Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File:                     vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier:          krKuHUEKq09g3XeOPMiP/4yomlbypxi+L50JXVBfQEE=
Subject key identifier:   84:BD:8B:1C:2F:93:0A:92:6D:25:3B:D4:DD:45:6A:D5:1E:82:C9:31
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer:       /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial:       01962FAB7FA45C1CCDACF7EFBB048D794D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number:          0681
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
                          2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: 0q8zIaomYV30ijKJ1FnGHuv2Go70yHMsLqh3xsJfoTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:a4:5c:1c:cd:ac:f7:ef:bb:04:8d:79:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=84bd8b1c2f930a926d253bd4dd456ad51e82c931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:87:0b:9a:97:8a:5a:ae:47:c9:c6:5a:0b:
                    fb:62:e5:68:69:5f:78:07:be:af:a2:ed:b1:eb:37:
                    6d:e1:50:06:9c:ab:f2:d1:16:40:71:8b:11:1e:9c:
                    19:64:a4:0d:9e:4e:46:c5:72:c9:7d:0a:e6:bf:83:
                    c0:07:aa:f8:d5:84:ea:0d:57:16:7d:24:3e:dc:85:
                    73:3f:04:a3:9b:b3:7a:af:47:ec:94:81:5f:4f:d4:
                    fe:5d:ad:93:6a:db:ed:c7:14:65:70:ed:ac:df:24:
                    aa:be:6a:54:52:d4:7d:d7:42:28:03:b4:a2:b2:57:
                    9d:43:fe:ba:42:02:e4:42:12:ae:be:8a:d4:18:e9:
                    a9:e1:ca:45:c5:cb:84:04:b0:3f:cf:f8:6d:fb:88:
                    8c:71:ba:ed:81:b8:62:87:90:c9:f9:1e:23:bc:0c:
                    09:5a:1a:d5:97:f3:6f:96:75:a1:07:34:f1:95:54:
                    3d:ce:01:bc:b8:75:d2:52:a9:61:80:f9:ad:46:47:
                    94:ea:42:8d:2c:db:13:0c:00:68:05:b1:e7:68:7b:
                    cc:f6:14:f0:7e:89:56:8c:39:b4:a6:92:c1:72:ae:
                    2c:ce:c5:6f:7c:9b:b9:f6:3b:f5:07:52:f6:e8:ed:
                    dc:ac:9d:bd:55:79:6a:ad:8b:97:ab:31:d8:84:1b:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BD:8B:1C:2F:93:0A:92:6D:25:3B:D4:DD:45:6A:D5:1E:82:C9:31
            X509v3 Authority Key Identifier:
                keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:11:84:d9:cc:0b:b4:c5:90:26:3d:a4:62:6f:11:cd:11:
         4d:b6:9a:15:01:fa:2b:db:92:85:75:3e:f9:5d:db:fb:45:68:
         b0:a5:8a:ec:fe:c2:2b:6b:71:03:cf:7c:fd:d8:03:ca:ae:18:
         13:5f:49:bd:17:70:20:3a:d3:17:66:58:44:87:11:ee:7b:6c:
         b7:3e:0d:90:d7:00:6e:9c:eb:cf:97:73:19:82:d8:69:fd:1f:
         8d:d2:5f:b3:c3:d6:97:79:f0:69:77:6a:c8:91:a0:f5:f3:17:
         0e:84:08:91:a8:c0:84:68:d0:29:0e:18:ae:59:c7:8b:2b:d7:
         5d:ab:5a:e2:3b:89:1f:eb:26:7f:b9:ed:9e:cc:eb:09:0c:f5:
         70:67:2a:87:18:8a:80:28:bb:a4:8c:e9:da:45:c6:62:e8:45:
         14:cb:6a:cf:cb:8b:82:56:87:63:a2:ec:71:a5:8c:d0:17:f7:
         5b:84:67:6b:b9:b1:7d:dd:9c:40:03:95:88:2c:10:65:ae:5f:
         50:a4:ec:44:f5:ed:47:9e:96:38:fd:8f:4c:27:86:4f:7a:a5:
         76:af:24:db:b3:cb:79:06:9a:01:42:02:7d:e2:7d:3e:c5:f2:
         ef:1b:14:78:c9:68:9e:b0:17:06:61:18:9a:49:3a:ed:d0:7c:
         64:d0:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----