Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          iFDNfU1qIX/CcISa0g8DSU8YTeJAS9hVSeHrvlcB5uU=
Subject key identifier:   C6:A3:CC:F3:05:29:4C:2E:15:B9:7B:9A:77:8D:D0:5D:C3:AE:20:B1
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       01962DF3A5EB57CA619643031B7CADE804F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          01A8
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: Yt/5074gBMkVH/2bqHlcYG4/dATzyN+0Uw0dTd8ukIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a5:eb:57:ca:61:96:43:03:1b:7c:ad:e8:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=c6a3ccf305294c2e15b97b9a778dd05dc3ae20b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:63:21:7d:e9:37:4a:9c:17:ae:63:6b:ec:
                    6e:57:1a:ed:45:99:08:cc:b4:30:e1:d9:44:60:ba:
                    af:82:b7:37:4c:62:88:a7:19:06:31:30:bd:35:f3:
                    12:15:3b:96:cf:b5:e8:b8:a3:50:b7:48:14:89:bb:
                    1f:9e:1f:56:ae:ff:c6:4f:68:9c:00:b1:51:31:d6:
                    7b:41:01:88:85:2b:82:3f:17:2b:d0:4a:62:fa:c5:
                    89:f3:ea:18:17:77:e7:21:ec:a5:a0:49:78:13:71:
                    96:04:44:b4:11:78:76:bd:c8:50:36:80:f2:d5:09:
                    7f:83:71:83:4f:99:6f:32:06:c7:2a:b6:46:65:48:
                    5a:ae:e6:de:cd:d0:29:fa:f1:df:51:f0:11:76:63:
                    5e:e1:a2:1c:35:e9:47:b8:cc:66:20:c7:8b:e2:97:
                    c1:31:b0:1b:1c:98:30:bf:01:fa:06:32:03:f7:0d:
                    25:6a:bc:09:3e:2d:a4:21:a1:67:e4:44:be:17:b1:
                    2f:ae:03:b0:02:68:3c:c5:79:ab:2c:82:54:15:49:
                    2f:f7:59:83:8b:98:a7:e6:97:b5:14:06:1e:66:18:
                    ac:da:f6:0d:67:52:31:88:85:04:21:81:18:e1:2d:
                    30:e7:8d:ba:57:a9:34:07:65:92:e6:76:34:2d:6d:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:CC:F3:05:29:4C:2E:15:B9:7B:9A:77:8D:D0:5D:C3:AE:20:B1
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:0c:00:b7:6f:7b:71:bb:96:b0:91:e3:4c:15:f9:51:da:
         07:51:a5:6e:ff:25:ac:8d:b7:ae:b5:00:e7:84:8e:f5:2f:ff:
         a1:04:14:10:c9:37:e2:46:9b:25:3d:69:97:ff:d1:98:19:4f:
         1c:1c:40:a4:22:1a:cf:1b:0c:00:89:0f:c2:ff:5c:af:2b:ac:
         6b:f8:32:af:1a:5c:37:88:1f:d2:50:87:a4:c1:10:92:9a:06:
         23:23:cc:d5:86:34:f0:12:8c:e3:31:1d:c2:0a:ff:ae:3f:6e:
         a5:2e:34:f4:20:b7:4c:0e:0f:99:0f:09:4a:05:f3:67:94:f4:
         01:8d:f9:11:40:94:6c:49:1c:00:e3:d8:c1:56:2e:d3:3f:51:
         15:bd:98:d7:bb:eb:50:21:88:ac:6b:28:35:57:23:0f:0d:11:
         0b:6d:1e:37:04:78:7b:cc:84:40:f9:1a:69:7a:16:d6:91:ba:
         95:6b:45:af:e2:e9:31:6d:bb:e4:d5:ad:bf:2a:45:b6:b5:45:
         da:f7:56:fa:6a:2d:f7:eb:0a:c5:3d:e8:a6:b8:39:cf:e0:7e:
         f8:65:a4:02:87:8e:7e:87:ac:e2:c0:46:16:55:49:31:62:c0:
         7d:48:66:f5:97:21:c8:df:46:c3:46:6b:51:b0:6e:7d:be:cb:
         ab:c8:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----