Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File:                     v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier:          TyeLn+7CcOwXoYzJIXZHLiL2q9javeXuL5HbRlhqOXM=
Subject key identifier:   71:7B:96:DE:F9:56:62:86:E5:49:07:92:4B:F4:28:5B:B0:30:0F:FB
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer:       /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial:       01962F06C1E117D5C77926702E07D5C4601E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
                          2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: dp3r/o8LtUyCWhXZeXMfzCWNm/zjgAsAr3SeZ1MqtnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c1:e1:17:d5:c7:79:26:70:2e:07:d5:c4:60:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=717b96def9566286e54907924bf4285bb0300ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:19:e5:ed:9b:55:d3:8c:31:76:b3:73:ac:
                    26:20:7c:b7:6a:c7:11:c9:c3:d8:3b:17:fd:cb:b3:
                    f2:63:17:12:2b:37:ca:b1:eb:4f:ed:76:2a:d8:b8:
                    31:90:74:41:28:2c:46:ba:52:17:fd:5a:48:02:92:
                    f8:f5:8d:a3:bf:6f:e0:8c:0f:9c:ba:57:2d:ab:c3:
                    80:24:78:87:48:59:f3:86:6f:d1:b4:51:12:54:38:
                    0c:6e:0f:05:ab:d6:78:46:4c:e0:5c:ce:53:33:bd:
                    6c:a4:39:dc:e9:cb:9b:e4:32:47:4f:fc:01:9e:a0:
                    2f:fd:39:ab:e2:21:96:7c:7f:a2:c2:95:ec:0a:25:
                    a8:e7:ba:11:cc:87:c4:25:ab:20:71:ae:79:14:29:
                    f2:54:0d:f4:33:ee:91:30:bc:c5:8f:e4:6e:a9:d2:
                    75:ec:fb:9e:2e:89:a8:68:c6:70:f3:8c:40:07:d9:
                    51:74:49:2e:50:6b:e0:1b:59:80:4d:53:e9:46:0a:
                    76:19:d0:3d:9c:13:96:e5:aa:33:ae:18:d3:89:d5:
                    42:97:6f:a8:98:b7:f3:86:78:5a:e2:ee:5f:6b:ea:
                    2a:71:a2:5a:c8:54:a4:f1:6e:fc:c2:5b:72:5f:77:
                    0a:91:83:20:b9:24:0f:a1:e6:d1:f8:65:8b:a3:8c:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:96:DE:F9:56:62:86:E5:49:07:92:4B:F4:28:5B:B0:30:0F:FB
            X509v3 Authority Key Identifier:
                keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:87:15:8a:1d:b3:17:35:cf:3e:b0:0c:1a:a7:85:0b:34:
         33:9f:ca:97:88:e9:27:37:e9:4a:7c:15:9f:6c:b5:de:11:38:
         8d:bc:9a:ac:a9:35:38:1c:99:5e:43:87:b9:eb:f2:88:c2:99:
         f9:5d:6d:62:28:d9:9b:ce:04:91:24:da:42:a5:0a:d9:73:da:
         39:69:80:0a:71:de:f7:0c:4a:e5:75:a0:c7:a2:a1:eb:15:e3:
         f0:99:d0:57:0d:d7:22:26:94:9a:27:fb:5b:32:00:62:cf:52:
         0e:2d:15:28:56:1a:fe:e7:00:55:80:22:0f:a6:95:65:66:a9:
         9c:d8:54:d5:f7:0a:01:63:87:7d:3b:25:b5:fc:c5:e7:21:a9:
         a0:9d:a8:1d:7f:4a:25:53:11:f2:fa:90:87:3c:a0:ae:97:42:
         e4:b5:8c:d3:6f:7d:23:48:fa:b6:57:68:17:0a:70:74:51:55:
         10:ed:f5:7a:ef:ae:d6:8e:f5:17:a5:48:82:d8:29:4d:e7:b7:
         f7:9e:95:a6:7d:24:bc:6d:20:dd:61:d6:74:f0:87:ab:47:9c:
         1a:7a:b7:5d:17:af:a3:53:21:92:00:8b:5a:4a:90:fc:ea:e7:
         ef:d3:f0:11:01:ae:be:85:2f:80:f6:90:47:98:0a:a0:b6:d2:
         15:2e:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----