Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File:                     VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier:          xVNfdSkmO7hjLvwSbOLRjBBhCeUiCkHu9MAboNOecAU=
Subject key identifier:   CE:B4:16:C1:0D:97:8A:1F:38:AC:2E:B7:2B:91:3C:4B:2C:E5:15:42
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer:       /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial:       01962E98803C8F3D5FACA20D54FDBAE8B6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number:          1012
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: g2DPqQ6ocVGa+M+/CEs5Ww4QRT5ytwsrwjjWjAspzKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:3c:8f:3d:5f:ac:a2:0d:54:fd:ba:e8:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=ceb416c10d978a1f38ac2eb72b913c4b2ce51542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:14:21:00:09:4a:77:f8:f3:9b:16:99:b0:
                    92:4b:2f:a4:1b:ba:cf:75:40:3c:2c:21:45:6b:03:
                    95:51:92:a1:d3:29:c8:48:a9:4d:f8:5f:28:88:0a:
                    14:1a:72:d2:45:ea:5f:8e:b1:95:f3:e3:25:02:1e:
                    be:c8:f6:2a:1a:14:00:bf:9e:d5:3b:12:f3:d1:90:
                    c9:ab:d9:97:b3:ef:90:38:ac:70:e2:7a:e2:01:16:
                    18:8d:79:4f:a7:08:7a:74:15:e1:ee:5b:88:79:e1:
                    40:5a:37:10:81:1f:f1:c1:ac:96:54:fc:36:4d:18:
                    08:d7:e7:6c:fa:14:ee:43:ff:fe:01:b5:a1:db:bf:
                    94:e6:c7:bf:d3:7b:25:49:81:96:a0:a1:9c:51:ef:
                    77:da:35:e0:48:3e:b0:92:db:57:d3:ee:a6:87:6c:
                    18:65:c1:c0:eb:c2:aa:6d:01:10:9f:04:e0:b9:ac:
                    b9:b9:f5:e1:e1:0b:ba:7c:96:50:0b:23:b4:38:0b:
                    5a:97:c0:67:c2:8b:e6:d5:f2:da:96:e0:d2:34:7f:
                    df:d6:45:3f:e4:85:71:fc:ca:ce:b3:c4:37:21:d1:
                    e8:c1:f2:7e:2d:12:32:d6:8b:13:94:04:23:67:88:
                    85:e5:f3:ce:d0:76:c8:bd:a8:15:43:81:d9:24:62:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B4:16:C1:0D:97:8A:1F:38:AC:2E:B7:2B:91:3C:4B:2C:E5:15:42
            X509v3 Authority Key Identifier:
                keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:3d:b3:f9:e9:7c:ce:1b:cf:60:f0:5e:53:02:32:23:03:
         8e:5d:85:28:25:a4:70:e9:b9:92:3f:e1:54:49:b5:63:38:16:
         b3:ed:27:5a:56:aa:3f:a3:55:64:61:71:bd:ef:d2:f7:02:fb:
         aa:c8:6a:4c:ba:6b:54:e1:64:e6:3c:82:5f:86:74:b3:57:07:
         19:49:c5:17:75:10:d2:05:68:23:c9:95:44:cc:91:09:2a:78:
         7b:a9:df:df:ea:f1:79:21:27:2e:c7:ee:fc:95:bd:2f:02:1b:
         f0:9f:47:45:d0:9a:74:ac:2f:ca:49:e6:42:27:a7:28:fd:5e:
         b9:cf:2a:fe:74:f6:c5:a9:a8:d3:9b:ca:05:67:f6:e0:09:56:
         60:d8:af:be:4b:f5:87:aa:d7:37:17:1c:9d:1c:d8:0b:1b:32:
         d2:73:5b:72:bc:27:d8:ef:cd:4d:d4:8c:5a:62:aa:2b:7c:91:
         6d:f3:b1:b4:3a:96:68:2a:d7:19:fc:ed:62:a2:b3:b1:dc:ff:
         6a:fd:f6:ed:27:f0:09:08:49:9f:d9:34:a3:06:46:e0:c7:8e:
         80:5d:ea:bd:26:64:fc:85:f2:a6:c0:56:54:1a:66:5c:31:41:
         8e:bd:3a:18:0a:6c:8b:c0:0f:fa:da:05:e3:e1:43:be:d4:18:
         f6:04:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----