Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File:                     V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier:          G6rXwDpgURJbs14XD+ZmbTOroCQaVm3abXmBNEFtdWc=
Subject key identifier:   DA:82:6F:C3:5C:26:7C:B4:E9:5D:CD:AE:64:A9:68:B7:2B:AF:52:EB
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer:       /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial:       01962E985EAC06AFFE2FE8524C045F5F0F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number:          0652
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa (hash: jU7eitkasCXaSHRJrOwhJr50g3LZ5XZllbkxukDWdO0=)
                          2: SW4Yp7z-czq3Wyk3SkqgTnWrKpk.roa (hash: YmIRklQ+efQc+b8RqPf+ZXpsg1COSPp4Bv5KKeWEZK8=)
                          3: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: 5avUWMvEfiO/6t8hgSh+1NuWi1ssVt1n8FAtq6Rq0VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:ac:06:af:fe:2f:e8:52:4c:04:5f:5f:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=da826fc35c267cb4e95dcdae64a968b72baf52eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:be:6d:67:34:ac:f9:59:3d:37:c9:99:ef:
                    d3:3a:a9:cc:8b:c8:f2:92:6f:12:ad:4d:a7:d1:c1:
                    ff:16:95:db:d5:04:d3:87:c4:92:31:b2:59:16:c3:
                    e2:89:b4:78:1c:5e:64:25:da:e1:09:3d:8d:f8:8c:
                    0b:29:8d:76:37:95:1c:5f:74:2f:f1:a9:bd:56:5b:
                    97:90:c5:5c:81:b0:a5:d6:44:20:c9:8a:bb:89:4d:
                    72:17:5f:7d:66:ee:e6:3c:b0:00:b9:dd:bc:cc:6b:
                    7e:a0:c8:a0:ef:cd:0f:c3:ec:5e:ef:44:f2:1c:af:
                    2e:da:65:37:51:08:de:dc:2c:df:fe:78:4e:cb:27:
                    60:fc:a7:8a:6e:a0:7d:62:e6:b7:39:fe:d0:81:ce:
                    00:0a:fe:1a:2c:67:ab:ea:e5:e1:79:ac:2c:87:dd:
                    46:b9:e5:53:45:af:6f:49:1b:83:73:3a:c3:6b:65:
                    0a:e3:2f:0b:90:48:f6:d0:01:3e:07:89:35:f0:32:
                    db:30:64:2f:21:9a:8a:3a:33:f6:70:65:2a:f3:11:
                    d6:4a:81:f8:8f:47:4a:69:4e:92:48:df:75:af:39:
                    ff:09:46:55:4d:ab:7f:80:64:9c:eb:bd:07:f4:ce:
                    5b:d2:0a:20:23:32:d7:e0:2b:4f:88:ae:73:33:96:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:82:6F:C3:5C:26:7C:B4:E9:5D:CD:AE:64:A9:68:B7:2B:AF:52:EB
            X509v3 Authority Key Identifier:
                keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:98:15:8a:4d:59:c0:45:c1:e0:b0:d1:df:19:8f:96:f7:a2:
         cd:96:a9:43:38:d6:d8:8e:a9:fa:f4:91:31:1c:02:f3:bf:52:
         65:a4:24:05:4d:25:1b:5a:bb:13:1d:78:7e:e5:9b:91:48:41:
         cc:38:de:8e:d1:f2:50:a4:57:d1:e9:b3:4a:c2:3e:90:27:6d:
         fa:8d:fe:a4:27:86:01:4e:ac:52:d4:42:e8:b0:77:53:e4:64:
         7e:7d:4e:57:dc:1e:f0:24:46:49:cd:12:f3:86:17:ab:22:5d:
         52:21:26:c5:39:57:e9:c8:ce:54:9e:c3:d6:18:63:30:a4:0b:
         e1:a5:a5:11:e1:6e:d1:2b:2a:73:f7:a2:cc:98:50:14:f3:3b:
         7a:81:4c:87:75:58:d7:29:b7:12:5e:4a:95:ed:26:af:c4:24:
         a6:a1:29:9e:e2:f6:93:f4:ff:11:d9:b7:14:bd:b6:98:d9:d4:
         36:c1:9e:1f:26:62:da:f7:33:e8:a5:6d:42:6c:50:87:5e:af:
         ce:a4:35:16:6c:20:60:2b:68:65:29:1e:db:88:4e:57:32:4a:
         6a:13:fb:6d:b0:82:15:b3:2d:b6:90:79:15:05:d6:db:10:2a:
         b9:7b:9c:49:c8:46:91:58:22:f9:b8:8e:e4:bb:b7:9d:73:2d:
         06:10:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----