Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          UYI62mKHzI4z/BbYuW9c1UigobXmQIGzsigtSKszG04=
Subject key identifier:   43:A9:0F:6F:06:29:CC:1B:52:4D:A9:51:DE:26:53:37:63:FC:59:D6
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       01962E2AFBB1B9F31A961931275A5B0412C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: q66ku+AWpH6pR/Bcw6bVjYUhAjKIumOcAZk4eQC+Q5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fb:b1:b9:f3:1a:96:19:31:27:5a:5b:04:12:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=43a90f6f0629cc1b524da951de26533763fc59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:35:01:93:0c:31:2b:ab:f1:42:eb:9d:23:
                    75:fc:f9:19:a7:12:e7:3e:21:2c:9e:69:10:09:1b:
                    e8:d3:cc:ad:03:32:30:51:cf:3e:53:2e:a5:3b:9b:
                    86:16:43:69:20:ef:95:87:50:38:24:6e:8b:17:80:
                    19:4b:53:09:f7:73:09:4c:a5:46:ca:06:09:2b:d3:
                    cb:98:ce:be:b7:f8:46:fb:6c:e7:f9:de:0b:36:41:
                    91:e2:62:84:4d:5a:c7:97:aa:0a:3f:d0:0e:d7:7f:
                    a4:2d:4a:09:aa:f8:1f:f2:08:08:34:e1:79:09:cf:
                    42:21:31:2b:f2:de:5a:e7:90:25:3e:be:d2:64:da:
                    0c:9b:54:da:e7:e7:f9:0d:3a:a9:fb:4b:59:7d:3e:
                    c6:c5:17:de:8d:6f:9e:b6:2b:e5:ca:fd:fd:cc:cb:
                    49:da:de:d1:73:b9:51:8a:4c:d1:94:d1:f1:5f:5d:
                    7d:7c:a7:ee:a2:be:d5:f2:98:6c:1a:1d:2e:99:77:
                    ca:56:6d:6d:07:1d:f5:11:c8:e3:6d:d3:b4:c3:c0:
                    9e:bb:d2:32:fc:2b:8b:f1:0b:d4:e7:4c:15:62:59:
                    5a:9d:6c:30:0d:7d:f6:a0:fc:95:41:aa:17:2c:8e:
                    8c:6a:5e:84:2f:84:6d:85:15:f8:5a:e0:85:05:d1:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:0F:6F:06:29:CC:1B:52:4D:A9:51:DE:26:53:37:63:FC:59:D6
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:73:76:eb:45:78:af:fc:a3:55:95:a5:86:59:89:56:2e:
         32:8f:e7:fc:47:6d:74:e0:27:ed:ab:f4:e5:a8:45:38:00:f5:
         ab:19:7d:65:32:c3:e1:4f:e0:7b:e4:da:10:63:1f:3c:97:93:
         a9:19:88:07:19:f6:05:a0:b7:6c:b6:b6:49:16:16:67:e8:5c:
         8b:42:52:e1:c5:00:8f:c5:66:97:df:f4:13:41:a4:44:19:75:
         83:57:3e:49:24:e9:f9:1d:50:75:f6:78:d3:09:13:21:04:14:
         48:2b:88:6b:fa:22:12:b9:69:a6:eb:94:72:af:c0:94:cd:df:
         47:aa:b8:ca:c7:73:0c:43:a4:f8:f5:fe:4f:c2:56:82:9d:2f:
         71:a9:fe:65:b5:c6:cb:9b:93:8b:79:2a:3d:74:4f:85:8b:a5:
         4e:01:24:16:9d:03:bf:2d:e4:11:6b:7f:ae:b9:6e:bb:0b:e3:
         1e:2d:13:ec:a4:eb:bd:ea:a0:36:94:9e:f1:3a:6b:f6:da:b7:
         eb:cf:04:b6:7b:80:7d:b3:3a:7d:d5:a2:79:48:c1:31:cb:5a:
         9e:d9:5a:49:30:ce:d5:82:4a:95:0a:91:67:61:97:f1:55:93:
         2c:a9:96:50:0b:76:90:34:40:8a:75:21:a2:e9:ca:d9:5b:4a:
         a8:53:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----