Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          s2LHbdxNbDVghCBqGjKVgn0/vEu5ciJDzDcM1cQQ0Us=
Subject key identifier:   D0:61:4B:8B:BB:C5:49:77:B2:56:8F:A8:DF:61:13:57:64:27:71:21
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       01962E61C43AB47E82E0525DBE8DD8D22FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
                          2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
                          3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
                          4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
                          5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
                          6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: Edj1RnSnFl9prr62HFRp3ZG0fFxUIZElfUDaQKTBg64=)
                          7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:3a:b4:7e:82:e0:52:5d:be:8d:d8:d2:2f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=d0614b8bbbc54977b2568fa8df61135764277121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:de:d3:9a:da:f8:f5:d9:e7:ca:63:b6:70:71:
                    14:6c:87:67:32:51:53:75:9f:92:ef:ba:cc:17:65:
                    a8:80:a0:39:ad:2f:e6:5c:40:bb:79:58:e9:0d:ea:
                    af:1a:72:a1:f0:4e:3a:5a:52:bf:06:23:b3:24:47:
                    65:85:37:44:0b:df:0d:9f:ad:9d:22:d5:52:7a:ff:
                    e4:88:ee:92:68:8f:4f:47:05:98:2d:9c:1c:b7:08:
                    52:52:71:69:00:6d:55:52:a9:17:7f:8a:cc:c4:ab:
                    22:c8:cf:4b:14:eb:f2:7d:9c:4a:0b:69:99:18:bd:
                    37:31:d2:3c:34:31:1f:45:2e:60:4d:e2:85:c3:ae:
                    88:b5:2c:58:a7:ff:19:c9:c9:d2:23:aa:6b:6e:1c:
                    24:c7:9e:c4:2a:c4:e0:2f:88:7b:0b:f1:f6:48:df:
                    86:b7:39:99:d3:60:00:01:e4:f4:1d:0e:af:a9:4a:
                    c9:d3:3f:c9:81:fb:5c:ea:fa:ba:df:48:bf:b2:37:
                    04:a9:7d:9b:b2:0a:5e:24:59:5b:b8:70:62:b1:d4:
                    ac:79:bb:79:41:d5:29:0e:36:83:e5:0e:76:f9:dc:
                    10:aa:75:83:7d:24:71:95:b1:73:20:48:b2:11:1f:
                    c7:05:aa:76:b5:89:88:de:61:78:a8:ca:b9:9d:7c:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:61:4B:8B:BB:C5:49:77:B2:56:8F:A8:DF:61:13:57:64:27:71:21
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:60:ce:22:eb:67:55:50:39:1e:4b:38:4f:6f:da:74:39:
         e1:80:c9:45:d1:71:98:d6:68:19:0a:6f:f9:cb:8a:04:c4:17:
         31:35:ba:ff:70:38:a3:a0:42:c5:1d:7f:bf:e3:3a:2c:3e:18:
         0c:31:f3:d0:dc:00:9f:6f:d7:42:d8:83:3c:51:71:ea:4e:ae:
         f1:1c:37:f0:1a:02:fd:06:c4:56:6e:4a:ea:4a:16:97:8e:78:
         9c:2f:ac:d0:58:cc:cc:0d:35:d1:54:8b:c4:2b:0f:dd:15:09:
         f9:b5:72:22:76:93:63:52:f8:0d:4c:90:05:c4:e9:ce:48:f2:
         d8:79:5b:b8:00:f8:0a:70:31:0c:7b:06:1a:8b:ac:2b:08:ec:
         ea:b5:95:64:b9:ee:6b:89:4f:ff:9e:ed:49:e6:38:4c:65:f4:
         a1:49:f0:8c:da:7b:62:84:2a:c4:9e:32:54:09:ba:c6:60:e6:
         b1:f7:40:1c:ae:b4:48:27:7e:a2:dc:ec:15:fa:9b:c7:57:73:
         47:52:75:19:0d:d6:05:c6:c8:d6:95:a1:37:2d:c7:bf:bf:2f:
         f5:b7:a7:30:94:cd:32:11:f0:70:46:c2:35:25:eb:a7:b6:fe:
         b6:8e:67:21:8c:fd:43:aa:06:b5:83:e3:33:3c:ef:8b:ef:0e:
         fd:a5:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----