Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          GSww0pOGjKlChrICupGC51VoZ6MIz3D6XIflER2QY2A=
Subject key identifier:   79:07:A8:F7:3D:4E:66:5E:17:AD:8C:A2:EC:70:97:22:17:F5:71:B5
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       01962F3D6FAB81B2FC9B8D1850051B7FA630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: VX2P8v9Df/b+B7qDDlBlyvcVwBh3oYtqHFEGBbEvhjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:ab:81:b2:fc:9b:8d:18:50:05:1b:7f:a6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=7907a8f73d4e665e17ad8ca2ec70972217f571b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:39:e6:a0:4e:59:64:eb:97:55:45:24:47:
                    1e:d5:f7:13:82:f8:cb:3e:f8:4d:a3:ab:1d:04:62:
                    3e:c9:40:bb:39:da:72:47:be:72:8f:38:63:ce:aa:
                    c9:f3:b5:c0:b5:ac:2d:0e:92:0f:07:1d:b2:2b:0d:
                    0a:2b:a6:d7:3d:cf:41:e8:61:11:68:81:10:0c:17:
                    37:06:89:6e:ac:37:7c:7d:de:a4:1b:29:67:ee:7c:
                    af:ef:ad:7c:f5:89:d1:82:e6:1c:bb:17:2a:57:f6:
                    cd:8e:50:10:7c:44:92:94:c4:3d:14:62:1c:13:ad:
                    11:df:6e:f2:31:14:e2:50:8a:68:8e:e4:42:95:f9:
                    4a:36:38:30:20:32:00:32:3b:d2:16:d7:92:ee:c5:
                    87:f0:12:95:3b:4d:96:60:a8:fd:36:8a:bc:7c:74:
                    df:a7:a6:70:e2:32:8a:cf:ad:6d:e1:78:51:40:e5:
                    38:cc:58:77:2b:4f:5e:66:81:35:4c:2f:5e:b3:e0:
                    82:cd:7e:1f:50:c4:7b:e4:e0:54:c0:55:0c:a6:4d:
                    c2:03:5d:a2:aa:05:fb:be:87:ce:e9:fb:86:d2:74:
                    a6:87:05:86:39:66:46:55:0e:de:0e:f7:2a:21:e0:
                    d4:9f:b4:cc:29:87:74:ac:b7:8b:cc:2c:9c:46:8d:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:A8:F7:3D:4E:66:5E:17:AD:8C:A2:EC:70:97:22:17:F5:71:B5
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:ba:03:72:7e:3e:75:77:92:5a:b5:7f:65:4f:98:b5:ed:
         31:c1:33:c2:5e:9f:ca:0b:64:93:4b:78:21:e4:8a:ee:9b:0d:
         b8:65:e8:a1:9a:d9:20:19:17:f3:5c:d2:c5:be:c3:63:00:65:
         b9:f1:f5:3d:65:6b:cc:e0:71:6e:74:8e:ae:2c:40:5b:f6:da:
         7f:95:3c:71:ce:34:70:ea:9f:8f:4d:a0:cb:53:65:e0:ed:43:
         86:ed:31:f2:c2:a6:f5:9d:60:0b:f2:72:61:09:92:bf:1e:d8:
         84:7b:b0:a9:de:55:91:e9:92:16:fd:ea:fe:5f:81:6d:77:34:
         e9:8a:f8:05:38:93:94:37:4b:14:51:4f:a6:1b:d9:1b:3c:41:
         e2:35:83:56:63:3a:b9:01:24:20:20:da:d4:a9:39:1d:ec:d2:
         6b:33:2b:9b:ce:1e:1e:f4:53:47:72:5a:75:e7:ce:f5:23:f0:
         77:36:90:07:95:59:8f:9d:9f:0f:8b:0a:aa:dc:d5:7d:4e:d3:
         81:58:66:37:22:ad:b9:ab:d4:9b:8a:68:40:29:a4:0c:ee:83:
         d5:50:54:12:eb:f5:ff:0d:fa:09:31:a1:f2:af:e4:77:d6:62:
         0f:f7:1c:3a:81:f7:70:1f:b7:5b:22:fb:14:e8:c9:b9:0f:d6:
         75:06:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----