Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File:                     vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier:          GS1IItxuWyjiGomo8EHFkFNv7W+QCh8ruLin9cCGrV8=
Subject key identifier:   FC:E5:1B:EB:7A:23:3E:31:5B:7F:B9:16:27:A4:DE:E6:0C:6D:B9:90
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer:       /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial:       01962E98B9DAB3609E8D6A42545FBC9D2EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
                          2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: 69p0OPFcsTqNUOBgNc+ngDJMzeQGiX2cv095T1iE9EM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b9:da:b3:60:9e:8d:6a:42:54:5f:bc:9d:2e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=fce51beb7a233e315b7fb91627a4dee60c6db990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:de:a3:1a:1e:41:6c:ea:4e:6e:c2:4d:66:
                    62:7c:73:14:1a:22:dd:47:d7:60:6f:4b:77:60:4b:
                    05:62:da:8c:44:0a:03:43:e8:7e:6f:b7:d7:a8:6b:
                    fc:5d:72:55:9f:52:72:d6:a4:54:4d:b1:51:42:be:
                    02:3e:74:37:76:df:f0:13:27:e8:e2:68:ec:ac:fa:
                    9e:39:c4:71:da:32:c6:c3:46:57:b5:c3:10:ce:12:
                    14:3a:28:51:b3:17:76:a0:8a:51:1e:09:87:2b:05:
                    1b:23:af:7a:e3:85:0e:17:f1:ea:4e:41:9f:89:86:
                    29:1a:14:40:f9:33:e0:c5:a0:2e:8b:0a:bf:e3:de:
                    f2:4d:37:b5:88:b7:cd:41:21:04:0e:af:af:c9:47:
                    ac:86:d7:92:2c:bd:65:29:1b:cf:48:7d:15:3d:83:
                    bb:90:b1:5f:eb:7f:6a:f8:46:48:fe:92:c9:3c:d0:
                    7e:84:0f:8b:8d:79:16:af:56:1b:c9:6a:9f:aa:64:
                    8b:9b:50:8b:65:6f:21:ba:67:51:91:35:13:49:e9:
                    4e:07:7f:3a:c0:c6:6c:7f:69:d1:a7:cb:c9:30:4b:
                    9d:1c:a0:42:ed:dd:ce:6c:e2:10:85:fb:f6:12:94:
                    c6:98:4f:9f:b0:05:33:1d:77:68:ea:f2:ba:a5:76:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E5:1B:EB:7A:23:3E:31:5B:7F:B9:16:27:A4:DE:E6:0C:6D:B9:90
            X509v3 Authority Key Identifier:
                keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:92:8a:29:27:ef:b1:fd:c4:46:5e:47:02:54:c8:cb:ba:
         64:d3:7d:4c:19:cc:2e:8a:04:41:5b:fe:1a:0d:01:92:a6:29:
         bc:62:80:39:cc:83:25:20:f4:a0:12:9d:73:73:31:44:71:ae:
         db:ac:f5:04:87:a4:82:5b:85:cf:fb:04:63:37:55:00:1e:60:
         c3:68:fa:c6:f3:9e:e0:e2:0f:3b:2f:e5:41:57:19:2e:af:01:
         c9:c8:3f:84:de:23:ea:4c:10:8d:e9:7d:d7:9b:38:98:fb:34:
         53:40:7c:cd:b7:8f:2a:71:9b:c1:a9:33:d6:49:b3:8d:e7:70:
         85:0e:d2:6c:e3:92:9a:6d:d6:01:0f:88:48:f5:1c:e8:64:b1:
         8e:a7:76:13:67:da:87:96:a9:ab:f7:67:d7:5e:e5:30:87:32:
         21:c1:7c:b3:77:09:7a:74:40:bf:04:d6:8e:dd:69:63:03:2a:
         9a:5e:33:4d:91:52:de:4c:7a:07:26:b5:22:9e:23:0c:c3:4f:
         c6:a3:21:ca:e1:b1:99:31:76:75:c6:fa:7c:00:ad:bb:ba:06:
         5d:fe:0a:31:a8:d3:01:03:93:70:da:55:77:b7:8d:b5:31:56:
         7d:1e:f0:26:d0:bf:a1:95:5c:ad:de:56:57:32:57:5c:ce:8e:
         d2:69:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----