Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File:                     VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier:          a5NYqG5fBI5rmBdO7LfL1tYWVPeogz9NwTXdrtlopR0=
Subject key identifier:   52:96:88:D0:53:7F:F9:BC:64:50:9B:43:BE:7B:49:3F:6E:36:66:C3
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer:       /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial:       01962E992961E7473EEFA845283E2EE21E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
                          2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: 8GjQQToYQNb/3BkYXL552FzF8ejv9PQo0QAyjcUF3nQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:61:e7:47:3e:ef:a8:45:28:3e:2e:e2:1e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=529688d0537ff9bc64509b43be7b493f6e3666c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:72:3e:73:40:22:3b:42:1d:32:76:74:6a:
                    53:77:c2:47:e7:0a:b2:f3:63:56:8e:96:f8:ac:18:
                    ac:89:a4:8a:f0:73:66:8c:56:3a:42:cf:c4:56:9c:
                    f0:61:c0:28:be:c3:47:0a:f6:d7:ae:2d:a5:86:6a:
                    13:bd:32:3d:d8:ad:39:ca:c8:f2:db:68:59:70:e6:
                    01:3e:5f:17:87:eb:23:4c:61:b3:e3:75:29:de:cd:
                    5d:e2:6a:4c:d1:fa:8f:f5:1b:e0:d8:1e:db:97:8f:
                    e9:6e:aa:02:3d:22:e4:95:1c:06:ed:70:7c:f6:2c:
                    b1:e5:08:7f:7c:76:e2:90:45:9e:b9:90:af:d7:a8:
                    8a:18:5e:2b:ea:77:9a:fd:62:56:7b:5b:51:b8:6b:
                    5e:71:e2:2a:d9:40:64:a4:eb:81:4d:49:83:bd:3e:
                    81:3d:d7:8a:97:63:68:c7:a8:09:d3:39:32:79:c1:
                    9f:f7:7c:7a:42:b0:01:84:8f:f3:79:fe:83:e6:d4:
                    20:e1:62:a8:d1:18:d7:94:eb:27:e2:c3:b8:5d:b0:
                    a1:3f:c1:6e:9c:f3:35:af:76:e6:ef:71:da:7b:16:
                    99:04:c8:57:14:4e:24:1a:f3:e4:36:ab:98:ec:91:
                    a6:6a:6d:ef:2c:5c:95:a8:29:fc:b4:d1:e0:56:fb:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:88:D0:53:7F:F9:BC:64:50:9B:43:BE:7B:49:3F:6E:36:66:C3
            X509v3 Authority Key Identifier:
                keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:10:13:a0:43:f8:46:9a:25:b6:1f:3e:05:03:c2:5e:ed:fe:
         96:8b:51:c0:72:61:5e:8d:92:cc:f4:c5:94:5b:e5:37:be:ff:
         c3:0a:9a:83:0a:fb:0f:7c:0c:9c:18:4f:d8:2a:d7:b7:51:af:
         a1:fe:3a:47:56:ad:6c:f7:fb:bf:9f:a3:73:7f:c2:6d:b1:a8:
         f3:86:1c:b1:1c:8b:b0:5a:26:e5:65:0c:f8:d4:85:cb:de:d1:
         8d:40:3a:c5:8b:9c:6a:65:9f:7f:c8:2f:bf:91:86:7c:de:55:
         e6:88:6f:7e:d7:25:1c:cf:74:6b:d1:a3:6d:a7:32:1f:72:1a:
         46:f7:fd:37:3a:b0:43:65:5f:08:a2:50:39:35:a9:cf:7e:67:
         3f:03:5d:9e:a8:60:6f:e9:4c:00:28:48:96:d1:08:ad:e2:ad:
         9d:61:d2:f8:10:75:5b:c7:d3:16:e0:cd:6f:45:d8:0c:e9:57:
         f7:31:9a:17:06:6c:0b:b9:55:bb:48:0b:4e:70:11:d5:50:bc:
         44:9b:3c:8d:fb:a8:b3:75:cc:d9:c9:1d:dc:9d:b8:0a:dd:b6:
         01:74:06:21:f3:d1:8a:45:dc:71:87:7f:9b:71:9c:09:cf:1f:
         1c:30:e4:35:c0:1c:ec:ea:7a:6c:2f:8e:33:5e:de:7f:95:8b:
         14:5d:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----