Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File:                     vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier:          l4FINuaLld2mvgZSrawALT9qv/rQSgsqAK+ayOKVvcU=
Subject key identifier:   BE:8F:25:66:E0:EE:3D:30:1B:B8:24:F9:48:80:73:93:7B:DA:0D:00
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer:       /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial:       01962F06667F8F6F6FC2E0F367A124E27216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number:          142B
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: XLPgVVSkHwD+vdLzBeSsyWYIhaUDsRNI43VkMwTQuWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:7f:8f:6f:6f:c2:e0:f3:67:a1:24:e2:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=be8f2566e0ee3d301bb824f9488073937bda0d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:b6:bf:d3:e7:52:09:80:0b:56:ca:ab:a1:
                    34:30:ec:e8:11:a7:de:aa:27:42:32:35:fd:93:36:
                    15:8f:24:be:89:f9:b5:b5:89:fd:11:32:e1:07:22:
                    a6:ec:00:f2:da:75:77:d3:f6:6a:3d:1a:24:3b:c9:
                    21:e8:2f:36:0d:5a:84:7b:b6:96:42:a7:f3:e9:e3:
                    83:dd:fe:aa:d5:f2:fe:f1:17:99:d9:a5:52:40:3f:
                    15:71:02:b8:22:c1:4f:ff:39:1f:82:ef:f4:db:48:
                    49:a1:73:57:65:3a:4a:6a:45:49:26:20:29:68:a1:
                    8b:63:6c:ac:50:11:ec:d7:01:fc:65:58:dc:01:f9:
                    23:06:e7:c4:23:f2:90:1a:7c:83:c5:df:0b:39:34:
                    65:56:40:5c:51:6b:de:eb:76:41:5d:36:0f:e9:19:
                    32:85:e6:6b:6c:83:a5:33:2f:3f:42:cb:7d:7e:fc:
                    2b:83:ba:3a:42:70:4e:c6:38:84:8a:cc:f7:a8:97:
                    40:13:14:5d:a6:ab:51:17:4d:9c:9e:c7:33:68:ef:
                    5c:2e:2c:e8:57:3c:1a:f4:8d:f7:f6:fa:77:47:3f:
                    65:29:0b:60:1d:d2:0f:c0:3d:6e:ca:0d:61:b0:04:
                    8f:27:37:e1:5e:87:b5:1e:26:82:fc:3c:66:05:c2:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:25:66:E0:EE:3D:30:1B:B8:24:F9:48:80:73:93:7B:DA:0D:00
            X509v3 Authority Key Identifier:
                keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:38:6d:66:7b:7b:b6:7f:47:d8:d6:9c:9b:fe:3f:f6:96:
         c8:09:c8:5b:fd:f7:40:b4:c3:64:a3:0c:33:f9:6b:09:ad:a7:
         64:36:19:ee:39:eb:ed:a4:71:c1:ae:4d:09:7e:c6:28:96:02:
         43:78:59:17:8d:6c:fa:61:b3:f2:c8:19:65:41:12:c4:89:36:
         95:4c:9e:bf:ab:b3:4a:5f:a4:cc:3a:9d:6c:a6:df:04:e9:49:
         7e:c4:19:92:91:37:88:7a:5b:ba:04:7d:e0:ac:eb:14:57:91:
         2c:3b:a8:31:fd:53:6b:00:02:25:8a:01:03:65:ef:32:ec:11:
         c8:e9:41:80:c6:2a:45:6c:fe:61:35:00:48:7b:5f:50:13:1a:
         bc:74:27:00:79:eb:24:d2:53:3a:c0:5e:56:26:43:b0:2d:26:
         50:45:f4:77:04:37:f2:fc:32:cb:ca:4e:ec:cd:2b:46:85:59:
         0a:63:a5:fd:73:06:83:2c:05:52:53:a1:31:ef:7b:2a:a7:2d:
         d3:59:99:2a:1d:8c:34:a9:77:d9:96:7d:e2:70:83:5d:8f:6f:
         4a:41:4b:c1:be:55:af:95:ba:2c:f3:57:fe:e3:88:c8:93:11:
         54:e7:9c:a1:9c:2b:d9:6e:4a:f0:8e:27:a0:c5:b4:1b:08:6c:
         26:e9:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----