:1c:71:46:5f:59:b9:07:57:51:35:5a:48:36:cf:
                    d4:0f:ee:a9:64:3b:e3:46:89:e1:14:d0:1a:1d:e3:
                    c4:26:dc:d6:1d:3b:95:9a:b6:0b:77:0c:41:6e:63:
                    10:14:26:72:19:9f:ef:0b:6d:3d:ec:2b:66:be:5f:
                    e2:e6:41:1c:39:ee:29:e2:6f:76:34:08:75:3c:7f:
                    5b:b1:0f:39:99:06:08:71:e6:b4:ff:3f:82:f0:9b:
                    08:f3:11:42:d1:ed:ae:df:2e:92:8e:cf:87:10:73:
                    95:1c:8e:e7:83:c6:73:0f:bf:a9:94:6a:4d:80:03:
                    97:c0:c5:49:2b:76:65:b5:6f:ef:4d:16:9a:d2:4f:
                    7b:0a:ed:19:aa:c2:1a:93:e9:c2:a7:17:05:72:e7:
                    ae:94:36:ff:c6:c3:2d:2e:e6:f5:2c:a8:63:24:1b:
                    9e:35:2c:ac:19:c2:f4:63:83:a5:7f:53:73:8d:75:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:69:83:D7:01:6E:53:AD:EF:0B:B8:31:25:2E:9A:CB:3D:AB:67
            X509v3 Authority Key Identifier:
                keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:56:96:1b:4c:f4:5c:7e:f3:f2:c9:f4:56:d2:ba:0f:de:
         a6:5d:b3:3f:9d:5f:59:1d:b8:19:34:87:d2:8c:6c:3d:f7:33:
         2d:ca:f4:89:d2:07:fd:31:0a:51:d0:43:ae:c3:ac:36:32:f3:
         2a:a7:49:da:1f:b8:be:db:99:1e:26:20:d0:1b:ca:35:03:c3:
         19:bf:1d:1d:68:4d:c8:9f:48:cd:f3:99:8c:47:f3:04:7e:b6:
         99:f7:1e:bb:2f:86:f4:03:27:0b:ee:b7:6d:13:f7:25:38:b6:
         02:94:98:cf:30:31:2e:3b:6e:b4:3d:52:60:3a:4e:97:13:a6:
         b9:b8:ca:0c:26:be:51:1c:a7:e7:a1:8c:6f:0f:f0:ec:13:ea:
         d6:c3:7f:74:fa:70:44:66:f5:f6:14:3d:05:ae:78:42:5e:e3:
         78:8a:c1:a0:89:f3:1b:99:6a:2f:ee:33:1e:3f:ef:82:9e:a6:
         34:58:f2:0c:88:77:51:ee:95:1e:1c:34:03:ea:27:bb:19:0d:
         c5:12:41:c4:ee:d6:70:c1:32:81:3a:15:21:39:d9:10:c4:ad:
         95:34:9b:f5:a8:ce:8e:83:75:c3:e7:cd:13:88:2a:04:57:33:
         09:7c:4a:af:34:2d:98:0e:01:bf:b3:4a:0c:de:79:40:b4:46:
         9e:76:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----