Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
File:                     vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft (raw, json)
Hash identifier:          nhBMmJkTZU39hhikebW/Xa5U6djnDaQEb3GJjqe3RdU=
Subject key identifier:   2F:F3:2A:A2:8F:C1:09:D7:2F:57:CB:C3:71:95:8D:7C:F7:4D:6C:8B
Authority key identifier: BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08
Certificate issuer:       /CN=beffadb46a30360bb84f80701bcafb470f064208
Certificate serial:       01962ECFA8DBE78E956E16DDF252EC8B86C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft
Manifest number:          0279
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl (hash: QMqOtptLR1PJiShq+JtMXlNol2IpN8WK4Esofr0Xp7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:db:e7:8e:95:6e:16:dd:f2:52:ec:8b:86:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beffadb46a30360bb84f80701bcafb470f064208
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=2ff32aa28fc109d72f57cbc371958d7cf74d6c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:87:a8:fe:66:73:f9:68:cd:f5:aa:05:af:
                    2c:64:18:49:6b:66:d2:77:98:ff:0a:78:c2:69:2b:
                    72:4e:c3:4a:a6:13:f2:0c:4d:68:d5:ff:62:d8:be:
                    09:fe:04:da:dc:a0:35:74:0b:d9:d4:7e:30:2c:2d:
                    a4:76:a9:d9:02:a4:4b:70:a9:c9:3d:73:d6:30:c5:
                    a6:89:d0:ff:71:c1:4f:55:4a:4e:6e:05:a0:55:66:
                    e5:ca:51:ca:07:b3:a6:a2:6b:1b:0d:3d:f1:98:7b:
                    f9:7a:58:94:09:24:7b:f2:85:ce:91:44:85:a5:17:
                    4b:a5:b8:f8:07:fb:e8:e3:e6:17:2f:1c:3d:a4:9f:
                    78:e2:bc:ba:46:00:59:f8:cd:c4:f3:2a:30:e4:93:
                    51:eb:45:d7:17:90:1d:ee:58:b7:c0:33:66:f6:b3:
                    57:83:f4:f9:d6:38:d7:31:da:a4:a0:10:4e:23:9d:
                    b2:28:42:17:d3:a5:d4:53:f2:54:fb:97:6d:a0:2d:
                    71:d2:74:06:22:3c:38:f9:bf:b2:60:39:c0:55:fe:
                    a5:1e:b7:8e:97:9e:0f:50:97:ae:f5:7f:6e:ba:c3:
                    59:2f:30:f2:52:e5:8b:1d:eb:9d:87:7b:0a:6d:31:
                    12:a7:00:d0:a4:84:18:ce:7c:fb:1f:b2:37:60:fa:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:2A:A2:8F:C1:09:D7:2F:57:CB:C3:71:95:8D:7C:F7:4D:6C:8B
            X509v3 Authority Key Identifier:
                keyid:BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:97:16:2f:4c:68:26:96:4e:9e:0d:d7:d1:20:12:8a:ad:
         8d:84:2d:89:8e:62:bf:4a:d3:bd:5f:7a:52:fe:24:4e:43:a7:
         d2:1d:e9:bb:3a:3a:61:63:b1:62:86:02:fe:0b:68:f3:80:1e:
         b2:ff:c2:3c:62:fd:51:5c:15:4c:fa:04:ee:7b:0b:af:81:0b:
         27:24:d4:15:1e:0d:b1:9a:c9:7d:85:80:df:ce:f3:bd:90:48:
         08:71:73:34:29:e7:6d:a2:ac:18:75:c6:0a:50:7a:5a:27:76:
         c0:ba:c3:6a:3c:ee:36:e7:f6:49:27:6d:fe:5d:f4:a2:67:b0:
         21:fa:69:8e:1c:98:4b:9f:0a:70:30:95:22:f4:49:01:51:c5:
         7f:20:ad:5a:4d:d0:e0:10:c9:59:c2:e9:cc:33:1e:d6:58:61:
         51:55:bd:3b:4b:73:fb:34:31:92:0d:fa:11:bf:5c:20:82:cd:
         b9:93:ba:dd:6a:28:bd:66:ce:d4:09:70:1b:0f:0f:c1:7e:6a:
         d5:67:0a:5b:58:64:e7:da:24:06:1a:e9:9d:db:f1:53:de:94:
         09:ce:f1:a3:6a:b5:eb:47:ef:53:33:81:63:0f:38:f7:0c:80:
         43:72:f0:d4:d6:3b:7b:95:6e:60:f3:e0:62:ea:ec:1f:4e:50:
         97:c9:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----