Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File:                     VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier:          XUtzEAPPSJ084wNXhwdg2x51x0NSwmXTd0wg78dFybg=
Subject key identifier:   2D:1A:92:30:85:28:3A:C1:12:67:0B:CC:32:DF:DE:EB:6B:DE:3C:FE
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer:       /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial:       01962F3D42E348388F0EE9750EEF3C3CD238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
                          2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: B0ZCOBdLcQPcN5x6+u8c0kmehD85MWItVJZdLI11xw0=)
                          3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:e3:48:38:8f:0e:e9:75:0e:ef:3c:3c:d2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=2d1a923085283ac112670bcc32dfdeeb6bde3cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:13:31:ab:9d:22:72:56:ef:82:96:f3:ed:
                    87:ec:98:89:d4:f1:f6:54:73:0c:e5:f7:f5:c5:b0:
                    b7:81:b5:b7:9b:fc:13:61:33:e3:67:0f:9a:f7:7c:
                    39:c6:fe:3f:c4:4d:4d:01:d9:ef:10:92:0f:16:7d:
                    1a:84:2c:0b:dc:ca:25:bb:bd:47:54:20:f4:49:92:
                    66:ac:c1:ae:eb:e7:65:91:9d:83:e7:5e:23:0e:da:
                    f0:dc:a3:52:14:35:4b:9d:1d:72:a9:e7:df:a5:c0:
                    1f:f5:52:d4:0c:52:64:36:ed:50:a1:82:1f:1a:7c:
                    b2:18:95:60:0e:3d:d5:0d:35:bd:d3:d2:10:0d:f3:
                    d8:e1:92:5a:41:aa:97:88:5a:23:cf:4c:7c:24:23:
                    9a:e6:7c:c6:f9:9e:86:47:39:e0:16:11:79:19:2e:
                    ab:1a:9f:c8:91:9e:df:5e:8e:5c:f6:9e:d2:bf:ff:
                    6f:35:d5:83:09:13:d4:52:5f:85:02:b1:40:2a:14:
                    6b:a4:9a:95:7e:f4:b0:1e:fd:81:c5:3b:3b:5f:3a:
                    c9:59:58:7c:a7:f7:f2:1f:63:94:1f:fb:38:90:2b:
                    b8:72:8d:ae:55:7b:97:ac:07:54:8c:4a:92:6c:a3:
                    c6:13:8e:85:16:d2:25:66:29:43:4c:1c:7b:a6:7c:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:92:30:85:28:3A:C1:12:67:0B:CC:32:DF:DE:EB:6B:DE:3C:FE
            X509v3 Authority Key Identifier:
                keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:f1:b8:1a:e6:68:1e:5d:cc:a2:60:aa:5e:ac:d7:dd:6f:
         11:5b:1f:62:ca:f2:bf:5f:2b:75:b4:f7:ef:25:64:fb:2b:7b:
         59:39:3d:c1:5c:e5:b1:40:c0:ed:d1:d3:3b:43:85:6d:ed:9a:
         85:00:29:42:43:28:fc:ee:d9:d2:b9:44:13:1a:11:b8:26:97:
         58:af:03:61:77:c3:f5:40:0b:9c:95:4a:16:8d:17:f8:60:17:
         82:8b:ff:bc:d8:ee:79:c0:ef:24:42:15:00:c6:94:9d:2e:94:
         57:76:a4:59:fc:54:37:f8:96:42:4c:af:d8:0a:b6:23:ab:15:
         a1:2e:54:95:75:0a:58:08:69:e0:3a:be:8f:b3:3d:9a:8f:69:
         ff:be:34:0c:97:2b:73:b3:90:4f:1e:4d:18:eb:1d:9a:8d:7a:
         81:f3:fd:79:e3:68:13:ae:f3:e4:12:0e:e6:a8:a8:ed:1b:15:
         c3:40:fd:0a:ad:ac:1b:02:5d:5e:d4:66:5e:33:1d:39:b1:a9:
         b0:fd:63:3c:07:0c:7f:0b:0d:17:6c:52:65:6a:cb:36:67:c2:
         83:f7:08:54:bb:50:5f:3f:f7:ff:b5:8c:18:53:d5:9b:d4:84:
         d2:cd:c1:61:97:9e:91:1b:d0:49:7a:f4:2e:ac:50:58:26:6c:
         d6:b5:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----