Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File:                     vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier:          QK+md1P7JUIN2uVFZIMd6Hmxy9qGlmw9Xlsy3wSOTmo=
Subject key identifier:   8D:44:53:55:8A:19:CA:45:8B:15:B0:0A:03:AB:12:10:0E:1F:29:66
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer:       /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial:       01962ECF5E553DD7B71178C7FE551241E0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number:          13BD
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
                          2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: uBrCQCS6yY9TgzKZgkDkv2q49O/EvI2qQMKWINkvS9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5e:55:3d:d7:b7:11:78:c7:fe:55:12:41:e0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=8d4453558a19ca458b15b00a03ab12100e1f2966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:8c:da:ec:f1:ce:3b:a3:f6:65:9b:90:fb:
                    f3:a0:28:72:cc:10:22:00:d6:18:cf:b0:6c:eb:ff:
                    44:46:67:49:3f:44:a1:f9:3e:23:1c:05:67:4f:0f:
                    6c:f1:6d:45:f3:d5:8b:d7:31:4a:5f:4b:80:92:e0:
                    0f:a5:9e:3e:7d:05:04:99:89:a6:2c:49:60:65:f7:
                    c4:e8:0a:06:c8:94:82:b2:47:80:28:fa:f8:cc:89:
                    e5:25:0a:8b:29:05:cb:46:96:a0:1f:f3:94:02:d4:
                    2f:40:ff:33:3e:bf:3b:1a:7e:6c:b9:7a:ca:63:28:
                    2e:30:57:c7:86:7b:11:c3:3e:33:d3:7c:7b:4c:e6:
                    9d:dd:6c:3c:cc:bc:7f:96:ed:ce:2a:55:30:fd:71:
                    3e:74:31:03:21:b1:6b:7a:b1:b4:31:78:70:a8:aa:
                    42:bc:fd:d2:3f:a5:51:ba:3b:86:3a:a3:d6:92:26:
                    a8:6d:34:3b:24:ea:d9:7b:54:b5:2d:5d:24:86:6b:
                    2d:ba:29:f7:ed:cd:7d:76:13:de:55:6f:87:3c:42:
                    f1:78:64:66:e1:34:8f:b4:45:f7:00:dc:1d:a4:bd:
                    c4:78:a7:69:26:73:a5:e4:8b:21:0e:09:df:0e:4b:
                    23:78:88:b6:e2:9e:1c:52:b9:52:c5:a0:d1:6f:68:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:53:55:8A:19:CA:45:8B:15:B0:0A:03:AB:12:10:0E:1F:29:66
            X509v3 Authority Key Identifier:
                keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:86:a7:99:1f:ed:3f:c1:8d:66:28:01:e3:bf:ad:cb:62:c7:
         20:4b:03:da:a6:a2:77:57:08:3b:aa:c6:10:2e:29:da:07:32:
         c4:17:4b:5f:73:2a:48:f6:f0:ca:f0:bc:12:65:08:f8:e9:04:
         9d:dc:82:38:50:e2:28:7a:5a:3f:12:b7:11:79:29:a7:4b:cb:
         b4:52:12:28:1d:89:a4:3c:ae:de:b6:49:c5:c3:e0:14:76:46:
         fe:82:7b:c8:79:d3:99:2a:f4:d6:e3:79:2f:9a:85:fb:29:aa:
         df:b3:76:bd:60:73:99:89:c8:f9:45:5f:07:94:da:d6:7d:e0:
         40:f4:b8:0c:c2:2a:22:df:b1:3a:b3:ee:6a:e9:4b:53:cc:b1:
         23:1d:43:a5:22:71:0d:f6:44:a6:74:06:c3:c9:c5:72:49:5b:
         6a:2b:93:e6:2d:20:7a:e8:f2:d9:60:f1:a4:8a:8b:4d:6c:c2:
         52:4d:c5:58:f8:42:ea:a5:10:8a:61:6d:f0:ef:4f:30:6c:3b:
         16:10:15:4f:15:e5:83:2e:13:f2:9a:26:db:62:b0:e2:98:7a:
         34:64:4c:5d:eb:0b:ca:7f:eb:38:02:59:b7:0f:75:c4:cc:06:
         36:56:c3:fa:ed:15:bd:2d:19:88:a8:47:44:62:5f:a4:1d:64:
         74:08:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----