Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File:                     vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier:          gYlOXxj/4KWgJ2PL9jX2Gp6TN23mNs5tCqCaQvYfdSA=
Subject key identifier:   15:19:E9:9C:A9:60:1E:41:6C:0F:05:48:94:00:4A:B9:28:31:C1:66
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer:       /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial:       01962F0688595CDA2B59FFCF1F1D048E783D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number:          0732
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
                          2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
                          3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: tznM3RlynJVoYizrdrNvY7mIBga5hL2oOPzT7AaKKIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:88:59:5c:da:2b:59:ff:cf:1f:1d:04:8e:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=1519e99ca9601e416c0f054894004ab92831c166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:7f:c6:bd:0c:ad:8a:b1:0d:5b:4a:08:d2:
                    92:17:10:25:b9:af:55:bb:60:a3:d7:86:38:93:60:
                    65:2b:21:77:35:5a:05:e5:e0:8e:e8:88:ef:69:fb:
                    9b:32:bb:f5:7c:be:14:64:32:0e:a2:82:42:c6:9a:
                    00:56:de:b3:f6:49:fe:14:15:b5:01:ff:48:7b:f6:
                    4b:40:fb:b9:04:01:70:e4:4a:f9:6a:d3:ca:24:c0:
                    d7:05:25:7d:ff:06:34:b8:80:be:92:51:32:55:ed:
                    a1:58:52:9c:06:ac:b2:f4:8c:db:74:eb:79:54:e4:
                    ea:94:1d:73:16:fb:1f:d5:48:f0:d6:59:f3:ef:aa:
                    26:ae:eb:c2:04:26:c5:2d:3e:da:0a:9b:b5:b5:79:
                    89:17:46:7a:55:15:8b:06:35:ad:33:fc:cd:81:bd:
                    aa:d1:a5:ec:88:f5:fd:28:6a:c8:52:c2:f6:43:1c:
                    5b:f0:ed:9a:f0:e2:68:fa:e6:ce:45:d2:90:a5:f9:
                    da:fa:d5:75:d5:80:72:e8:44:41:e4:f7:cc:bc:de:
                    f4:37:1a:10:a3:4f:ff:d5:2a:b7:b5:1c:01:38:23:
                    1f:6d:9d:7c:8d:3e:26:51:67:aa:12:a2:be:28:77:
                    a3:f6:7a:ff:09:b1:36:71:7c:6d:c7:0e:7c:e5:47:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:E9:9C:A9:60:1E:41:6C:0F:05:48:94:00:4A:B9:28:31:C1:66
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:51:13:da:24:14:35:c7:94:ec:2e:98:da:b5:61:ac:7a:
         12:78:93:71:df:ba:fd:be:3c:d5:83:1a:fa:d6:9a:e8:91:0e:
         37:75:d8:1f:f2:95:47:cb:3f:87:86:99:e0:d8:56:50:bd:6c:
         9c:5e:a1:ca:e0:df:28:81:42:a9:1d:aa:7d:02:de:c8:b0:19:
         6b:96:cc:07:fb:50:35:22:b5:4b:97:4d:3d:be:90:14:b2:8a:
         ec:0e:7a:29:1e:82:8b:c6:c9:a3:0c:e2:9b:1c:42:87:21:7a:
         e1:98:1a:ea:2a:89:5f:56:61:45:40:a4:06:d2:1f:a8:1d:d9:
         ef:fe:94:f4:a1:53:86:a6:3f:95:64:3b:68:48:18:78:0a:10:
         28:a0:3c:87:25:07:9a:4c:93:4e:9a:b3:f0:ab:e1:20:69:80:
         3e:35:4b:e7:98:01:e4:fd:26:44:4a:b0:30:f7:96:17:a7:f7:
         6c:ab:a2:a6:2a:1d:09:a9:d8:6b:95:ad:5f:9c:f3:de:b5:b8:
         d1:4c:d6:4b:e0:b6:27:db:bd:3a:ec:50:78:3f:4b:e0:10:36:
         b8:78:bc:f0:46:8c:4b:9a:38:fa:e1:08:cd:45:ab:ba:dc:06:
         16:78:a8:d4:a8:e4:46:24:19:31:db:45:79:ea:88:6d:72:64:
         3c:85:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----