Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          dTF8zByIw/UC3NKsXWyzdUW12vpOY8c3Xrj1jGrPat4=
Subject key identifier:   24:EB:9A:6D:35:EC:91:C4:05:56:74:A1:34:1D:20:CB:05:C8:9A:3B
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       01962E9956C4ECBC9EF59AD1F7B17E9D5302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          045E
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: 5FYQtrNXYwtocnxBmBtetEl6t3XD/mIkpV4CFidoXjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:c4:ec:bc:9e:f5:9a:d1:f7:b1:7e:9d:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=24eb9a6d35ec91c4055674a1341d20cb05c89a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:9c:8c:d1:94:a6:c3:ac:ff:35:e9:4e:ad:
                    e9:00:6f:86:19:61:57:38:11:db:ee:de:33:0a:7a:
                    4b:76:bb:a0:09:22:d1:ba:ae:fc:92:46:18:0a:91:
                    25:f8:9f:dd:83:aa:d9:5f:6c:6c:37:5a:f7:ad:2e:
                    fb:97:21:1d:0c:e4:58:83:f8:73:99:fc:ca:5e:af:
                    8f:67:63:f4:24:9b:48:f8:a6:e8:16:b1:60:c4:0c:
                    66:2a:be:1d:32:98:ad:1c:cd:cc:74:86:66:95:bc:
                    e7:7a:74:f7:7d:b1:57:4d:ae:f8:17:d3:b9:e8:04:
                    56:78:e1:3e:64:46:b3:57:e9:bb:d6:4c:9e:b0:54:
                    5f:d1:85:51:85:ee:56:fd:2f:df:64:4e:65:68:e8:
                    ed:73:f8:a7:56:04:2b:03:5d:7f:c8:d3:85:db:81:
                    b7:f8:76:68:b8:7b:e3:81:2e:b9:4f:04:ac:d1:a1:
                    ba:35:c2:f7:e2:8c:f3:e9:2a:1b:fb:4d:9e:29:78:
                    4f:c4:b1:af:e3:22:12:c6:7a:5c:87:f0:f1:09:05:
                    50:91:e8:56:0b:2c:17:cd:db:61:f1:cd:50:f3:42:
                    93:10:43:c5:ad:2b:d3:d6:41:7a:ea:65:b5:0d:a5:
                    a0:b3:5f:d5:14:d6:bf:54:dc:8e:f3:03:44:82:8a:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:9A:6D:35:EC:91:C4:05:56:74:A1:34:1D:20:CB:05:C8:9A:3B
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5b:f6:a0:90:34:be:c1:e1:15:01:51:8e:dc:d3:b5:0c:9a:
         2e:3f:f7:7d:b1:61:ea:5c:7d:d1:6b:15:95:af:6c:44:80:6d:
         6d:75:4e:8b:4f:da:e1:88:b0:59:ea:48:f0:ed:ff:bb:4f:6a:
         4a:3d:28:47:62:7c:a6:9a:0d:7c:22:bd:f6:b0:bd:ee:59:d6:
         55:c5:f9:e9:9a:28:6c:62:7b:40:d3:c8:b9:98:da:50:db:6a:
         33:07:c5:3f:09:fd:52:4f:bc:2a:76:94:0b:c6:56:19:ae:4a:
         a8:01:0a:48:f8:d3:45:d0:fd:c0:7c:6a:fe:a4:2e:62:1d:65:
         86:b7:81:c8:eb:6e:ea:b9:5d:d0:87:f6:9c:f8:56:46:fe:c7:
         2c:9a:b0:50:e0:20:2e:6b:15:87:4c:05:33:52:a0:14:27:95:
         4d:d5:2d:25:a8:18:48:7b:2b:5b:15:6d:ad:23:b9:a0:22:ab:
         92:56:cf:dd:50:58:a6:59:29:c1:83:65:13:bd:dd:f1:29:41:
         f8:86:06:cb:ee:7d:96:56:3e:2d:7e:c9:0a:8c:da:73:62:69:
         a1:d7:7a:06:7e:a5:db:c1:77:d5:45:19:62:47:96:6a:02:a2:
         f6:86:88:2c:62:bc:3a:48:fe:80:c3:48:99:71:87:a5:fe:b5:
         08:ef:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----