Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File:                     VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier:          GHSHG++kiyabH+PjVichpw63a06kLwtySLPXDsO1ams=
Subject key identifier:   CB:4B:D8:CB:87:08:1D:86:73:88:7B:1B:80:6F:1C:F3:2C:F7:BB:B3
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer:       /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial:       01962F06DC9B89839F2D2163D8AE6AA14C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number:          0B43
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: DGshNX0/A0FbqPLzIYTZBg+ENc2XAa2lJK82CcYo0as=)
                          2: xc-UZLTq46CsoQwfrFH96loErL8.roa (hash: imTueTgO4U1HucCZCJDX7it/v879nWtNhBcC9zIM6Z8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:9b:89:83:9f:2d:21:63:d8:ae:6a:a1:4c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=cb4bd8cb87081d8673887b1b806f1cf32cf7bbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:0f:06:f2:c8:51:97:e0:83:be:d1:f9:87:
                    85:52:52:8e:df:9a:37:22:a6:18:52:fa:7f:81:f0:
                    a0:b9:eb:aa:8f:b7:b5:1e:20:c8:0d:47:df:6e:75:
                    e8:0f:75:63:73:98:49:c1:12:47:e3:3f:ae:dd:91:
                    83:bd:c4:d4:56:00:2e:40:83:4f:02:15:ed:0a:e7:
                    9b:8c:46:8c:84:a4:c9:3f:96:5b:b8:8c:1c:c9:48:
                    87:cd:ea:16:0f:88:5e:73:56:30:6e:12:f9:b8:47:
                    a2:3b:29:e1:63:9a:44:c0:13:28:4d:c4:ad:7e:cb:
                    c7:98:4f:e1:0a:cd:6e:9e:6a:18:78:63:1f:03:9d:
                    40:91:a4:8f:b7:d8:88:96:ac:6b:77:2a:69:18:75:
                    b2:a1:08:aa:ef:f4:e4:18:9b:8a:b1:94:cf:22:c1:
                    05:b1:df:d3:05:f9:66:cd:94:48:65:b6:34:62:7a:
                    33:84:46:77:3f:45:a2:5a:e0:14:3b:ac:46:f4:d1:
                    ee:df:49:b2:70:4d:e7:88:db:37:20:13:e2:40:a8:
                    fe:99:86:aa:64:bd:33:2f:6a:43:66:60:37:be:aa:
                    93:05:e7:a4:5a:2f:44:06:fd:5c:24:a8:43:cc:b5:
                    56:10:0d:48:cc:c6:4f:a8:dc:84:38:a5:a5:d5:90:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:D8:CB:87:08:1D:86:73:88:7B:1B:80:6F:1C:F3:2C:F7:BB:B3
            X509v3 Authority Key Identifier:
                keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:83:4b:bb:f3:29:c5:65:ab:a0:68:1d:6b:39:22:28:e7:
         37:6a:57:31:2c:64:44:10:3b:65:c6:1e:e8:d8:ba:9c:d5:a2:
         e9:35:16:08:33:4c:6e:a8:b4:34:ed:db:f4:03:e9:69:5e:87:
         91:fd:40:90:00:e1:a6:a6:ba:62:bb:58:06:6e:fd:64:9c:70:
         eb:e4:8c:e4:7e:1b:00:4f:ce:49:0a:9e:99:4a:d7:3d:79:04:
         9f:ec:17:e4:c3:29:fc:e6:c9:e8:d2:08:f5:43:30:2b:0c:af:
         5d:1a:15:61:99:4d:3b:6d:42:35:3a:4a:ac:9f:58:50:11:9c:
         a9:b0:88:10:a8:eb:d3:98:4b:ea:cf:ea:57:48:22:41:b2:d7:
         03:59:40:ea:92:93:cd:86:33:d2:0b:7d:8c:49:27:7f:60:55:
         c7:1c:8e:a3:dd:49:52:47:5d:12:49:31:13:19:b0:88:d2:6d:
         23:b6:88:df:27:48:58:95:9b:d5:fc:cf:1c:74:32:9c:4c:98:
         67:ca:ea:93:62:20:8e:15:d3:f0:b2:4a:ab:21:2c:18:a1:2d:
         0c:2c:13:1a:23:59:d8:d1:d9:60:41:a8:4d:af:73:46:e8:52:
         5a:9c:26:9b:16:21:82:47:61:ad:f7:9b:76:01:ee:a6:50:9a:
         7e:21:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----