Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File:                     VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier:          PVrG7UokMF4YBwBqvLmMqQCk+LIZtmxby7Ts1/wS3F8=
Subject key identifier:   4A:5D:65:A9:49:59:52:4D:BE:7C:DD:9F:1D:5A:C8:69:F2:31:19:81
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer:       /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial:       01962F3D923EAD04D5C3F6434EF0C8A53C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: +YhYAwm2g80u9Ka5MInhI0f3M1R51Zq3xLEktq8VmcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:3e:ad:04:d5:c3:f6:43:4e:f0:c8:a5:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=4a5d65a94959524dbe7cdd9f1d5ac869f2311981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:5b:c5:2c:72:2e:d1:04:6b:7d:83:c2:58:
                    7e:36:54:90:a7:77:83:1e:93:0f:03:c2:e5:37:56:
                    6e:35:4d:cf:46:04:55:ce:54:05:e4:8b:65:5b:65:
                    7d:73:2f:5b:49:f2:2d:1e:08:6a:ad:99:18:b0:14:
                    39:69:b6:86:5a:c7:b6:2e:2f:3a:b3:2a:c6:d3:23:
                    e1:08:d2:ac:1f:40:45:15:f1:cd:da:90:ad:c3:dc:
                    d9:91:ed:81:56:e9:ed:0b:21:ad:ba:3a:d1:c1:66:
                    8a:bd:04:3d:a4:d5:4e:91:44:ea:74:07:45:7c:ea:
                    aa:d3:f7:f8:a3:49:70:3d:90:7e:ae:b6:29:0c:b0:
                    c2:40:af:8f:2b:cd:08:52:08:8d:03:ea:20:08:33:
                    d5:86:46:a6:14:ab:9c:93:8e:a4:14:ea:8b:9d:0d:
                    6d:5f:8f:ba:81:74:3e:b2:75:84:37:2b:55:7f:36:
                    8c:ea:15:0f:0d:cc:c4:cf:46:f5:21:c4:db:28:0f:
                    36:2a:00:ff:80:49:37:4a:78:80:e8:07:11:a9:df:
                    9e:e3:4f:55:10:a9:2e:54:81:af:69:a0:8d:14:21:
                    86:a0:f8:41:77:97:cd:8f:52:78:1a:f0:9c:b2:e0:
                    b0:5a:ca:7a:44:1e:c9:1c:06:b1:22:39:62:53:10:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:65:A9:49:59:52:4D:BE:7C:DD:9F:1D:5A:C8:69:F2:31:19:81
            X509v3 Authority Key Identifier:
                keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:66:02:1a:a1:3b:bc:be:87:94:e8:a6:19:10:8f:01:3c:eb:
         c4:34:95:a9:8b:ad:53:9e:f7:6c:d4:6d:78:ef:33:16:51:17:
         26:b3:a0:15:c8:c5:4c:e4:75:da:48:f0:38:fd:66:f5:39:e9:
         24:63:6c:a2:47:82:a8:a6:d9:35:cf:f8:1a:e1:4e:a5:b4:89:
         5d:e7:1d:eb:5f:9b:00:58:ff:c4:9f:51:f4:22:73:0c:5a:07:
         64:a4:ad:7b:34:b8:61:13:98:88:3e:5b:b1:76:16:39:43:58:
         54:45:0b:fa:29:76:71:0e:bb:52:43:e4:64:89:0f:4c:a1:81:
         2e:0a:11:a4:47:90:bd:52:bd:af:ad:fc:ea:b4:c3:7a:f4:06:
         f8:38:22:3b:e8:5b:44:c1:52:7e:88:a1:19:65:c2:97:4f:ba:
         a3:d4:86:ab:8a:73:db:22:bd:81:15:7b:90:59:c4:b0:23:5a:
         d4:72:59:90:e0:63:cf:25:80:d8:e2:ac:c1:e4:a7:50:49:3b:
         1a:1e:d3:ed:e5:db:a0:2f:78:3f:46:2d:d9:9f:87:58:4c:57:
         df:e6:c1:76:c5:2e:c0:a6:c3:69:39:cd:46:05:e4:97:c9:a3:
         b0:27:58:e7:dc:5d:a3:ab:4b:d5:55:29:1b:cf:58:ab:9c:63:
         0b:f8:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----