Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File:                     vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier:          YK3hZm2dqbI2T0fZdwm8BDrf1A1q3QiLbNTzGAH6a9c=
Subject key identifier:   A1:25:2C:2B:55:E0:EE:CB:4E:DB:AE:C4:25:97:20:D2:C0:7E:48:E3
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer:       /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial:       01962ECF8A9664DC8CA2193135B62FD431B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number:          0EA3
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
                          2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: 00nqUaDKSEstxCNPeRDXbTFu20a9ADxOD0IyWL4m0+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8a:96:64:dc:8c:a2:19:31:35:b6:2f:d4:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=a1252c2b55e0eecb4edbaec4259720d2c07e48e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:44:78:0f:64:92:54:86:43:12:0f:8f:8d:2e:
                    2d:51:c6:7b:d9:f4:1c:07:24:96:df:cc:2f:57:58:
                    b4:a4:a8:e4:f7:89:dc:fe:25:9f:7d:f0:4c:7e:cd:
                    8d:dd:9f:28:14:c9:9e:51:4d:09:48:12:59:8c:f0:
                    cc:ec:ea:3f:ab:0f:a4:70:08:72:2a:57:96:59:d9:
                    4c:6b:c9:77:7b:4d:bf:1a:7d:e5:5e:78:97:bf:c1:
                    6f:63:72:d6:fc:ac:28:20:27:d2:1d:5f:e6:57:a3:
                    9c:6d:e6:3f:2d:77:1a:86:03:83:9e:74:74:2e:94:
                    c6:c5:44:75:86:a1:6c:11:5f:f5:1d:58:6f:74:76:
                    7c:26:55:f1:c5:84:f0:86:74:54:ad:e3:4d:47:4b:
                    f0:a6:29:a7:8d:32:75:38:52:43:86:83:f1:58:e4:
                    e6:78:34:1a:9d:f5:8f:eb:51:1b:18:26:97:3a:3f:
                    6e:c8:1b:f6:fe:45:1c:ee:e9:bb:09:57:f6:7b:e1:
                    37:46:e8:67:ec:98:5b:ad:82:60:11:f1:ab:5e:5d:
                    54:d3:6b:ef:c0:c6:d4:20:fe:76:52:f0:ae:cd:cd:
                    fe:db:19:c0:ae:1b:97:5d:bc:22:c2:8d:9c:42:a5:
                    35:5d:1e:10:94:ba:0d:f1:0c:7e:a0:f7:dc:aa:6b:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:2C:2B:55:E0:EE:CB:4E:DB:AE:C4:25:97:20:D2:C0:7E:48:E3
            X509v3 Authority Key Identifier:
                keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:91:64:b2:5c:53:0e:28:cf:4f:0f:17:b8:03:e9:52:57:86:
         12:43:15:bb:60:22:59:6f:66:fd:d9:f2:cf:a6:cb:87:e9:2b:
         54:be:50:3f:7d:85:b2:4f:46:1e:45:84:08:75:9c:d1:cd:1e:
         a3:18:fd:4f:76:c0:5a:98:5e:e9:f2:1b:0e:50:a3:22:06:7d:
         ae:11:0d:4f:f1:aa:2f:57:1b:5e:f9:ca:df:3b:46:19:a9:1e:
         cf:3c:39:21:6d:bf:6e:e9:75:78:3c:ec:f8:7b:42:0b:69:75:
         3f:50:4a:e8:6a:43:34:bc:55:b0:a8:74:59:dc:52:be:c9:45:
         60:b6:ae:76:96:97:6e:2b:21:a4:cf:77:72:37:6d:0f:6f:41:
         6c:a2:16:17:ba:ab:91:85:7a:7f:bb:26:b8:78:6f:a9:73:0f:
         34:99:ad:59:7e:48:c7:33:08:1d:99:df:20:12:b9:b7:5e:b9:
         05:8e:3a:23:b3:41:c2:50:75:9f:99:f1:d3:3c:a8:aa:58:38:
         ce:b2:06:6b:54:c5:06:a4:fe:48:0b:d7:ae:4d:4a:53:73:e3:
         27:85:4e:9d:27:70:57:bb:a2:e1:55:96:09:93:17:41:0b:b1:
         37:13:1a:4a:c0:07:ff:63:21:93:8d:dc:10:92:a1:b7:e5:48:
         8a:73:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----