Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File:                     vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier:          dU8hZvovsUtnyn18Pi7FHZ9uivtYGxDP8+lr5jlWGzI=
Subject key identifier:   E0:C3:3F:68:E9:80:29:24:73:58:F7:C4:1A:0A:81:77:87:16:37:68
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer:       /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial:       01962E617ACB5DDF23119615F391FD9BD142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
                          2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
                          3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: BXJ2k8K7PkmTEMOOwpM3yqqCda+dJw5WNai+fVR7L9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7a:cb:5d:df:23:11:96:15:f3:91:fd:9b:d1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=e0c33f68e98029247358f7c41a0a817787163768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:ae:27:8b:9e:5c:67:fe:3a:cf:9d:56:25:
                    ee:c5:70:4d:f8:e8:c4:22:c6:17:3c:e6:15:d6:20:
                    cd:bf:89:a4:a5:e3:4e:85:7d:46:a6:7c:76:09:35:
                    d5:46:72:df:c6:a3:c4:5e:4e:4a:be:19:2f:98:8c:
                    af:a9:21:10:6a:d0:a2:a5:d5:19:5b:88:43:c5:57:
                    eb:66:39:9e:67:d9:d6:e1:46:5d:55:45:34:48:00:
                    a9:61:8b:86:64:66:4c:ab:59:da:93:0e:df:73:2b:
                    cc:52:e6:8c:01:d2:96:d8:89:13:e2:cc:93:55:db:
                    4e:cd:df:65:fb:71:91:c7:7d:6d:ae:7d:8c:56:3f:
                    96:6a:44:7d:d9:1e:3e:88:c2:ae:a1:83:90:ec:df:
                    29:3d:20:c5:0f:56:1d:bf:33:29:7a:81:4e:78:42:
                    8e:ba:6b:d4:9f:a3:12:fe:4e:9f:16:ba:3f:cf:68:
                    d1:fe:68:30:7e:4c:ea:fc:6b:cc:17:49:da:f9:39:
                    0f:f2:de:1b:62:47:2d:02:ba:67:dc:4e:2f:49:8f:
                    e0:7f:de:75:b0:0d:53:cd:0d:b2:21:82:1c:39:df:
                    eb:03:a0:83:e8:44:a2:ef:99:ba:8b:9d:3e:5d:05:
                    be:93:a4:2f:69:15:0e:5f:73:50:cc:c2:c3:e9:a8:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:3F:68:E9:80:29:24:73:58:F7:C4:1A:0A:81:77:87:16:37:68
            X509v3 Authority Key Identifier:
                keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:81:a2:46:ce:c9:02:60:85:d5:44:aa:ba:02:84:e3:ac:51:
         06:07:d3:3d:a7:c2:34:a0:85:28:a5:59:e2:aa:47:92:39:b2:
         9b:56:b8:5e:29:6b:9f:23:62:c2:e2:87:d8:f0:40:01:2e:ab:
         e2:96:73:eb:6e:17:45:7c:e5:0f:f1:14:d1:07:6d:91:d2:16:
         01:19:e1:51:8b:96:c6:cc:ed:9e:99:1a:96:52:ab:d5:60:73:
         b2:87:a9:fd:c3:30:68:02:6f:cf:a2:8c:89:cb:cf:cb:da:dc:
         da:3b:2d:cd:57:b2:6c:dd:be:23:c8:d5:16:2b:ea:19:de:9b:
         ea:0d:77:18:97:d7:80:05:3d:79:9d:0b:9b:25:0e:86:b5:af:
         f4:b7:d6:72:4a:13:c2:46:1d:fd:42:a0:01:7e:29:d5:a5:ec:
         44:eb:2d:38:14:a2:99:ac:04:ba:97:4d:32:f1:86:91:36:b2:
         cb:f9:a7:91:c8:71:6b:ea:dc:5b:49:c4:66:05:2d:78:5c:13:
         b9:17:41:aa:14:ac:43:44:b3:53:a2:d7:63:66:e2:d6:ee:78:
         77:5a:98:4d:a8:7c:59:63:9c:eb:86:43:2e:3d:81:7f:14:b3:
         00:b5:e7:d7:50:64:3f:db:f1:89:79:5f:bd:44:1f:a4:3d:c6:
         37:05:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----