Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File:                     VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier:          xkizaMrPwowHdNqO/ecRnfqQNae1cDHvsR4SWBC3MmI=
Subject key identifier:   B1:59:55:FE:3D:DF:28:7F:DE:5B:C1:70:84:A0:A9:87:53:16:FC:F2
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer:       /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial:       01962E98AAAC16BC43347CBD7755F894AB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number:          08BF
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: 6X56KmYRamD548Bd6Y+bnp+WkLlTs88YbwflbpIbUwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:ac:16:bc:43:34:7c:bd:77:55:f8:94:ab:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=b15955fe3ddf287fde5bc17084a0a9875316fcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:40:1b:a9:7c:02:8f:45:1b:18:2f:2e:f6:
                    d6:03:9e:ae:23:19:89:d1:83:b1:f9:2b:0e:56:99:
                    9f:62:a1:a7:77:1d:1f:0e:a3:98:d5:a8:89:88:93:
                    aa:f2:fa:e5:56:f3:9b:87:fe:39:2b:12:43:23:26:
                    e6:e8:bc:87:c2:48:77:a3:1b:ab:8a:79:f3:c7:f5:
                    fb:a2:b7:0c:20:bb:52:20:37:c1:4e:09:d0:51:dd:
                    a9:ea:90:9f:a7:37:79:e7:a7:7b:cc:07:25:c2:41:
                    bd:b2:74:c6:6c:a3:bd:ce:d0:a7:f6:0b:db:a2:2a:
                    51:1f:50:6f:af:f0:25:1b:f2:2d:54:a2:f5:e0:ae:
                    89:82:f2:ce:50:94:4f:d8:92:f8:5c:b1:a8:c9:08:
                    82:25:7f:22:a6:af:f8:a1:a7:07:c4:80:96:aa:67:
                    8b:00:88:ef:73:ed:d5:78:b5:4a:af:54:d4:cb:35:
                    a2:9e:6a:fc:62:69:82:a7:5a:db:de:f2:dd:b5:73:
                    48:fc:87:3a:45:51:20:39:10:bb:3d:c6:38:07:17:
                    4a:d8:b0:ff:56:a1:80:5b:12:28:34:54:96:10:85:
                    b9:10:bd:6b:8c:aa:a4:60:bb:64:ca:43:d1:6d:83:
                    6f:4c:b1:7d:e5:81:f2:79:ed:21:55:ad:ad:f9:9f:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:55:FE:3D:DF:28:7F:DE:5B:C1:70:84:A0:A9:87:53:16:FC:F2
            X509v3 Authority Key Identifier:
                keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7e:09:db:98:00:74:aa:43:0f:fd:72:57:d1:20:2c:43:64:
         02:de:17:7c:47:ef:b2:f5:79:97:66:cb:70:15:3e:7a:dd:35:
         5b:64:fd:a8:ec:70:57:39:dc:b5:ba:c0:1a:67:1e:c7:27:47:
         e3:ab:a0:bf:52:87:69:b9:40:1d:cf:7b:be:ad:b6:53:df:e7:
         2a:d8:16:7a:7b:88:1e:27:fe:82:54:ff:0c:3f:4c:40:7b:71:
         b0:0c:c2:f3:e3:98:a5:9c:f5:e2:0a:34:4b:c6:b5:ee:dd:04:
         2d:90:8e:da:18:d5:e0:cb:58:cc:4e:58:df:c9:94:ab:48:4f:
         00:b3:90:57:7c:23:f3:93:29:6c:4c:30:3e:4e:a0:af:a7:a0:
         5a:67:f5:f9:a3:a4:fa:66:93:4f:c8:63:5f:a8:fb:ae:a2:b6:
         a0:0c:8f:d7:b1:05:fe:ef:64:2b:60:3c:ed:14:dc:6a:55:ad:
         ec:6e:1d:b5:ae:0c:79:b4:fe:dd:2e:b8:e0:bd:89:91:67:fa:
         e8:4c:f9:41:87:95:35:cf:07:43:5d:fc:a6:6a:6b:92:81:f6:
         0b:89:6f:7c:77:82:06:0f:b0:7d:b6:c5:8f:2c:81:85:24:d3:
         ff:f1:25:72:4a:48:a5:b2:ff:02:8a:00:e6:32:52:29:48:9f:
         e4:2c:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----