Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File:                     vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier:          qV+qRSQtj9n+N5tGpsQYVI7ceZPdUEgCO/pYh8swHE4=
Subject key identifier:   DA:86:84:45:85:55:82:8A:71:2F:6B:81:6F:06:68:D7:61:99:8A:75
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer:       /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial:       01962F74E8A5B70C06583FD8345EF97167A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number:          0FBF
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=)
                          2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: Lm3KqD8lQw0lpm+/xDpSGSX5Y+T6BuhbJduhS5vnnVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:a5:b7:0c:06:58:3f:d8:34:5e:f9:71:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=da8684458555828a712f6b816f0668d761998a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:36:c7:40:fd:01:32:f4:a5:d4:8a:84:72:
                    65:a4:a9:d9:11:35:b2:25:39:f0:37:1b:96:66:4a:
                    90:d3:84:dc:1e:9b:f8:e6:80:b7:58:fa:ec:9a:b1:
                    aa:96:16:a4:8c:46:f1:44:a7:2b:4c:a4:94:72:f9:
                    59:08:38:fa:c2:84:7d:d7:f6:d8:f8:1a:ef:ff:c0:
                    93:87:63:fb:b6:d1:8f:9b:c4:bf:e2:79:c1:32:87:
                    41:cc:69:91:8c:72:d4:09:8f:1b:86:42:88:7c:6b:
                    bf:a7:b7:91:18:2e:85:53:df:bd:7e:2b:e9:63:97:
                    5f:5a:74:8b:0b:91:83:55:35:9c:1e:11:14:9a:00:
                    c8:7d:a0:26:19:a4:6d:ff:da:7b:e9:6f:11:4a:4d:
                    89:63:3b:cb:ad:32:f5:05:25:7b:9f:a1:a3:34:fc:
                    ca:1e:21:87:2c:cb:e2:28:f8:df:c9:41:4e:3c:5b:
                    08:03:06:11:37:92:0d:34:a6:d6:5c:1c:50:98:d8:
                    4e:64:45:eb:0c:4f:ed:40:60:7c:3d:42:25:02:93:
                    f9:03:6d:17:20:9f:92:9b:7f:02:7f:f5:1a:f8:39:
                    6b:87:33:dd:ed:c7:31:a0:bd:2e:0f:a1:6f:8f:ce:
                    59:ad:8b:86:51:c2:ef:72:79:9f:0f:46:07:ce:ab:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:86:84:45:85:55:82:8A:71:2F:6B:81:6F:06:68:D7:61:99:8A:75
            X509v3 Authority Key Identifier:
                keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:31:5b:d6:de:c7:98:65:84:85:7c:bf:23:1d:6e:1c:de:
         9b:a6:2b:78:fe:a2:bc:08:68:9e:87:07:bf:50:83:ac:8a:71:
         f7:38:49:8c:8c:18:68:27:8d:4b:ed:ea:c3:34:8e:ab:7f:b9:
         41:22:68:5f:53:9e:8c:a7:5b:68:f2:a4:dc:4a:56:11:ec:2b:
         74:24:d3:32:49:ac:d4:ee:22:21:a0:62:ea:44:64:ce:49:15:
         31:67:07:70:61:2a:de:fb:38:ff:94:2d:37:e4:a8:f1:c7:59:
         83:ba:c3:f3:f9:f0:66:7b:44:d8:dd:bf:22:15:bc:79:79:53:
         b0:15:bb:d3:38:20:67:74:1d:59:87:03:ed:79:2e:00:94:20:
         f3:05:02:69:b9:7f:12:e6:46:bf:e1:2d:03:e1:6b:7a:51:51:
         e0:45:33:f7:9f:29:3b:a1:a0:b6:eb:42:91:19:e5:8f:ba:0c:
         d1:61:9d:57:59:7e:3e:75:b2:e8:85:c0:05:2c:50:a2:25:d5:
         06:ea:f1:cf:08:2d:94:7a:e1:9a:45:04:67:5d:c1:92:f2:2b:
         4d:97:a5:d6:59:7a:14:c1:80:f0:a9:2b:84:b8:47:21:e7:b7:
         8d:64:13:d1:f1:81:3c:cf:ce:7c:13:36:53:7e:b6:a3:7a:d9:
         4b:8a:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----