Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File:                     vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier:          X7j2U95vFuL5V+TpJhUjzzMiYCzgNY064d0+UXvgmBs=
Subject key identifier:   EC:37:C1:6F:CA:90:1B:EB:CE:5A:B3:9E:B6:90:49:07:3F:F1:71:51
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer:       /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial:       01962FAB410E308F394DF91E4A9D14519B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: paMGJN73rjp1fa_w9RA1xrwwx18.roa (hash: Z6fxiaAqnra9zk/dGdgt7claLY2U/7DrFceSHabOI5E=)
                          2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: 3BrW0/jRC5Zic/A33ywohhfPDzOCh4cNm3D81Yl5SvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:0e:30:8f:39:4d:f9:1e:4a:9d:14:51:9b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be370733b8db614daa760a002c24048028300e2d
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=ec37c16fca901bebce5ab39eb69049073ff17151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:92:6e:d8:3d:61:0f:3d:22:16:25:17:96:
                    59:4e:8f:9a:24:07:ce:7b:cf:d3:8c:d4:60:e2:5b:
                    8f:5b:19:95:9b:d8:fa:5b:29:24:7e:de:6f:c8:ea:
                    ed:76:6a:a7:4b:03:84:c1:a0:96:65:bf:cd:db:b8:
                    66:4a:77:18:72:2e:fc:b5:09:a0:82:5d:e8:4c:e6:
                    4f:6a:06:a3:a1:69:ca:0e:ca:c4:55:60:92:56:a1:
                    b5:cb:d5:fb:9f:64:17:3d:af:d5:c3:5e:ad:85:f6:
                    8c:c1:11:62:0e:b9:31:a1:1b:49:f7:c2:16:8d:f1:
                    bb:ca:b9:89:f8:40:1c:49:3a:02:d7:77:ed:2f:e1:
                    21:57:76:cf:d0:1b:91:d4:ec:2c:7d:a4:83:c5:99:
                    6f:2f:cf:f6:1e:3b:0b:3c:f3:ef:a6:f1:e1:31:43:
                    97:4b:86:9e:b0:36:46:50:fa:67:52:9e:98:12:49:
                    14:08:0e:18:f4:0f:f1:fe:b0:3e:06:2d:e3:8c:00:
                    c0:89:9e:b3:77:9c:a1:b6:7e:4b:cc:7a:58:df:c4:
                    53:01:7e:73:29:ce:0f:56:d2:3c:51:33:d9:37:42:
                    08:08:89:3a:77:a6:b9:e6:92:8b:4a:1b:b8:33:c7:
                    92:b1:68:a5:ba:27:50:b6:29:ef:ce:63:d0:2f:ec:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:C1:6F:CA:90:1B:EB:CE:5A:B3:9E:B6:90:49:07:3F:F1:71:51
            X509v3 Authority Key Identifier:
                keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:8e:b3:1a:f9:b3:78:3b:56:57:e0:a3:5c:34:95:4c:5a:
         cd:a7:d7:8b:a0:33:42:93:02:fc:a4:e9:19:3c:02:17:9a:4c:
         63:9f:d1:6a:be:5f:de:06:eb:93:14:85:0d:7e:9a:c6:5e:0a:
         9d:b5:5d:bd:15:07:97:9e:9c:2f:c6:18:a8:9b:14:d8:b1:95:
         11:db:87:96:77:31:c7:7e:3c:cb:6d:8c:3e:6e:f1:3f:a1:9e:
         02:f2:40:cc:9b:d9:b3:2c:97:f7:1d:a3:38:94:b6:b9:ce:4a:
         6b:44:22:7a:2b:2f:e5:d1:ae:a1:01:ad:23:4c:e6:e6:48:b7:
         76:0c:64:14:9a:9d:d5:fb:44:1d:99:ef:1b:b5:f3:67:47:10:
         c2:83:77:c3:14:34:ed:f4:74:83:92:34:fd:69:90:70:ee:d8:
         d3:bb:fa:91:9b:f2:5e:10:dc:15:7c:69:de:11:91:94:bc:d9:
         ec:31:93:47:44:95:a7:cc:1b:47:d8:7c:0f:e8:e1:5d:cb:31:
         89:b9:fa:b3:16:f1:91:71:a6:3d:a2:52:51:8f:c5:93:b9:b7:
         9a:4e:b8:c3:a5:7f:85:ee:59:88:9a:0d:50:51:50:67:66:67:
         67:26:69:74:52:6b:c9:e7:ab:f3:4d:8b:20:17:4a:ed:ad:c9:
         6c:12:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----