Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File:                     VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier:          qkesIcoRySxrrtpGTcHp8c3oNha2Pjh5JVgraD3h5Aw=
Subject key identifier:   85:D6:DC:A2:D0:9C:B8:E3:89:2F:EA:A1:5C:AD:DA:4C:96:63:B7:3B
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer:       /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial:       01962F07140400D0DA3F28DA0C7C91DD588D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: te3e0X5Gp4x1D0rBjh/VGUxGyziHU1on5pt9tCpSwD4=)
                          2: wFRK2gFO2y-GioRIpDn5lp85ecQ.roa (hash: A8Q7B434lxyY0QPj8csraRvBG53nBnhwRwO+e87bSWA=)
                          3: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (hash: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:04:00:d0:da:3f:28:da:0c:7c:91:dd:58:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=85d6dca2d09cb8e3892feaa15cadda4c9663b73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:a1:f1:72:91:c3:b1:97:01:63:e2:a3:44:
                    f6:2e:57:bf:cf:63:9f:d8:5a:1a:92:a7:7b:48:af:
                    83:a4:3c:96:41:66:a2:d8:2a:8a:7f:fa:5f:f5:ce:
                    80:84:60:43:e8:83:c1:90:01:18:19:06:29:d2:87:
                    35:7f:a7:1b:05:d8:e7:10:90:fc:c7:1b:57:5f:ea:
                    4f:52:e1:ac:57:ec:2c:c5:2f:08:5b:f2:0e:a2:74:
                    26:0d:8a:20:a6:9d:e5:68:9a:ba:c3:4e:75:97:ed:
                    f7:e2:e8:1c:8b:26:90:49:8f:9e:6a:cc:21:e3:c0:
                    ca:b8:f9:ab:4c:3a:15:66:e2:e2:d6:a1:55:2b:25:
                    a1:63:fd:a5:0d:61:e2:6f:76:69:42:00:0b:af:a5:
                    5a:8a:a1:7f:42:18:21:38:11:8f:7e:6c:d0:f0:0f:
                    60:3c:d9:bd:63:87:9c:f2:ef:f8:d2:0b:de:a9:45:
                    1e:b9:33:0d:70:9c:19:56:22:75:f4:50:15:05:9d:
                    29:a4:a1:ed:c9:8b:98:21:c7:e2:8c:6d:51:ad:cd:
                    8d:e2:5b:9f:f4:51:29:67:ef:e7:e9:03:0b:b8:fe:
                    86:ae:8d:3e:60:2d:c7:ee:ee:64:f8:94:01:54:09:
                    fc:58:1c:51:ca:a5:bd:0f:67:be:2c:89:73:a8:4a:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:DC:A2:D0:9C:B8:E3:89:2F:EA:A1:5C:AD:DA:4C:96:63:B7:3B
            X509v3 Authority Key Identifier:
                keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:08:92:3d:96:cc:9a:c8:85:35:e1:ff:67:5d:02:2d:19:
         6a:f1:82:37:d3:a4:a4:52:72:b7:11:97:27:a5:74:65:cc:96:
         2d:aa:98:0f:00:1d:6d:54:1d:ff:b6:61:65:87:2e:e6:67:47:
         ab:26:08:f5:27:f0:ae:73:cd:71:e5:43:9a:43:a1:bf:14:2e:
         d8:36:6f:f1:68:74:3f:d4:33:f3:44:93:13:3c:b6:3e:c9:c7:
         1f:67:1d:44:e2:3b:57:8e:e6:48:3c:d0:a6:a1:bc:51:b3:9a:
         32:b1:f5:e2:57:13:ad:30:65:42:fa:26:fa:c2:0a:f8:05:e5:
         0c:82:94:59:68:1e:71:a2:bd:b1:71:34:c7:f1:74:24:45:d5:
         58:d9:4f:ba:a3:66:56:63:c7:28:2e:35:4e:34:0c:26:e5:4b:
         29:48:3c:49:27:0e:80:f5:89:b5:31:83:4b:1d:50:4a:c9:be:
         c2:d7:25:2f:65:90:c0:de:e3:97:80:d9:35:ce:95:8e:a1:16:
         0a:f4:b1:3e:0f:4e:fc:00:09:07:33:e2:2a:f1:5d:e8:22:ea:
         59:fb:8e:5c:66:e1:fb:f7:17:b7:1c:d8:3b:b6:bc:b1:d9:27:
         3b:16:25:06:d4:81:cb:18:80:87:74:25:90:79:45:e3:2d:ba:
         75:4c:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----