Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
File:                     Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json)
Hash identifier:          WxdvH/iFh/SmHoL5Uy2G3rSxAyqFWq8nOGjhb+ux1Zg=
Subject key identifier:   07:8A:17:1E:29:D1:CB:18:94:97:04:91:F8:B3:30:E7:F7:00:C8:25
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Certificate issuer:       /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial:       01962F742A069FF56073FB37F1D491D5E1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft
Manifest number:          0A80
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: KqFYxEWrdBP5_WdyXRa-ITRyV24.roa (hash: vqxQtdasBJcl6VgvYzPzoC8JKGZWIRjtdhf0lDZH8tE=)
                          2: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: yKD7qwLl8oYic9LDb9k/FmGeJOfenG5CLneb4h5ZHrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:06:9f:f5:60:73:fb:37:f1:d4:91:d5:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=078a171e29d1cb1894970491f8b330e7f700c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:ee:89:93:13:2b:b9:fe:36:23:23:83:2f:
                    d2:48:34:69:a1:10:fa:fb:02:14:37:7c:a3:6b:ba:
                    c7:75:de:18:4c:27:4c:e2:62:18:87:26:87:17:16:
                    cd:12:d6:2c:70:7a:8a:61:b9:f0:c9:c8:b8:90:34:
                    d0:c5:17:e2:b3:69:a5:59:a0:29:a5:6e:09:82:6e:
                    9a:5e:e4:eb:96:d9:13:6e:ac:d2:a9:00:75:87:6d:
                    f8:f8:25:5c:a5:fc:68:fa:3e:30:cb:13:1f:c0:92:
                    58:46:c9:fe:33:41:1f:b4:d1:22:00:c2:e1:61:09:
                    01:04:a9:24:fb:ff:95:f4:07:79:19:c2:9b:0b:1c:
                    c2:48:69:26:e6:ce:ab:a0:81:a8:e0:5e:89:aa:5b:
                    b4:51:31:0f:f7:86:e5:0d:85:05:22:9e:5a:2f:7a:
                    a1:91:6f:b5:b6:b6:44:a0:7f:c9:ee:fb:35:88:61:
                    20:36:1a:31:5a:e5:18:72:59:30:bf:51:95:03:12:
                    f7:56:66:b5:30:f3:23:05:34:7c:4a:3f:a6:2e:16:
                    ae:e6:f8:4c:af:52:64:23:e1:3f:f1:a7:a3:17:2f:
                    7b:d3:88:34:84:06:52:9e:96:4a:68:46:63:27:d3:
                    13:13:ea:bd:7e:fe:80:73:bc:13:04:02:00:20:54:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:17:1E:29:D1:CB:18:94:97:04:91:F8:B3:30:E7:F7:00:C8:25
            X509v3 Authority Key Identifier:
                keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:bd:15:0a:ec:46:dc:f5:32:7b:ba:49:50:c5:9d:b6:a4:
         0e:c5:4b:ae:4b:75:11:b5:f4:77:44:c4:8f:32:3d:7a:9f:25:
         c4:91:ea:71:92:da:30:5d:a9:0f:64:fe:f2:da:d6:d4:44:72:
         ff:33:0c:d0:3b:49:16:56:f2:42:21:4a:cf:2c:c1:ba:39:09:
         8f:c0:3b:2d:c5:91:a9:a9:a3:c5:65:28:6a:8d:20:67:a6:5b:
         00:c0:28:76:e9:5d:8c:b9:cf:99:fb:a8:24:be:95:92:c3:11:
         4d:25:d7:88:34:b2:c5:ba:0c:b6:ee:1a:91:24:29:e4:26:30:
         9b:14:8d:b9:18:6f:d1:41:40:a3:e8:2c:40:f6:46:3e:94:b1:
         51:62:de:c2:84:aa:e6:ca:f4:2b:f6:cb:80:93:bf:20:09:0d:
         f9:90:ea:3d:b2:76:a3:3f:b9:f6:55:17:a1:50:f2:48:c0:32:
         74:7b:d7:67:cc:1d:40:37:e6:5a:3f:4a:3f:65:f6:1a:ff:34:
         3e:d7:c7:6d:6d:ac:5e:af:c7:fb:a9:85:98:fe:c8:a9:b4:24:
         9c:e2:a3:37:33:04:1d:b4:fa:c9:f3:c5:f7:45:28:15:90:6e:
         f9:9c:cb:cc:f5:0f:58:56:9e:b5:03:64:ad:a2:a4:9e:f7:66:
         ff:1d:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----