Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File:                     VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier:          ggHqn8uHWV+KTQMLTJNrw+f9FGzrwTYG99tzl41qYy0=
Subject key identifier:   B9:DF:60:E2:33:70:EB:69:68:85:2F:BA:68:F4:40:67:5D:04:FA:45
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer:       /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial:       01962F06EC11254213662C1DD007B9681859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number:          1165
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: H8qOEQj+m80nwqMMc8yOJ9IxSSCEufo1wZ4pPxOkHDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:11:25:42:13:66:2c:1d:d0:07:b9:68:18:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=b9df60e23370eb6968852fba68f440675d04fa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:f9:63:d2:e8:1a:07:90:44:c1:9c:f7:e7:
                    45:7c:53:d2:ef:f2:1c:b6:57:5f:4a:45:bb:c0:58:
                    8d:1c:d5:e6:3b:73:a5:a3:ce:90:a9:51:42:2c:ad:
                    56:e1:b0:96:e5:f3:43:6d:0d:7c:f0:7d:0e:b0:f7:
                    7a:7f:42:dc:08:22:fb:23:1e:06:c2:56:c5:2e:c8:
                    7a:5c:33:31:ff:f9:d3:c7:8d:df:22:52:ae:6e:e3:
                    1c:db:b3:dc:57:c0:77:e4:f8:11:38:3b:aa:1a:8f:
                    a4:fc:77:fd:9f:c1:86:a1:3b:82:69:30:eb:df:6a:
                    4e:90:d0:de:73:7b:a4:17:57:49:47:48:7a:3b:ed:
                    ff:d8:5d:88:05:f0:cc:87:9b:14:10:0d:63:c6:c7:
                    b7:e1:c4:ba:f3:c7:89:1a:bb:0b:40:e1:f4:e8:9a:
                    0f:92:03:ba:73:ae:55:8e:66:94:49:b6:a1:74:47:
                    55:1e:53:49:e5:a6:44:11:26:b4:b2:3f:71:0d:51:
                    1b:1c:56:d3:43:07:8d:2c:06:fb:ec:07:84:fa:4f:
                    3f:26:ff:3e:44:3b:63:95:2d:a2:2f:91:6b:4c:94:
                    3d:6b:2c:f8:7b:09:02:1c:ef:05:cc:eb:8e:64:c3:
                    dd:f4:27:aa:80:31:5f:bd:d7:67:0d:21:10:3c:2e:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DF:60:E2:33:70:EB:69:68:85:2F:BA:68:F4:40:67:5D:04:FA:45
            X509v3 Authority Key Identifier:
                keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:41:73:78:c5:16:a4:43:14:d6:f7:d3:f8:f4:82:1d:30:
         d8:86:f8:23:2f:42:a8:ff:bb:f2:0c:52:4a:12:45:e3:25:c3:
         75:9a:69:51:4a:65:fe:86:2e:18:f3:5e:bb:4f:20:68:b6:db:
         2e:14:ab:6b:9b:ac:f4:93:e1:f8:a6:65:53:d8:f1:aa:58:1f:
         e2:bc:85:69:e2:fa:2c:76:b7:56:54:bf:c8:7f:4c:32:b4:75:
         58:5d:a6:b0:24:84:44:8c:ca:77:fd:83:4b:3d:f3:e3:b7:c3:
         d3:73:9c:15:df:70:0d:4d:bd:9a:1a:67:43:e6:31:09:e6:6c:
         8e:a8:7f:bf:50:99:48:5a:54:6a:be:5b:e0:aa:8b:f3:7f:c7:
         fa:c5:f4:35:51:01:b9:08:22:e6:cf:3a:41:d4:13:f6:80:cb:
         ad:78:62:49:e5:b2:e1:86:f3:2b:7c:67:5d:8d:be:f7:82:a2:
         32:93:41:28:f0:79:a0:1d:f0:ce:2f:15:b2:20:ef:8a:f6:b2:
         05:43:82:be:6e:a4:28:b7:b3:bb:15:e6:a1:97:84:d1:13:38:
         c1:6f:94:d4:83:c8:1d:71:0a:60:18:81:ac:7c:c2:8e:4a:88:
         de:ae:d1:0b:d4:f5:bd:a9:16:07:f7:e9:45:96:30:b4:f9:9d:
         9b:cd:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----