Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File:                     VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier:          7ShyqdG9H9AE2LQH6JOhkyEoz1LmqAqHpJSjKMD7Bh0=
Subject key identifier:   A0:C5:FE:45:57:DF:71:F3:CA:D0:E1:CC:98:86:1A:19:A1:50:D6:BD
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       01962FAB23A2077DF3DC73D265A7B5F59B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number:          1286
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
                          2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: L4jtQmfK4v+sWd6QMCjDU8D5qK2FfMo2zrg4qds4zZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:a2:07:7d:f3:dc:73:d2:65:a7:b5:f5:9b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=a0c5fe4557df71f3cad0e1cc98861a19a150d6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:74:47:b9:ed:59:13:12:44:48:67:df:4b:
                    ad:c2:a9:22:42:30:5d:78:7a:f9:cc:11:c9:81:3e:
                    b3:27:4d:73:66:c7:e7:7d:9b:a1:b6:6b:30:b4:7d:
                    81:c8:29:e4:1d:e4:5a:43:a8:f2:aa:8e:34:aa:90:
                    e1:0e:88:d6:a3:07:eb:ae:72:c0:64:03:2a:9e:bf:
                    37:31:61:91:50:41:00:81:44:d1:95:d9:7e:44:d1:
                    bc:5b:69:dc:2f:43:1b:23:19:07:5f:45:60:10:9d:
                    91:c7:90:a9:5f:28:c0:95:8d:70:18:e7:68:f8:82:
                    f8:df:00:5f:15:37:8a:35:00:c2:80:21:20:ee:73:
                    1c:9a:1c:f8:d7:4f:14:5c:6c:e3:ef:02:39:f7:83:
                    15:9d:d4:d7:d7:46:4a:33:5d:77:f6:a8:65:b3:74:
                    ea:d7:d8:88:a1:3d:15:12:9e:91:13:a5:a2:1d:16:
                    11:e4:2d:a3:47:40:0e:66:ac:32:0b:04:f2:fc:47:
                    2d:7c:0c:54:30:2d:0f:97:d9:0c:2b:0a:73:e6:10:
                    6e:84:12:ed:f7:f5:02:eb:10:e7:59:fd:53:b1:f6:
                    f0:92:d6:7f:d6:5e:4c:a2:af:b1:8b:8c:15:96:2d:
                    69:0b:90:ac:17:03:c9:8d:d9:d6:20:61:e5:e7:f8:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:FE:45:57:DF:71:F3:CA:D0:E1:CC:98:86:1A:19:A1:50:D6:BD
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:b6:9f:92:df:49:46:0b:e8:ac:ca:d2:26:d6:51:fb:b0:
         6a:bd:0e:8a:9e:a9:b7:0d:a7:65:ff:c0:5b:e9:42:b2:cc:4a:
         c1:4c:b8:46:6e:e5:a8:e4:5d:1a:11:38:f1:37:e8:50:a5:14:
         25:41:8d:26:9f:df:a3:8d:4a:8e:8c:14:bb:01:a3:a9:19:14:
         e5:7e:d3:d5:db:33:4c:fc:05:be:2b:46:ff:3f:cd:62:59:fd:
         09:ba:c5:09:34:9f:99:29:4b:30:63:26:01:fb:fd:a9:6d:18:
         be:e0:9d:da:ba:10:ab:e6:fc:75:79:4b:5e:c6:1b:5f:e9:75:
         26:1f:84:74:6f:97:e2:bd:0d:45:fb:3f:68:53:8e:51:fa:38:
         e3:de:e9:2c:d8:76:76:f0:e9:93:28:fb:e4:fb:a1:a8:4f:00:
         7a:27:84:97:60:13:d5:bd:1b:96:6e:ae:05:0b:e1:45:96:8c:
         ed:f0:8f:22:87:a7:4a:24:d6:0b:84:d4:81:d3:03:be:de:64:
         cd:30:68:27:31:4a:cc:19:10:f3:ec:9b:e2:7f:2e:32:8b:ae:
         de:e8:65:d8:05:63:80:b3:2b:52:6d:84:90:20:d6:19:41:a2:
         52:20:04:b9:d3:1f:84:6e:10:fe:25:5a:c0:d4:d9:35:53:cb:
         93:ae:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----