Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          FvWnNlnxl+VLvQVFlwOXKShkqjGOjRIizuMtM2J6ocA=
Subject key identifier:   71:ED:17:67:75:F8:EB:7E:D1:E3:EB:1B:46:DD:C4:A5:EC:48:A1:DC
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       01962E99AF8364291E67C2D00525E3A1CE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          127B
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: SlJSaYCsBs3+3XuThRRhVv13p7WAXTd5pcsYVSsYLW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:af:83:64:29:1e:67:c2:d0:05:25:e3:a1:ce:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=71ed176775f8eb7ed1e3eb1b46ddc4a5ec48a1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:02:1e:31:3a:17:ce:48:6d:18:44:47:48:
                    e2:21:59:9c:c8:cc:22:7b:e3:a1:3f:b4:4b:aa:1c:
                    20:85:96:89:af:c1:7b:da:a5:e8:3c:00:21:64:b0:
                    34:9c:1a:cc:fd:c6:1e:1f:73:43:96:a6:be:5b:24:
                    08:0e:31:a0:25:e3:38:a2:6a:b4:a9:a9:ae:4e:e9:
                    b2:df:96:6b:a1:f1:99:b2:10:86:d2:10:6a:17:9e:
                    2a:e1:68:00:15:22:64:60:f6:e1:7c:f9:42:79:88:
                    66:83:cd:d2:f4:15:0d:39:2e:88:c3:03:76:ea:47:
                    24:7b:5e:19:a7:c9:ad:02:0e:66:ca:de:18:52:80:
                    f5:dd:49:fb:18:f6:87:14:d8:cb:a1:93:97:bd:46:
                    a3:82:63:2d:02:a2:87:94:48:ad:85:4a:47:90:49:
                    3f:eb:6f:75:5b:be:2f:0f:d0:b9:22:14:3f:d5:f9:
                    6e:ae:c3:22:22:39:fa:cd:b3:c8:d0:98:36:88:48:
                    d1:b1:88:a1:7f:94:5e:86:f6:28:50:0b:16:4e:84:
                    23:12:d8:80:3d:ba:ba:e5:89:18:af:dc:8a:3d:be:
                    65:c6:a9:4e:8d:dc:df:20:98:7d:c1:94:99:4f:27:
                    d4:7d:ac:dd:fc:39:1a:88:69:61:6d:ec:d8:90:6f:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:17:67:75:F8:EB:7E:D1:E3:EB:1B:46:DD:C4:A5:EC:48:A1:DC
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e2:11:37:a0:72:a5:38:1b:0e:c6:49:46:6f:27:85:99:69:
         51:95:9f:b6:0b:a9:f0:3f:76:b3:65:9c:1a:00:3f:59:d8:a4:
         f6:ce:7b:cf:57:a2:66:6d:e5:ea:73:81:b9:51:c8:1a:f3:19:
         27:dd:7c:c3:55:cd:0b:62:16:e6:14:f1:44:c2:3a:8f:56:4f:
         e5:c0:ff:66:be:f7:db:48:63:dd:a8:99:4f:ff:0d:42:81:53:
         11:0b:77:30:fe:12:70:d5:6d:e4:49:7b:3c:e8:89:ba:8c:4d:
         c7:bc:ac:d7:af:49:a1:0b:9a:13:84:63:d1:86:4c:ec:93:43:
         81:f5:e8:08:bc:aa:7b:3c:ac:b2:43:35:f0:61:5d:53:73:2c:
         a1:10:b8:e4:68:76:a0:73:6f:40:ab:25:7b:ef:ce:a1:1e:e2:
         93:d7:82:59:f6:c8:e8:8c:67:f0:d3:38:22:f0:22:96:de:c4:
         0f:ca:79:da:08:27:be:2c:fd:87:0c:e4:b8:49:3a:03:33:9b:
         70:10:34:90:d9:86:80:30:3a:33:e3:b6:2e:b3:16:f0:0a:24:
         63:0d:35:06:c9:0f:3f:69:5f:05:32:17:8c:d3:d2:ad:ed:64:
         30:db:7a:63:a3:96:a0:5e:ca:a8:22:0e:f2:25:01:a5:a8:6b:
         df:03:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----