Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File:                     vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier:          WlZ85s8BcQL+7xh2ldzIRiZX9lXIRF+1pT92wjyoQ2Q=
Subject key identifier:   D2:61:D7:E0:57:48:65:7A:1F:78:F9:BA:DE:6E:96:DE:E5:53:09:B7
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer:       /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial:       01962FAB500AC411BFC6C66B8D767FBA948D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number:          107D
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
                          2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: zLnBJrWrpAKVElTfqvc2ezmngmDCmJRVzdmnlzeFgtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:0a:c4:11:bf:c6:c6:6b:8d:76:7f:ba:94:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=d261d7e05748657a1f78f9bade6e96dee55309b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:93:7b:d6:07:9d:52:27:02:59:b0:e8:4e:
                    6c:56:48:62:f8:3c:ff:dd:1d:79:20:04:c0:0e:b4:
                    dc:5a:1a:67:5b:a7:18:3c:8e:8e:67:2f:21:4c:ff:
                    f7:0f:3e:28:fa:da:22:84:4b:33:3e:d5:1a:9c:5e:
                    8a:65:2e:b9:02:13:84:66:02:b0:46:ce:30:e5:6d:
                    62:1d:1a:97:68:30:61:c7:9b:fd:d3:41:eb:a7:b9:
                    ab:a0:2e:1d:31:85:98:7f:78:93:6a:b8:ce:e0:25:
                    e2:5a:45:a8:34:1c:25:5b:df:d1:f4:9d:71:36:b7:
                    e5:04:a0:eb:d5:38:a2:81:90:c2:29:1e:f0:19:4f:
                    26:3e:15:39:0d:e7:d2:ca:00:b3:1c:6a:89:30:90:
                    c3:1a:bb:30:cf:81:85:33:fd:d8:97:37:4b:c1:ad:
                    e9:af:63:49:31:ee:f1:a7:f0:d0:dc:39:8f:14:00:
                    3b:cd:4c:0d:48:c5:00:ff:bd:70:54:98:a0:77:37:
                    82:ef:b3:22:0f:b1:06:36:25:a6:c1:a0:23:86:d6:
                    a5:7d:00:8b:e3:cc:14:31:70:23:8f:9c:63:15:25:
                    fd:1d:9d:cf:0f:c7:0d:f6:90:9c:a2:5d:86:ac:24:
                    c1:a6:f9:3d:68:19:e1:ee:ee:cb:2d:f8:22:92:51:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:D7:E0:57:48:65:7A:1F:78:F9:BA:DE:6E:96:DE:E5:53:09:B7
            X509v3 Authority Key Identifier:
                keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:2f:96:36:73:85:29:67:e7:48:bf:25:94:d5:41:48:56:
         6c:44:90:ec:d5:7c:67:36:b9:6f:2a:0a:41:8f:de:cd:ce:eb:
         e1:be:1f:7b:cd:ac:74:f1:fc:8d:ac:9e:44:b9:bc:b6:84:4c:
         52:f5:a1:58:2f:49:ea:51:c9:95:bf:9a:10:cd:d6:65:a9:64:
         01:56:f5:52:48:96:89:1c:16:47:d4:e3:b2:d1:12:39:6c:f8:
         2d:05:ae:49:ce:55:c5:7e:86:e3:2a:db:37:f8:e8:c9:81:70:
         5e:11:ac:ee:bb:5e:77:a7:32:31:b9:db:3f:b3:36:2a:56:78:
         55:64:82:f1:42:13:51:bb:a5:18:79:d6:46:d1:a2:bf:4e:e7:
         89:58:67:9f:d5:b8:a2:0a:00:c4:fe:75:40:c5:7d:46:6c:79:
         96:9a:67:f8:d0:92:2d:51:94:69:80:28:28:5a:4c:bf:31:f5:
         b5:21:40:d7:12:ca:b7:d3:44:a8:8d:e8:06:ca:24:a8:19:ef:
         90:7d:48:69:59:3f:f4:a4:11:fa:c8:d8:ec:55:81:90:a2:58:
         48:b4:37:96:a2:ee:4f:33:a7:9a:fc:8c:a4:f8:8b:bd:7e:8f:
         38:3e:05:0a:7e:c4:61:b5:a5:00:f6:c4:79:23:c4:41:4f:58:
         a9:dc:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----