Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File:                     VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier:          eRcbryy+AoB41ZneFKuJWQo68xEJ6BQhHcfdlXkZ7LM=
Subject key identifier:   97:55:DE:D3:D9:F3:F3:75:91:F6:8B:E5:E8:C2:8A:C8:5A:1A:23:CE
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer:       /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial:       01962E9955F98A6BEC04B93C3FF564007163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number:          07D9
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: hKbQK72e0Or0l5rC/A17mOGdULeu60KbY46G5wbR514=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:55:f9:8a:6b:ec:04:b9:3c:3f:f5:64:00:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=9755ded3d9f3f37591f68be5e8c28ac85a1a23ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:52:f1:10:64:d6:5d:e1:b8:60:53:5b:eb:
                    6f:a8:d6:d4:5e:37:65:a1:7d:d9:84:74:8b:a1:cd:
                    53:34:7b:b6:8b:f6:6f:74:d7:68:9e:d1:7b:84:89:
                    b1:12:c1:1a:da:ec:5a:6f:9a:c9:dd:23:74:74:65:
                    13:d5:05:e7:6c:86:29:6b:c7:1d:82:74:5f:ca:61:
                    70:de:87:ec:81:c7:90:34:21:8a:f4:fc:61:4e:62:
                    bd:d5:78:5b:27:22:2c:86:04:bc:0a:34:21:ee:b0:
                    31:2d:7a:4b:4d:af:92:34:9a:74:7c:27:02:61:dc:
                    71:8d:5f:98:84:69:46:51:b1:87:7c:3d:ae:ee:4f:
                    95:56:07:f3:4c:7a:77:4f:ef:ff:ed:f6:29:38:97:
                    0c:48:14:a5:9c:69:b0:0a:e6:7f:50:c4:1d:3a:0e:
                    33:db:e3:6a:ff:f2:d5:73:7c:32:09:e9:24:76:7b:
                    f5:c3:b3:a6:d4:84:77:12:81:ef:8e:96:76:da:e4:
                    03:96:68:3e:93:f1:2e:a3:18:08:d2:c7:f1:69:66:
                    56:cf:ec:9d:13:c8:48:22:99:b1:f3:03:ef:f8:f2:
                    88:67:9d:2d:bc:56:ce:45:e5:bf:2a:7f:d5:30:10:
                    22:21:a1:6d:4c:4c:1b:28:95:ee:ad:96:b3:07:3d:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:DE:D3:D9:F3:F3:75:91:F6:8B:E5:E8:C2:8A:C8:5A:1A:23:CE
            X509v3 Authority Key Identifier:
                keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:c3:42:7b:47:c6:23:65:b4:5d:5c:29:5d:92:2e:7b:c1:
         cf:01:95:92:cc:63:79:71:a8:1d:cc:54:26:59:00:ef:10:e7:
         3b:5d:f5:59:b0:29:28:db:79:c4:5f:02:dd:e3:fa:df:d2:16:
         f5:a1:f8:82:44:c6:44:3e:2a:c5:b3:20:5b:01:a4:ad:c6:9e:
         8c:2c:9b:73:e8:a6:b9:1d:57:1e:b8:4a:b0:e6:65:01:08:bb:
         d0:7e:6e:6f:55:d5:e0:a2:78:da:80:00:7c:9a:eb:0a:e6:fc:
         87:e7:eb:af:0a:b7:08:36:89:7d:3d:b0:a7:80:e9:9f:3b:5d:
         8d:c5:67:cd:5b:6a:7b:02:a2:32:2d:e5:af:53:72:25:a0:cc:
         b4:3e:8d:c9:0b:17:c0:37:d3:f9:23:72:b7:46:4e:f5:33:5c:
         37:5d:2a:7a:77:4a:ff:a0:ff:ec:01:80:18:52:e7:a0:d3:44:
         e1:09:de:3c:e2:72:71:7f:1a:35:81:3c:7f:dd:08:2a:02:e2:
         07:a9:dc:a3:80:a5:39:1c:41:5e:e5:c6:1e:b1:f6:78:e7:26:
         1a:2c:d4:c1:d5:d1:a8:f1:94:50:27:c4:cd:a2:18:90:3c:3e:
         67:30:59:12:12:3d:c9:ec:63:85:da:79:72:5b:b5:50:7a:00:
         66:e9:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----