Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File:                     VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier:          HTkTnsZOs5WluPcMlUpMjPDGJZHiXuYMm/7YLCxCFQI=
Subject key identifier:   7C:C5:71:65:0D:9F:75:42:DB:DD:27:DB:DB:5E:72:BC:A1:51:C2:32
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer:       /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial:       01962F06D943293CE29408A8C9FD06F3B804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number:          058A
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: 64ZfGLs5J79n4rbMRSEMNB7F9sU7GFoeM+WjxokpHF0=)
                          2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
                          3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:43:29:3c:e2:94:08:a8:c9:fd:06:f3:b8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=7cc571650d9f7542dbdd27dbdb5e72bca151c232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:ea:8f:78:55:56:21:02:e8:5b:7a:fc:c5:
                    72:a4:00:a5:8f:7d:ad:b2:9d:ff:dd:db:2d:12:ae:
                    e0:dd:86:d8:e5:d3:89:0f:49:6e:7c:b8:8e:e2:e7:
                    e6:5c:00:f1:6b:6b:5f:de:6b:7f:42:47:7a:27:a7:
                    e6:41:4e:85:3c:21:0e:6b:9b:33:32:6d:0f:4e:4d:
                    fe:83:13:90:31:b1:79:33:21:12:f6:90:db:ec:17:
                    37:a8:02:9d:5d:d2:3c:27:fc:b2:6d:e7:d0:58:cd:
                    f2:ac:cf:d1:fa:41:a9:12:38:8b:74:08:3f:49:97:
                    3d:9e:87:fb:9d:18:6d:a7:b9:e1:cb:08:a7:42:5d:
                    e3:e4:b3:ef:83:9b:c6:86:e1:fd:ae:e5:6a:95:19:
                    3c:11:4a:91:42:4b:32:0b:35:49:f8:e1:71:b5:ec:
                    cb:ef:a4:0c:02:ef:e0:e8:ef:97:68:f6:29:fd:10:
                    06:8f:bf:c5:d2:3c:e8:8c:8a:f3:a0:ef:01:a3:b3:
                    7c:94:4b:9c:5d:95:ba:dc:e2:04:d3:63:d0:e1:38:
                    83:9d:33:8d:70:bb:75:69:46:97:89:fd:fb:23:72:
                    fc:17:b7:68:e3:1e:da:03:02:4b:56:3e:39:0d:5b:
                    58:fa:2a:32:80:57:7d:68:55:ed:a4:b5:69:f6:e7:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:71:65:0D:9F:75:42:DB:DD:27:DB:DB:5E:72:BC:A1:51:C2:32
            X509v3 Authority Key Identifier:
                keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:75:8b:39:95:e4:e0:12:ee:47:c8:9a:19:a1:03:ac:36:
         38:ad:c9:fa:7d:ba:4a:d4:2c:03:fb:56:3f:1a:27:b2:3e:0c:
         a5:b9:af:a9:a0:ea:14:7b:93:e7:c7:36:b5:9a:8e:d3:a2:45:
         e4:e4:90:0c:cd:6e:2e:7d:76:71:f3:e9:80:1d:ff:28:ea:6d:
         c3:24:7a:f2:77:7a:bb:42:db:dc:93:30:c5:a9:dd:2b:02:c7:
         99:14:c4:56:f9:7a:03:b6:13:3a:28:d6:79:89:1d:2b:ac:60:
         be:4c:25:72:01:75:04:63:e7:4f:06:ae:69:75:35:59:a4:2f:
         d3:b1:97:e8:38:38:14:7e:44:00:30:81:dd:40:5b:13:8f:89:
         1a:57:81:bc:5d:97:9a:95:11:2d:8e:2e:11:70:74:b0:57:a6:
         c5:ef:40:fd:78:13:77:f4:7a:b2:ef:db:20:63:7d:5a:8a:a1:
         cc:f5:e6:41:93:16:c7:b1:ec:f0:64:30:62:da:a9:ae:8f:ff:
         fb:c7:3e:49:cd:7f:c3:4e:c2:08:91:5e:46:5c:c0:49:e2:0d:
         c9:2c:8f:e3:cd:ed:f3:2a:a4:89:d8:bd:8e:15:fc:8b:95:6e:
         fc:57:4f:7a:7c:ef:a2:0b:72:e8:84:8e:24:1e:d0:64:ee:40:
         a7:f0:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----