Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File:                     VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier:          KnjdW7uoYTs9UvT4uTUBpt9V/o//4Izl5+mqboN/mcg=
Subject key identifier:   2B:97:36:23:F6:03:79:B0:79:B8:88:8B:89:4A:7A:CE:2C:A0:E5:FF
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer:       /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial:       01962F06935A3CA21B598715DA2C57BFFD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number:          04B0
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
                          2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: RnFhcjgtfJN4y94Fv8YXIHrtq9iCodUL4EMwNr5s0jo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:5a:3c:a2:1b:59:87:15:da:2c:57:bf:fd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=2b973623f60379b079b8888b894a7ace2ca0e5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:b3:97:f2:c4:fc:b6:29:23:fb:47:13:dc:
                    cc:80:d5:b7:f1:4b:f9:48:bf:62:b8:0c:4f:da:23:
                    b0:f5:8c:db:79:87:14:0f:10:7b:b3:2a:9b:e1:7c:
                    1d:66:f4:65:81:37:7a:fa:81:26:55:10:63:8c:75:
                    20:16:c1:56:9c:2d:6e:7b:1d:15:f7:f7:75:f2:bc:
                    67:73:3b:d4:dd:66:20:57:62:59:ac:7b:09:55:a4:
                    cf:6d:ce:98:52:28:bf:1e:02:83:b9:54:d3:c4:b0:
                    d6:f1:de:74:21:49:29:7a:9e:a5:92:b0:16:a9:6b:
                    5b:6b:15:d7:93:ba:3b:46:6b:c1:2b:ca:e3:cd:cc:
                    35:97:4f:39:33:2f:34:a4:b4:6e:a2:30:b8:aa:c9:
                    36:28:9c:0f:5c:51:30:11:0b:00:94:74:97:67:24:
                    e2:2e:de:58:56:d8:58:ea:fd:10:16:37:7e:f3:05:
                    2e:d9:5e:67:95:32:46:32:4f:ff:90:ce:37:92:7e:
                    1d:6c:37:66:25:46:f8:26:2d:55:27:1c:f5:2e:84:
                    ff:24:79:98:2a:7f:e8:6a:69:30:6a:80:39:bd:31:
                    a0:8f:86:19:1a:b0:1f:aa:c3:f1:4d:37:2a:2b:7a:
                    70:c6:24:97:2c:c5:f8:a0:aa:0b:e1:ae:3e:6b:b7:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:36:23:F6:03:79:B0:79:B8:88:8B:89:4A:7A:CE:2C:A0:E5:FF
            X509v3 Authority Key Identifier:
                keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:be:bf:5b:42:c6:2d:02:a1:82:b5:c6:f3:35:9a:f7:31:
         23:6f:81:3c:1c:ad:8b:e1:b0:02:fa:a9:4b:fe:10:9f:16:82:
         4b:e7:2f:5c:2b:24:f4:25:4c:4d:e2:a2:85:ff:e2:22:5f:48:
         37:55:cb:80:92:29:70:ed:9e:a6:4b:10:45:0a:9d:5b:8e:2e:
         da:6b:a7:57:a5:80:2a:61:dd:ce:5e:03:b4:4f:eb:ed:72:bf:
         7d:e9:2b:4a:11:9b:02:15:1d:31:3a:b1:87:9c:e0:3b:21:48:
         f9:6a:72:47:f6:75:e9:94:96:c2:78:96:89:b0:fe:a5:49:f4:
         1b:34:ea:f8:eb:da:8e:0e:aa:17:ac:87:7e:e4:24:90:b7:e3:
         45:e9:61:e0:d4:16:8f:7f:f1:b3:2a:9a:ad:5c:81:5c:38:4e:
         9c:dc:00:0c:99:b8:97:21:64:f8:1d:5d:63:59:2a:d6:42:32:
         d3:d3:3a:2d:38:8b:4f:e8:e0:a6:c4:a9:ac:07:09:60:db:54:
         dd:74:71:d9:1f:23:a0:50:4e:af:65:df:50:88:70:4d:0e:a4:
         c2:cd:ce:98:50:c1:80:c6:03:7d:3a:76:a9:02:9a:75:61:12:
         64:2c:cc:86:51:d2:03:0f:ae:ac:20:c8:63:50:6a:b6:f3:77:
         88:d3:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----