Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File:                     VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier:          eq5BSX6OHdgjOpjnqDotuAoHW378N75ypNrAZYxEa4o=
Subject key identifier:   C9:20:9E:CC:A0:D0:C9:6B:00:4A:7B:6D:9A:89:B6:FB:00:C1:F3:83
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer:       /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial:       01962DF405874C380DF9A966666FAFBCA5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
                          2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: lHq/SzBAP/vBj83dL/VQ05OFjeIt9DHAdIQ3oza6v2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:05:87:4c:38:0d:f9:a9:66:66:6f:af:bc:a5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=c9209ecca0d0c96b004a7b6d9a89b6fb00c1f383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:f7:f4:ca:d6:4e:89:cd:c4:ab:f0:57:0c:
                    26:bd:4c:cf:f3:62:38:d7:4d:99:73:fc:0f:8c:34:
                    88:a9:18:b1:99:31:b7:cd:2f:4e:bf:2d:5d:13:89:
                    33:ec:e4:50:4f:47:20:8d:ec:94:ca:2b:6a:a9:28:
                    ca:af:b8:f8:59:be:bf:64:ba:31:e5:99:6f:c7:29:
                    00:d0:c2:7e:86:be:48:4b:fb:d0:1e:6c:55:08:3d:
                    3e:54:d2:f3:8f:19:81:cd:ff:7c:f6:c6:ad:4c:02:
                    44:8e:1d:d2:2b:2e:1e:e3:d0:fc:b3:87:51:d7:05:
                    8e:a6:e5:a8:94:c8:e4:a4:e8:53:cc:c9:04:9e:08:
                    14:db:98:1a:bc:49:d5:03:fa:c0:a8:90:50:4b:67:
                    cc:82:6c:a2:37:8c:f5:50:1f:46:db:23:55:e5:ac:
                    1c:0f:3c:dd:4f:fa:0a:03:aa:9f:39:5f:85:ff:c6:
                    e2:72:6e:b3:79:40:59:de:db:5c:57:ef:80:9f:c5:
                    18:d9:97:4c:6d:f7:34:0d:aa:da:7d:d1:e0:81:df:
                    da:62:c4:23:d1:2b:da:96:6a:14:75:64:cb:49:81:
                    b3:88:32:1a:88:57:8e:21:d2:93:5b:0a:df:9f:6e:
                    50:24:77:3b:f4:a2:25:86:29:d6:a7:b1:7b:be:92:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:20:9E:CC:A0:D0:C9:6B:00:4A:7B:6D:9A:89:B6:FB:00:C1:F3:83
            X509v3 Authority Key Identifier:
                keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:bf:54:0e:be:52:12:74:d3:8b:dd:02:8c:19:02:84:bf:
         5a:fb:6c:48:82:72:6f:c2:5d:8e:5d:dc:1a:8c:20:d8:6b:5d:
         f2:4d:41:f7:35:bb:7b:bc:59:21:69:56:7f:26:c7:94:94:b1:
         73:1e:96:ff:b5:b2:f2:09:0f:ec:ad:e2:de:b1:24:bb:6c:b8:
         2f:30:ff:6d:f8:06:90:ef:ca:b3:9a:46:01:a2:62:42:3e:7e:
         f1:c7:27:b3:c8:c4:7d:dd:15:cd:cb:ef:f9:53:bf:2e:7c:0b:
         05:cb:3f:2b:61:f5:a3:c4:dc:00:f3:d4:c4:eb:5d:52:e8:ca:
         af:52:7f:76:5f:7d:ce:35:39:1f:93:74:32:1e:da:db:8e:33:
         fe:7c:7e:c7:c2:a4:27:f9:eb:e1:d3:37:32:59:a7:25:fb:fc:
         2b:e9:76:1e:75:3e:67:48:9a:18:32:c9:af:55:6e:f0:cc:86:
         a3:41:20:61:c8:b5:01:d2:fa:e2:f1:0f:aa:a6:60:da:7f:39:
         94:ed:f1:a1:57:3e:4f:43:32:ec:ac:07:25:04:4c:b9:ad:e3:
         2e:7e:7c:33:01:e1:d0:1d:dc:1f:9a:1f:ab:4f:2e:ce:14:3f:
         bd:94:45:6b:fb:6b:67:56:b9:54:08:91:5a:c7:05:8f:7a:63:
         3d:ff:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----