Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File:                     vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier:          ZfoqmkJvRrk+VCNNksBdy58oQ2tO7oSYwkVrv3dEang=
Subject key identifier:   A1:38:9F:44:22:47:04:47:D6:6C:6F:79:08:87:EC:39:2D:BF:05:53
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer:       /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial:       01962FAB545F3FEF437F8998200DAEEB751D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number:          07B5
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=)
                          2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: QfpWbPY/PPK/ZsOlMesnTX6QyMKb/vNIulQFnSPTApo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:5f:3f:ef:43:7f:89:98:20:0d:ae:eb:75:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=a1389f4422470447d66c6f790887ec392dbf0553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:88:d2:42:f1:be:6c:0f:41:2c:69:b4:d5:
                    73:b2:a4:9f:5a:5e:d4:a3:d4:0b:61:8e:46:62:9d:
                    65:34:d7:e7:1a:e8:14:c9:73:80:55:ab:d7:17:ad:
                    da:aa:37:bb:7b:21:77:05:b5:06:c6:4c:1c:14:71:
                    27:fd:41:bf:b8:c2:b1:ca:d2:46:0e:8c:65:a4:8e:
                    11:fe:18:75:cd:5e:93:a6:bc:2a:6f:89:27:5d:c5:
                    f2:c6:fb:e3:d1:c3:0e:c0:12:7f:6e:9e:bf:b1:4e:
                    c2:65:f8:f0:72:20:25:f2:19:92:e0:15:50:6a:4f:
                    22:8b:ae:36:b0:95:0e:c0:34:35:fd:d1:0d:7b:b0:
                    31:94:c5:0e:43:18:60:2b:94:e8:d9:9b:6f:59:b4:
                    c7:f0:38:11:10:07:10:69:e8:56:05:70:95:0f:d1:
                    fa:ba:76:43:e7:43:c9:e4:2b:89:9d:4f:36:d8:cd:
                    0e:57:4c:50:85:eb:f7:04:78:c4:5f:f7:22:4a:e3:
                    75:04:f1:4e:40:1e:61:96:8e:0f:c5:5b:75:53:ab:
                    fb:0e:08:dc:0f:ae:95:f8:e7:d1:db:60:93:40:57:
                    5a:f8:b5:0a:56:8b:64:fa:c5:88:97:ef:75:eb:0e:
                    b4:4d:c6:c2:4b:d6:a2:54:db:4a:7c:5c:08:d9:46:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:38:9F:44:22:47:04:47:D6:6C:6F:79:08:87:EC:39:2D:BF:05:53
            X509v3 Authority Key Identifier:
                keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:f1:dc:c1:fb:50:0d:18:21:cc:19:eb:5b:d5:2e:54:75:
         4b:ce:ba:f8:68:3a:d9:84:8a:f3:bb:28:35:05:ce:95:38:9c:
         ed:92:3a:e4:6b:e0:be:33:74:42:9f:be:b0:9f:2b:cc:04:73:
         56:e3:9f:d4:69:cd:21:ba:5b:ca:c3:dd:3f:ec:82:32:86:85:
         96:eb:72:6e:1e:7e:51:f5:ab:2c:ec:7c:f4:7d:39:69:53:1b:
         91:2c:74:e4:4c:14:2f:06:13:e5:7e:2d:52:cd:24:b0:06:de:
         10:1e:35:4e:a5:ce:5e:73:64:9b:fc:82:c8:c1:b6:b5:b8:27:
         6b:b1:01:9c:0e:55:a1:0e:e9:c5:97:50:e0:65:c6:91:ad:b3:
         bb:cb:b3:bf:5f:58:b7:28:cc:9d:ab:6f:ce:29:92:fe:ea:32:
         25:3f:87:c7:50:76:69:97:0b:05:88:6f:2a:ee:c1:58:a6:42:
         fb:79:5a:f6:36:4c:ff:d6:1d:ac:94:16:2b:f1:87:d5:b6:d2:
         b8:95:c7:35:08:6e:54:db:ff:c5:39:63:48:2a:2d:05:1a:b7:
         87:2c:1d:ba:87:80:78:7c:3a:f7:a4:08:06:fb:fd:2b:4e:ea:
         97:c5:61:ae:e4:1a:88:ec:61:69:51:7b:c3:05:e0:af:70:40:
         75:86:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----