Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File:                     vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier:          01VW4ItsjOXO7zw84JVlpaHzqRO+br+FIzcofa1oEDY=
Subject key identifier:   B6:7C:1C:FB:46:3E:48:A1:E3:FA:55:4A:DB:F4:84:79:1B:F2:19:0C
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer:       /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial:       01962E99218B5E3DC945389D652279ED4F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number:          0731
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: YgBeZJZNbck5LkJRJ2Xv4f8IdcQGIr9hzwOG4+DcwJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:8b:5e:3d:c9:45:38:9d:65:22:79:ed:4f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=b67c1cfb463e48a1e3fa554adbf484791bf2190c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:73:05:31:89:25:6d:4b:3a:34:5f:67:32:
                    ca:70:88:a5:14:5f:49:5f:d0:92:80:39:4d:01:6f:
                    01:8e:7f:a3:71:9e:91:1e:ef:ce:53:c0:5c:7d:58:
                    24:ca:c5:45:f7:35:4c:5b:0b:d0:e4:38:0d:01:c5:
                    a3:3b:82:c3:a6:ae:95:08:62:54:20:17:e3:4a:75:
                    cb:7f:35:a5:cf:69:30:51:3a:30:57:59:e8:62:26:
                    64:b2:c6:2d:66:eb:e0:bb:67:dd:f2:c2:73:d8:e3:
                    3f:08:40:a4:39:fd:16:9f:13:06:3b:df:36:e5:f1:
                    cd:e1:b7:86:44:9f:be:47:51:dc:31:df:af:0f:5a:
                    31:1f:04:78:dc:84:05:6b:d9:58:eb:5e:57:a8:ee:
                    da:79:7e:8e:64:d6:06:fc:7d:e6:2b:02:e9:32:d9:
                    11:e9:ea:74:a4:e4:76:3a:49:a2:50:37:fd:71:c1:
                    d5:e1:6a:25:19:80:7f:ab:d0:37:95:49:9b:62:94:
                    e2:ed:b6:0b:b2:fd:97:d6:5d:e8:9c:a2:f8:96:93:
                    4c:f0:4d:3b:b7:f0:31:25:bf:a8:07:8a:58:d3:11:
                    dc:32:9d:26:2d:f0:b8:60:ce:2d:0a:aa:e8:aa:f4:
                    ef:ab:41:d0:65:a2:87:3f:37:04:a6:73:f5:fa:b8:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:1C:FB:46:3E:48:A1:E3:FA:55:4A:DB:F4:84:79:1B:F2:19:0C
            X509v3 Authority Key Identifier:
                keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:1f:dd:5e:a4:92:7f:ab:cb:96:9c:77:86:21:d7:fd:a7:
         50:5c:fb:9e:3d:2f:05:9c:cc:54:aa:4a:7f:29:73:4d:fb:e2:
         d6:da:02:ec:e7:24:1a:80:42:97:6d:6e:15:40:b4:e2:8c:43:
         ad:83:b9:6a:04:a8:77:2e:cd:05:c7:50:ee:61:03:29:dc:20:
         2b:9b:7d:f5:2e:23:1c:a7:b8:ea:89:1c:b3:45:f2:34:b3:33:
         ba:15:ec:81:da:45:2e:49:80:ac:b5:ca:58:b9:68:03:97:87:
         6a:ac:51:5e:bc:4a:d6:6a:b9:e6:3a:07:13:7f:4c:1f:82:93:
         ba:88:b0:af:cc:bc:6a:9e:e9:cf:9a:6b:a2:37:4a:47:96:4d:
         18:b4:6d:2e:a8:64:88:fa:5f:7d:fd:f4:87:35:0e:ec:96:21:
         35:07:83:02:c8:44:16:50:28:b7:e4:ad:5e:98:6a:a1:db:9b:
         d6:f9:b2:83:81:06:6e:56:56:4d:ab:f9:d7:4f:3f:b2:2f:ae:
         8c:50:23:20:b2:24:51:2e:95:c9:78:fb:20:6a:8f:f6:8f:19:
         76:0d:a2:a4:ad:9e:61:6c:09:5b:6f:98:2f:cb:a7:44:64:68:
         3f:4b:c1:97:2b:16:ab:9c:27:f2:f0:db:22:cd:b6:d7:76:f2:
         3e:d0:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----