Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File:                     VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier:          evsR/Mab5M1JLPDSOoY927oCQWQizXGlyu947xBHxtY=
Subject key identifier:   C4:A2:FF:49:B1:BD:26:42:F2:72:26:EB:F8:33:4C:52:75:12:7A:E3
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer:       /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial:       01962ECFD77673C47F9309E0923E1879ABC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: jgSLnl0ylbCYSZJywtebEnLTk6XY7506GvN+O6NfAkw=)
                          2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:76:73:c4:7f:93:09:e0:92:3e:18:79:ab:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=c4a2ff49b1bd2642f27226ebf8334c5275127ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:28:28:ea:2e:a6:11:f4:48:91:31:3c:20:
                    aa:4b:74:e0:fd:13:08:f2:d4:c6:40:21:ce:ea:9a:
                    6a:b4:05:7a:8d:76:f3:64:24:ba:7f:1e:23:29:36:
                    ea:2f:4b:0f:c6:f9:5d:7d:fa:02:5d:bc:f7:ae:d9:
                    00:7f:03:6d:ab:ad:76:41:d9:70:21:92:f0:41:25:
                    71:0b:a6:a5:e5:49:06:75:4f:30:8a:35:39:61:cb:
                    4f:27:ca:57:3a:74:9d:73:8b:12:e4:f0:65:15:65:
                    86:c5:3f:47:4c:05:2d:f4:ae:29:8d:86:c7:68:c4:
                    a5:34:2e:9d:46:ba:59:dd:19:c7:9f:55:fd:cf:aa:
                    60:52:5f:2d:f1:a8:b6:b1:31:f1:b9:49:76:ac:e1:
                    2c:6f:a8:df:f3:7d:14:48:91:37:30:f5:22:b2:4c:
                    38:20:db:a4:bd:5f:83:66:62:7a:85:3a:40:9c:14:
                    d3:cb:e6:7e:4d:af:92:26:bf:90:2e:45:a6:42:af:
                    c4:b7:50:00:bc:f0:5e:bf:89:01:ca:1b:8e:c3:91:
                    1d:8b:14:8e:cf:fb:f1:91:5d:ab:8d:57:7f:70:4f:
                    b1:55:1b:4f:c9:51:dc:79:58:31:f8:f8:74:6b:5e:
                    14:e6:4f:1d:16:50:aa:2d:e6:cd:53:ec:da:c1:73:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:FF:49:B1:BD:26:42:F2:72:26:EB:F8:33:4C:52:75:12:7A:E3
            X509v3 Authority Key Identifier:
                keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:eb:70:d1:3b:ca:4c:be:ff:25:87:a2:c4:15:30:60:1e:
         ba:36:c5:ef:11:c9:f5:3c:46:a7:7a:b2:5b:0e:d0:e8:96:f8:
         59:d7:de:a1:05:83:e7:8e:c7:35:12:15:30:83:a1:b0:ee:ac:
         2f:eb:02:49:80:2a:30:8c:72:ee:4c:d5:78:ed:2c:22:71:38:
         96:0d:7e:cf:56:3b:7a:e9:84:c8:94:10:8b:9a:8c:29:3b:27:
         be:1d:f8:12:26:0e:f6:66:f4:02:92:77:6e:f7:3e:36:fe:61:
         57:8e:7d:d4:b0:31:d0:a9:44:91:bd:77:7d:e4:88:8d:c0:e4:
         30:eb:f0:56:9a:20:47:88:36:a2:7b:1e:a6:91:ea:3a:4f:83:
         f5:17:20:42:88:22:0f:b9:07:ab:40:23:70:75:21:7d:b0:95:
         53:3a:bc:1f:5a:26:37:e0:26:16:25:03:03:8a:c6:25:df:e5:
         e0:99:b6:a0:72:e2:d3:af:15:c8:40:a3:56:01:69:73:86:3a:
         54:90:7f:76:d1:92:4b:cb:a4:0c:ca:0b:85:89:2d:d7:54:b6:
         c5:52:a3:f4:f2:fd:9b:8f:3d:83:a4:2b:26:aa:23:3c:ec:5f:
         57:ae:f3:6a:64:ea:bc:7e:34:c5:d5:67:7c:9a:89:cd:89:83:
         e4:67:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----