Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File:                     vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier:          ZMLPebgCj50J4gOlwpC2Q0zLzT3teBW9+6Qfj/1v3Kc=
Subject key identifier:   89:6B:F0:E5:7D:D2:B3:7A:A0:CA:62:80:A9:95:4D:4B:56:CC:84:AF
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer:       /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial:       01962F065391819C158918861F83737C9774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number:          075A
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: K2i+C56VQeByvJ7T7O0T7Q3tM+SGxqGLx6G4o+NDsmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:53:91:81:9c:15:89:18:86:1f:83:73:7c:97:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=896bf0e57dd2b37aa0ca6280a9954d4b56cc84af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:fa:f2:34:1d:27:03:97:11:b1:d9:35:d3:
                    4d:d0:c5:ff:8e:ea:b2:b5:fc:75:1c:4c:57:48:98:
                    43:df:79:85:d9:ab:ce:c7:7d:60:68:e8:1d:df:81:
                    4d:e3:29:96:f9:25:d8:b8:df:8c:d2:6a:95:e1:06:
                    b2:03:fd:7b:aa:12:71:a3:41:e1:e5:7f:14:b4:ec:
                    18:93:75:30:a6:05:dd:40:4b:17:75:e3:aa:70:e0:
                    5b:25:7d:de:e9:0d:0b:55:6a:ce:17:34:2d:8f:9a:
                    fd:7c:43:00:ce:cb:0c:b7:24:9c:4b:81:37:43:a9:
                    fd:cb:29:b4:79:ed:88:90:06:94:4e:28:75:a3:ba:
                    c5:e6:f2:ce:8f:32:52:15:40:63:00:76:68:67:f6:
                    31:2e:0b:f5:57:af:27:09:0a:d4:41:df:03:e1:e4:
                    f4:89:67:e9:e6:2e:27:94:3c:83:5f:b2:e4:d9:cc:
                    30:04:ac:03:7a:02:66:cf:00:24:a2:c9:0a:a0:69:
                    a4:f0:1a:3d:2c:24:ae:ff:e1:3f:a5:e9:3f:20:3c:
                    e7:89:1c:2a:e7:f4:f9:d9:90:69:7b:9d:03:e8:92:
                    c2:95:6d:4c:46:8b:bc:3f:56:f1:c2:56:e0:f6:1a:
                    ba:6d:25:65:33:58:c3:1e:f2:c1:76:9c:ae:be:cb:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:F0:E5:7D:D2:B3:7A:A0:CA:62:80:A9:95:4D:4B:56:CC:84:AF
            X509v3 Authority Key Identifier:
                keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3c:40:21:1f:4b:f5:7e:f1:c0:6f:87:59:d5:b2:43:54:4e:
         62:4e:b0:fb:c5:83:55:84:69:f3:00:9d:97:ce:9b:8e:ac:9c:
         45:14:7d:d4:20:8d:58:4b:af:db:6b:1f:6c:9f:2b:cb:c1:ef:
         41:a3:a2:c6:ff:07:6e:e7:68:9c:af:a5:62:0e:5e:bb:34:5e:
         d1:8c:5b:e9:9c:4a:23:f0:bd:71:cb:a8:42:b3:b1:64:86:eb:
         65:f0:45:2b:45:ef:4c:28:59:43:28:bf:15:d0:5f:8c:d7:ae:
         74:68:09:d8:90:41:bc:4a:77:c1:b3:c2:13:40:56:ec:a8:36:
         dd:ea:e7:51:b3:8e:2b:4a:f6:86:e1:3f:c4:d9:06:7a:88:a4:
         3f:ee:67:5a:c3:6f:c0:b7:bd:39:9d:7b:fa:80:11:93:99:0a:
         82:c9:6a:cf:95:59:9d:1a:e1:58:a5:1c:2a:38:41:f9:98:ff:
         5a:6b:4c:ce:ac:cb:ca:91:23:f1:6e:de:fc:23:11:14:35:25:
         eb:a0:b4:f6:0b:ea:9e:bd:a5:53:15:2f:d1:84:e1:7c:44:56:
         ef:4b:d9:d1:7d:c6:7c:03:a4:11:45:16:95:87:9e:1b:3a:41:
         ba:cf:99:fe:5e:05:57:73:16:0e:3a:03:18:0d:b7:b0:aa:34:
         85:7c:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----