Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          05epw9DVA/l7al9cA9iWlnGQxjqa1WwPzN/FF3nTeRw=
Subject key identifier:   3F:E3:B2:D4:90:91:30:81:EA:34:4C:8B:1E:F9:D1:63:EF:58:94:AE
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01962E98C9F66E650CB186D81D3B7C359593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          117F
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: fGOoRHf2QZTENfBT5E2AszhrtGX91grwXNKyl5GwTWo=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:f6:6e:65:0c:b1:86:d8:1d:3b:7c:35:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=3fe3b2d490913081ea344c8b1ef9d163ef5894ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:e0:56:7e:76:61:5b:9b:a5:3e:32:56:74:
                    d2:09:90:a3:b9:75:6d:2e:da:93:08:4d:9f:a6:97:
                    65:68:a5:3d:29:05:50:4a:37:d8:34:7c:8e:46:73:
                    44:0f:76:a6:9a:83:66:ea:ac:37:25:46:df:42:57:
                    1e:57:a9:82:95:a0:b8:8c:6d:bf:1c:34:99:39:23:
                    dd:e4:32:73:51:87:de:e5:7e:eb:46:6e:41:1a:d3:
                    28:68:ca:af:b0:19:87:d5:4f:a2:fd:44:e4:56:1d:
                    c5:39:85:1a:a5:65:4a:77:ba:fb:0d:0c:3c:d3:fb:
                    b4:85:6c:23:9a:8f:09:6e:7c:90:a4:9b:0a:cd:33:
                    95:4a:f2:c7:af:8d:6f:b3:38:70:46:5f:c0:b5:28:
                    8d:75:b3:0d:71:b6:0d:6b:47:a8:94:2a:e4:6f:fe:
                    e0:43:d7:4c:0b:bc:5f:61:a1:f6:5b:dc:ff:05:18:
                    72:4f:dd:13:d5:db:08:2b:13:ef:b2:b0:32:a6:59:
                    88:77:9d:d7:49:64:b9:5e:de:9e:de:c8:92:f6:3a:
                    02:be:ab:47:2e:5b:ab:d5:86:d1:69:dd:16:95:d1:
                    de:ab:a0:80:61:5f:cf:f6:64:39:19:7a:2e:d9:aa:
                    2d:55:e2:ad:3a:bf:05:a6:c5:f3:9f:da:3d:a9:af:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:B2:D4:90:91:30:81:EA:34:4C:8B:1E:F9:D1:63:EF:58:94:AE
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:44:d7:cd:b2:08:57:2b:43:b3:86:f3:10:75:87:d2:9a:
         57:ac:ae:eb:89:34:00:ff:b5:0b:1f:72:56:91:3e:75:2c:45:
         aa:f6:12:72:87:9b:38:ad:11:10:87:c7:da:59:3b:79:d6:eb:
         7f:29:db:d8:f5:39:18:bb:e8:b3:47:fa:1c:b2:8e:3d:6c:9c:
         85:5f:70:11:ca:53:9f:a7:f1:cb:f3:a2:ff:ee:3a:8f:f5:70:
         59:ce:e8:d0:14:0a:2a:58:af:9a:af:9d:9e:5a:2c:db:23:7b:
         1b:fc:07:32:36:ab:b0:4c:02:4e:bc:f4:12:25:01:15:fa:a3:
         06:76:f9:08:b5:af:06:de:85:d4:cb:01:2d:ca:53:0a:92:07:
         fe:57:a5:18:88:e6:90:41:73:39:78:f4:dd:ea:07:a7:93:aa:
         a5:18:22:30:8d:07:c1:89:ae:bf:b5:ec:ad:80:e7:dc:8e:fe:
         80:7f:f8:f1:46:d7:33:0c:49:79:9e:10:98:99:79:b2:ea:ec:
         6a:7e:f3:10:8e:c6:68:1c:92:3c:78:75:89:48:09:9d:b8:e9:
         53:af:43:8f:4b:67:0b:85:86:26:69:da:52:88:ec:53:31:c1:
         c2:bf:d3:8e:9e:27:60:c7:dc:86:6e:70:03:9c:3b:a6:90:49:
         d3:de:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----