Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File:                     vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier:          2ca8EMazTGKV9lMXCSmKqRL0VUnCxcN627ymHp4r9RM=
Subject key identifier:   27:C1:8C:FC:98:9E:D1:89:11:23:51:36:6D:2C:0F:7D:13:48:DE:09
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer:       /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial:       01962E9993922FC088FB6F73DD1CE92BEFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number:          0BBE
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: VSuGzYx1g+JxEOau+UwaGWfGLxKc4NsPK+rtrIdTLD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:93:92:2f:c0:88:fb:6f:73:dd:1c:e9:2b:ef:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=27c18cfc989ed189112351366d2c0f7d1348de09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:ec:b5:61:a0:a3:96:62:6b:e5:96:f9:fb:
                    87:08:e8:55:37:5f:f2:b5:bb:63:31:a7:45:ef:23:
                    a1:4f:41:9a:ee:d3:70:e5:57:6d:a7:40:a3:64:87:
                    e4:a1:72:dd:43:66:8f:b1:32:d8:58:b2:0f:3a:fa:
                    be:f2:fd:96:72:f2:a1:b0:5e:8a:6a:cd:d1:99:e3:
                    28:36:d1:44:27:a8:84:10:f0:f1:61:3e:14:0f:cb:
                    bd:b3:78:60:1c:7c:db:ec:9e:07:27:14:10:92:84:
                    82:30:d5:ec:46:13:57:1a:ce:e5:6f:d5:93:97:26:
                    fd:fc:df:07:75:2d:ca:11:07:63:fe:d8:5a:47:d1:
                    48:46:46:0f:a7:27:ce:04:bf:73:f6:08:90:e1:76:
                    8f:b9:75:88:ae:d4:3e:6a:43:c9:18:fd:44:4d:51:
                    04:3a:b2:44:6f:82:db:df:9c:57:03:59:61:be:12:
                    af:a9:4f:89:c3:b4:f1:89:44:c8:1e:7a:81:51:72:
                    30:2d:3b:b8:65:f9:23:25:52:4d:3e:e7:a9:2e:b4:
                    2f:d3:3a:fe:2a:52:27:9f:04:ca:bb:d7:f1:55:1f:
                    0d:3e:25:41:6b:37:88:80:9f:67:2b:a6:85:2d:0a:
                    f5:d7:bc:e3:af:62:ad:0f:dd:1f:ac:6f:0d:7d:6f:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:8C:FC:98:9E:D1:89:11:23:51:36:6D:2C:0F:7D:13:48:DE:09
            X509v3 Authority Key Identifier:
                keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:40:b1:9d:d2:e3:de:4a:66:6d:c7:3c:7c:4d:ba:f2:c2:82:
         e7:62:22:09:c3:8e:78:5e:59:44:39:5f:5e:1a:e0:d4:70:6f:
         23:e9:af:e9:8f:97:3d:79:56:55:01:e6:ae:f8:c3:33:08:60:
         48:0f:70:6b:17:3e:15:a3:ea:be:81:e2:d7:06:24:3f:c9:77:
         3c:31:d0:55:2a:fd:83:c3:c0:25:30:32:ac:67:66:26:fa:6f:
         51:b0:e7:d4:3a:4e:1c:36:fe:a3:f2:7e:68:58:c3:d2:37:b2:
         c2:f2:6a:0e:03:79:64:51:49:5e:fb:89:3a:f9:78:93:ca:14:
         fc:04:86:26:c5:31:2f:c6:27:c2:e6:36:b5:f1:19:09:24:1a:
         3c:68:de:08:8b:6d:c2:cc:9e:b6:45:18:3e:b5:61:e6:6e:d9:
         43:7e:a1:4b:26:54:28:42:28:5e:2a:20:21:33:86:13:35:d1:
         95:8e:ba:2a:e5:f0:4e:9e:e2:cb:56:00:ef:a8:f0:9b:c5:e6:
         6f:fc:d5:8f:d8:b9:b4:f1:f7:b6:11:8f:5f:dc:1a:79:a1:a5:
         38:20:54:c3:26:96:82:68:8e:6b:02:a1:0e:62:fd:f6:34:70:
         71:cf:ab:18:5e:eb:63:ba:41:b5:1e:b4:3b:48:ca:a5:7e:00:
         ff:47:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----