Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File:                     Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier:          YlLd0uVLkWNHy8isQcgCWjYmlFPNn1S5AcBJQGqKgdQ=
Subject key identifier:   93:A5:86:DC:13:59:41:DF:24:77:5D:44:F9:DB:45:B2:2B:36:10:53
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer:       /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial:       01962F06D8745548AA1CC8AEE138EB268CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number:          0727
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: uK4oV1b7W7B6XQR8kpPZVN80ejD/nfJMnoRJlhRuCrs=)
                          2: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (hash: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:74:55:48:aa:1c:c8:ae:e1:38:eb:26:8c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=93a586dc135941df24775d44f9db45b22b361053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:21:3a:3d:ce:f7:52:40:1e:45:9e:09:99:
                    55:f5:a4:f4:14:3f:3f:6f:5b:6d:0c:e6:67:98:5a:
                    32:f0:db:d8:7c:7e:62:9a:74:7a:84:ea:25:0e:cd:
                    c6:7c:c5:91:72:4c:50:ac:37:63:01:ed:c3:72:29:
                    c8:85:55:97:a3:75:86:80:c9:1a:b7:40:6f:4d:12:
                    71:2a:9c:1f:d6:1a:86:7f:ac:ea:29:2c:8f:2a:99:
                    75:4f:03:a2:0e:8b:1f:5e:59:33:63:86:69:75:07:
                    ae:9a:27:d0:c2:70:8e:0c:15:e1:b3:3c:22:9c:7c:
                    87:83:df:0f:22:43:87:ac:62:14:73:5d:bb:42:66:
                    d6:0c:4f:a6:a7:37:dd:ae:ec:b7:37:4b:bd:2e:81:
                    c2:c2:5f:d0:c5:78:96:f3:f9:6a:0a:56:22:cc:08:
                    03:97:4a:46:b4:b9:43:e7:a1:03:b5:5e:1a:95:0b:
                    7f:c9:6f:87:6d:9c:b4:80:d5:96:b1:1f:38:5b:e0:
                    74:79:35:98:26:4e:49:31:79:f7:2b:83:d6:db:36:
                    de:b8:44:53:60:12:fd:b8:af:8e:b8:2b:ab:5a:6f:
                    1f:20:4b:2c:12:c5:2a:e9:f8:c6:14:93:1b:28:db:
                    a0:90:ac:40:9e:7e:a6:2d:f2:94:f4:da:e4:13:fd:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:86:DC:13:59:41:DF:24:77:5D:44:F9:DB:45:B2:2B:36:10:53
            X509v3 Authority Key Identifier:
                keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:b2:2a:52:2b:bc:b9:d6:fa:96:54:76:4f:6d:82:81:57:c0:
         d2:2c:99:71:43:c4:54:cf:ed:d8:2b:d6:e7:14:32:07:81:b2:
         30:f3:f4:ce:0c:77:0d:be:6e:3f:45:21:7d:4a:22:2a:e4:ba:
         f7:01:fb:e3:8d:a4:ad:b3:76:bd:5e:99:6d:09:a7:29:09:66:
         35:f3:bf:eb:09:af:c0:85:b2:ca:0a:c7:c0:4b:c5:ac:15:dc:
         e0:d1:fb:3c:a8:c5:44:ec:ca:a6:2f:33:9b:8f:ed:ee:a0:2b:
         ea:34:27:5d:95:0a:de:5a:0d:15:8b:d3:3f:f3:10:c6:0c:96:
         96:e6:b2:cf:b8:c0:f8:eb:ab:65:27:5b:dd:49:fc:c5:30:f7:
         1a:9a:ae:d4:c4:ad:20:c5:3f:b6:a1:0e:5b:67:32:38:4b:9f:
         05:33:55:f8:e3:34:67:ca:e6:1b:d9:77:2a:9b:d2:ec:40:43:
         ff:50:4a:a8:6c:3f:dc:26:bb:db:30:40:60:f1:7c:2d:cd:98:
         63:ac:af:88:d5:6c:fc:95:ef:c9:57:4d:c8:99:8b:80:fd:ad:
         ce:2a:fb:3d:5f:e1:3a:38:1c:da:03:06:bf:6b:65:1d:3d:88:
         d4:2e:ea:7a:e9:35:7f:60:84:7b:1f:5a:d2:8e:8b:e3:2a:a5:
         34:c2:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----