Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File:                     vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier:          5D1HrvdKna1Gbp4umhHqagk+8TPCsVvC4+Jy5U8wgrE=
Subject key identifier:   CE:F1:D1:76:5D:6D:D6:B8:38:91:58:14:B0:65:01:A5:32:F4:A9:E5
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer:       /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial:       01962FAB5C1F1B444274CD1C3FE4ACE9324D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number:          0274
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
                          2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
                          3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: BG9X1ZSy8kc7P67syUJ8zyd6UBLZuyY676eOpW2VVFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:1f:1b:44:42:74:cd:1c:3f:e4:ac:e9:32:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=cef1d1765d6dd6b838915814b06501a532f4a9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:14:a2:9d:96:64:3c:42:2f:c1:81:f3:76:
                    7c:97:ab:e7:c9:47:ff:cf:23:db:7a:18:99:f0:a2:
                    51:50:19:fb:8f:55:55:8b:74:d2:77:4d:62:97:7e:
                    1d:c4:d4:54:08:cb:d3:0d:63:8d:31:18:48:92:71:
                    16:19:69:89:bb:01:03:24:fd:51:6c:2a:c1:8c:0a:
                    a0:f7:1e:81:48:f4:81:ea:b7:19:43:ba:db:d0:ab:
                    ef:0e:c3:ae:03:3d:41:d0:f8:a2:14:62:f2:fe:78:
                    6a:99:2c:b6:2a:f5:90:20:34:21:31:10:b4:02:6e:
                    c3:1b:1d:5b:43:3e:45:22:ad:89:7a:83:2b:10:21:
                    62:be:11:bd:91:e1:09:60:5a:aa:3e:0d:67:50:da:
                    bd:38:fe:36:ac:33:a2:94:df:3f:cb:f0:23:50:fc:
                    1f:a2:2f:66:60:26:1e:2e:ba:e3:cc:be:ee:7f:0f:
                    0d:6a:a6:57:24:5f:72:0f:ec:ad:4c:02:12:3f:f6:
                    cb:fa:e1:1b:c8:e8:2e:8a:1a:88:c0:d3:4c:35:1e:
                    18:b0:28:f2:dd:2d:9a:5e:f6:5c:59:8d:91:0d:e4:
                    08:1e:64:c4:7f:ac:15:db:13:33:c7:ec:56:99:c2:
                    4e:57:ea:45:aa:3c:6e:81:6f:99:bb:e3:fc:90:ba:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:D1:76:5D:6D:D6:B8:38:91:58:14:B0:65:01:A5:32:F4:A9:E5
            X509v3 Authority Key Identifier:
                keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:20:20:2b:b7:bf:3a:73:17:80:f1:af:a9:59:45:37:c2:
         c2:9e:d1:4b:ec:51:64:0e:a6:bd:a9:f6:e8:14:8e:57:bd:7d:
         aa:94:4c:45:76:2d:f4:55:36:07:08:03:3f:88:b0:c2:ee:cd:
         21:5f:96:42:e9:d2:19:0e:ad:24:7d:10:78:f7:3c:37:cb:24:
         8f:d3:6a:9e:b9:f3:38:99:46:6d:d1:a9:b6:84:73:c0:89:31:
         f7:7a:ce:61:e4:26:3e:d5:16:e0:84:ed:05:a6:19:86:62:2e:
         81:7a:9b:05:72:55:47:df:36:83:eb:a0:f6:a8:73:05:d1:30:
         5e:63:0a:93:4e:db:75:4e:66:54:8c:59:b7:da:65:53:d7:05:
         30:4a:6b:47:08:d5:1d:6f:6d:91:e4:aa:5f:be:49:27:b7:0d:
         11:51:57:e8:74:58:a5:98:b3:aa:41:34:a0:8b:ed:ea:eb:f3:
         84:54:ae:3a:44:85:03:30:0e:62:d8:5d:68:ea:8e:0c:71:d9:
         63:fe:f2:ab:61:96:36:b8:26:22:9d:b9:bb:9d:29:eb:9e:24:
         c3:4d:e0:11:40:c1:a5:45:e3:77:0b:e2:98:0a:6f:26:a8:ab:
         e0:06:0b:3a:e9:f1:80:00:00:59:0c:3e:62:b1:c6:2a:e6:4c:
         e3:09:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----