Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft
File:                     vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft (raw, json)
Hash identifier:          GH3GutuqJs7ur3kSZ1YZFRD2mIhPtMko7dr0Np26bfk=
Subject key identifier:   4F:37:B8:39:C3:A1:80:3F:99:74:10:D4:8D:80:EB:17:8E:56:DA:42
Authority key identifier: BE:55:39:AF:E9:25:DB:80:B4:15:EF:B1:4C:63:1B:2D:82:C8:CE:DD
Certificate issuer:       /CN=be5539afe925db80b415efb14c631b2d82c8cedd
Certificate serial:       01962F3D3A69CF30CCE70B6BCF9971D44B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlU5r-kl24C0Fe-xTGMbLYLIzt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft
Manifest number:          C7
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: vlU5r-kl24C0Fe-xTGMbLYLIzt0.crl (hash: bRExud0++iU8G39oyrL7q3Vm3T0hekZF5kzu0EOjRVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3a:69:cf:30:cc:e7:0b:6b:cf:99:71:d4:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5539afe925db80b415efb14c631b2d82c8cedd
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=4f37b839c3a1803f997410d48d80eb178e56da42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:ea:8d:66:91:4d:bf:c9:95:9e:e8:21:82:
                    06:34:2b:6d:2a:4b:48:2c:7f:1d:54:b8:13:b8:2b:
                    62:ce:1f:1a:97:27:c9:17:64:2b:ec:55:01:eb:cb:
                    4f:f1:cc:36:b5:1d:fb:3e:72:af:08:ce:c1:3f:8a:
                    32:f3:33:84:e1:4f:11:7a:68:95:af:b7:b3:7e:f5:
                    a9:3e:e3:02:e8:b6:34:a2:80:19:4e:df:c8:8c:da:
                    d0:2c:4b:ba:e9:3d:78:a2:5f:16:5a:92:1e:2c:a7:
                    ab:99:97:34:31:72:d2:a7:49:3c:01:ca:fa:c7:11:
                    63:28:8e:92:ab:94:04:b2:9f:17:2a:5c:54:17:6d:
                    70:b0:e0:2a:8f:ff:3e:fa:f8:c1:7b:56:72:2e:81:
                    70:27:ad:ef:58:ee:ee:14:46:2c:dd:03:41:e3:08:
                    87:82:45:53:1f:2f:98:07:de:9d:dc:b3:27:22:96:
                    a7:ae:bf:e8:b3:2a:6d:a3:e7:d8:ad:07:c5:70:eb:
                    22:9a:c4:66:01:9d:43:ec:71:a2:ee:ab:59:88:8e:
                    20:76:ed:4a:2c:14:37:78:5e:07:41:31:7a:69:13:
                    ff:5d:a8:78:3c:04:58:91:32:8b:a3:a6:44:a4:50:
                    f0:bc:10:10:62:a8:75:7b:26:37:a4:07:0a:05:c5:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:37:B8:39:C3:A1:80:3F:99:74:10:D4:8D:80:EB:17:8E:56:DA:42
            X509v3 Authority Key Identifier:
                keyid:BE:55:39:AF:E9:25:DB:80:B4:15:EF:B1:4C:63:1B:2D:82:C8:CE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlU5r-kl24C0Fe-xTGMbLYLIzt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:90:ff:4b:c4:7f:33:5f:6d:eb:33:5a:32:59:f6:1d:2b:
         8a:c9:85:09:99:7c:51:ee:32:c7:c2:e3:56:ce:21:32:97:4a:
         7b:97:35:ad:1f:b6:7c:de:a3:c4:c4:bb:e6:52:d9:20:8c:21:
         ba:76:fe:42:93:a1:6a:80:1c:25:e7:26:78:8f:dc:cc:d9:7e:
         46:67:09:42:1a:77:8d:88:2f:c4:0c:26:93:88:c6:6f:d4:5a:
         cb:f7:17:80:a6:87:03:a2:53:4e:c9:90:2a:46:ac:46:9f:81:
         0b:2a:6a:6b:f5:d7:d9:79:aa:88:9b:14:0b:f4:ac:25:c4:4a:
         e0:81:c0:eb:ce:66:aa:b3:5f:ae:7f:b9:14:ef:98:14:1d:04:
         31:ed:10:99:15:2f:b7:0b:c1:77:11:d7:a7:19:92:f5:81:94:
         03:76:3e:4e:2a:e7:d2:b1:57:66:b8:e4:24:28:80:6b:98:ae:
         4e:b2:64:1d:90:2f:a6:d6:2c:58:2a:71:7d:7f:be:1c:2c:f0:
         46:f7:0f:f6:cd:55:cb:f4:85:12:ed:79:9e:ac:a7:c1:43:cf:
         99:c1:da:ab:80:0b:0e:5a:24:90:4d:09:01:5a:48:d1:13:3b:
         84:1a:10:22:3c:22:5c:68:27:6d:5e:7e:08:16:44:fd:7f:72:
         8e:82:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----