Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File:                     VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier:          xGdWDJVtYOEycMrFpE5zedeRKNv3GVJLpPwYe2nIGOs=
Subject key identifier:   94:50:F3:01:3B:AE:B0:AC:03:75:B3:1E:76:41:C1:8B:43:FC:CF:DC
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer:       /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial:       01962E2AE9D1E4BA898996B066D079ED7CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number:          140E
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: GHjwnLUndLphHCJPh-qrOX8_zps.roa (hash: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=)
                          2: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: s/98Ah/wEuVQND/4ZHvWavnDmrc1BaH7dJE3PawUAcc=)
                          3: tETzO1WerN9XM0MbH4COFqJ-OWo.roa (hash: y21oQ2aG3xnQO+GigZS6AAK4pbDTVrSSICJ8rd50iXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:d1:e4:ba:89:89:96:b0:66:d0:79:ed:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=9450f3013baeb0ac0375b31e7641c18b43fccfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:27:10:73:dc:96:fd:65:67:22:15:fd:e5:
                    30:5f:13:60:6e:8e:53:7f:1d:81:c1:24:29:5c:46:
                    26:3f:84:74:5e:da:49:d9:ee:8c:3b:a9:28:ca:f2:
                    5c:a7:26:04:2b:21:fe:5a:6e:47:9a:5d:46:39:27:
                    b2:89:4f:91:9a:2e:cf:80:b8:0f:55:f9:4b:3d:c3:
                    75:9f:31:97:69:1b:4c:1a:14:2a:de:45:47:6d:d0:
                    2d:19:04:0f:d3:a7:14:c4:92:da:24:94:1d:30:8c:
                    9a:17:20:b2:e6:08:64:b1:49:83:09:7f:13:22:57:
                    97:29:9a:f8:45:0f:60:3e:83:9e:01:6c:5b:79:6c:
                    c3:9d:fc:dd:2b:0e:bd:f7:a6:86:05:be:98:b8:76:
                    09:9d:30:42:4e:f5:ab:79:ae:ed:c5:4a:99:ab:5e:
                    9e:69:a0:1f:e2:8e:6b:ad:32:5d:12:2e:bf:43:d7:
                    b0:2d:64:a8:99:27:75:64:31:f3:64:fd:39:1e:6c:
                    db:50:e4:00:6a:61:03:a5:1c:53:90:68:a5:da:59:
                    f0:fe:f1:c2:8a:34:0c:aa:27:62:5c:fb:dc:28:00:
                    36:3e:eb:45:7a:d1:c9:7b:c5:b9:93:90:6f:38:50:
                    ca:14:75:99:c2:c8:cc:c9:aa:22:83:37:c5:7b:e9:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:F3:01:3B:AE:B0:AC:03:75:B3:1E:76:41:C1:8B:43:FC:CF:DC
            X509v3 Authority Key Identifier:
                keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:ee:8b:50:5a:08:cb:fb:8a:1e:31:38:72:05:ea:0b:b5:
         bc:3b:24:7a:fa:50:3d:27:af:45:33:e4:f8:70:06:bf:f5:c1:
         54:f4:bc:fd:87:a1:ae:75:d5:10:69:eb:52:78:5a:ec:3b:19:
         3a:f3:b8:e5:74:40:5c:35:b9:44:b0:cb:3c:05:59:33:71:8c:
         cc:19:5b:0d:ca:48:09:d0:6c:f8:c0:d4:b6:28:e9:75:49:2a:
         8f:77:db:ce:08:c1:49:79:97:50:cc:fa:75:6d:0c:43:3d:87:
         4f:77:d8:c4:0f:e9:bd:e6:72:bc:8a:ab:49:b2:1d:0f:7c:41:
         de:7a:0f:13:27:ba:b7:4d:e1:07:00:be:f6:08:7d:49:df:3d:
         ec:54:27:27:12:7c:1a:48:a2:30:a9:98:39:c2:1b:ac:e3:7c:
         cd:7e:ad:bb:36:79:4b:5a:ea:b5:f8:98:c5:d0:bf:39:21:0b:
         e2:67:36:a1:bf:8d:5e:0f:a9:20:6b:09:92:6a:01:89:eb:bf:
         6c:8e:46:ac:eb:f0:91:d9:02:03:58:ae:96:f3:a8:d2:7b:ec:
         6c:29:99:02:a9:a2:9c:a4:f8:02:44:11:39:c7:ab:67:96:61:
         9f:e6:de:0b:36:5a:d6:3f:fa:9c:a4:39:f3:bf:c9:a7:52:48:
         b0:e2:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----