Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File:                     vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier:          2VvsJBl5vDE/zURT/YW9nOg8arg09MkLd8JT56eoKqQ=
Subject key identifier:   5E:EA:66:0C:B2:98:3D:46:68:80:D1:93:95:07:4D:D0:21:7C:FE:54
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer:       /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial:       01962E61FF4B345C3B1EB854043B124F4430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number:          12C6
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
                          2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: fRJgncu8c9JkC06rhp7xKFtfC5MPnm6Z7QNq01u/E/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:4b:34:5c:3b:1e:b8:54:04:3b:12:4f:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=5eea660cb2983d466880d19395074dd0217cfe54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:c3:ef:e0:4d:f2:53:a4:17:ab:19:91:25:
                    6e:db:11:73:85:cf:9e:f0:bb:78:7a:ed:c1:40:bc:
                    70:b0:34:60:c1:ad:22:6c:4b:82:7d:5e:d3:89:22:
                    e2:db:c3:e5:02:ff:8a:5c:79:78:35:46:c3:29:6d:
                    a4:1a:ed:10:2f:00:b4:b6:8e:53:0c:aa:03:1f:56:
                    2a:70:6c:fd:4e:bc:9c:91:b7:d3:37:4b:5c:d8:39:
                    36:08:fb:82:91:f2:77:73:31:2e:0f:22:cf:8a:33:
                    4e:f2:72:5d:6e:4d:7a:b4:04:94:e1:59:09:04:d2:
                    b5:61:40:bc:2f:b9:b8:2d:37:d7:a9:af:6a:3a:f7:
                    0f:cd:d6:e9:d4:9f:81:02:1c:21:86:8d:58:68:af:
                    a8:cc:5e:cf:83:2c:20:55:7c:27:0d:7c:4b:9f:b8:
                    a7:24:d0:e5:24:da:7d:58:12:ef:a9:40:8f:8c:ca:
                    aa:7a:4b:ff:83:a5:c6:1c:c9:23:99:74:bf:6c:46:
                    bc:ed:cc:07:aa:6e:19:6d:38:39:a6:64:a2:de:37:
                    63:69:e1:5d:26:08:6f:00:52:1b:50:f9:b4:ef:41:
                    02:29:bd:20:88:99:8e:0b:05:25:9b:6e:d2:28:63:
                    fd:c4:80:2c:b6:d9:78:bc:67:41:3a:78:80:b6:a2:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:66:0C:B2:98:3D:46:68:80:D1:93:95:07:4D:D0:21:7C:FE:54
            X509v3 Authority Key Identifier:
                keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:92:0d:bb:92:06:49:0f:44:d6:6b:dc:04:1e:b4:68:b8:
         1e:0e:5d:b8:9a:bc:65:9b:c5:4b:43:38:0f:7d:16:df:11:b5:
         32:89:bc:c3:57:54:54:3a:2f:e6:4e:78:68:57:2d:3b:11:82:
         75:9e:42:f3:29:3e:0d:89:12:99:cf:10:9d:b0:ac:c6:3c:e8:
         23:bf:42:30:3b:06:ba:37:c1:1c:b6:de:5c:20:00:87:a0:58:
         79:53:fa:50:fd:a0:98:bf:ee:34:d6:77:27:63:ee:13:e6:5e:
         75:d7:4a:02:da:cd:32:b9:d3:b0:4a:ff:d9:ca:99:dc:36:ed:
         b3:d2:4b:7f:4b:19:cd:a7:51:79:42:f1:db:34:67:cd:78:ef:
         c2:80:3c:47:a0:3e:cf:69:a4:56:98:31:94:08:e4:8c:7f:c0:
         b8:ea:59:2e:03:d7:e9:3f:39:ef:6f:da:35:24:1d:fc:d0:df:
         22:a7:f4:10:c7:c2:60:da:27:ad:ee:83:07:5c:bc:d8:61:08:
         bb:b6:30:4f:45:ee:4a:72:be:91:52:16:3f:82:0a:75:9b:b6:
         6b:24:e6:9e:3a:5c:ef:95:9e:75:7b:fb:95:66:eb:ad:90:68:
         74:45:8c:22:76:63:7a:10:1d:e9:ae:f2:b9:c2:26:c8:49:06:
         ba:ca:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----