Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File:                     vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier:          WlXMs+9opf5oDXM4nPnZ895E/HUhjqd06Bm27dGq/pU=
Subject key identifier:   55:05:34:F8:45:52:F6:9C:EE:70:85:97:77:B4:52:B9:7D:2D:17:AB
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer:       /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial:       01962ECF7A63FD59958E0449BEE3B36D871C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number:          DE
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: 9kZap2hqxyNszZWapk4NR26e1d6CLVoBJVqBvYs9/qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:63:fd:59:95:8e:04:49:be:e3:b3:6d:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=550534f84552f69cee70859777b452b97d2d17ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1b:5b:60:3e:31:c9:a6:78:e9:14:78:a1:34:
                    c1:f6:1a:44:ff:67:58:eb:90:fc:f0:46:81:06:ea:
                    ca:c1:89:5a:dc:ef:1b:6c:f4:fe:8d:ca:09:16:4d:
                    89:cc:11:f7:ce:53:37:3e:ab:c9:30:77:5e:d6:f2:
                    93:d4:24:73:e0:42:de:e2:fc:16:3e:e9:69:96:d7:
                    51:06:6f:68:20:ee:39:82:4f:c1:15:45:31:3a:13:
                    79:6b:60:34:1c:02:52:ab:6f:72:58:4c:78:53:36:
                    64:9d:4d:51:ed:ba:1d:f4:de:59:7f:60:57:cd:30:
                    cf:41:e6:ff:9d:eb:9a:58:09:28:53:07:57:55:18:
                    62:ad:29:93:70:39:55:3b:b4:60:fc:d9:8a:4c:f3:
                    d4:c8:2d:7b:89:e0:12:9f:52:60:3e:a2:93:51:54:
                    ce:00:67:d7:f5:82:82:84:44:5e:0c:7a:6e:b4:2a:
                    88:18:82:22:09:3f:ae:40:ff:03:12:bd:a0:24:67:
                    db:80:66:2a:06:68:20:76:fe:3a:5a:fe:3d:5d:5e:
                    19:b7:b3:44:ea:de:cc:49:5e:1c:25:19:7b:93:47:
                    39:2a:db:ae:74:5b:7f:23:d5:d4:3f:14:02:6d:0b:
                    99:d3:e0:1e:01:fb:03:60:0d:a9:a0:be:07:6d:00:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:34:F8:45:52:F6:9C:EE:70:85:97:77:B4:52:B9:7D:2D:17:AB
            X509v3 Authority Key Identifier:
                keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:55:7a:f3:e0:15:a0:54:43:87:ef:5c:78:af:f3:8c:da:e7:
         c7:46:c4:2a:f5:4c:3e:0c:06:df:78:7f:c9:2e:80:da:e3:50:
         64:22:ba:f5:f4:84:9b:ed:64:4c:db:f6:24:31:cd:90:a3:5f:
         a6:72:79:c6:f6:d9:92:4d:5a:ab:48:0d:f7:3d:bb:6d:ed:4a:
         2e:30:ad:1e:8e:80:78:77:93:1b:8e:33:47:76:ea:28:a4:cb:
         ee:4f:8d:7b:02:b3:aa:48:eb:aa:06:59:37:25:fa:d6:31:dd:
         3a:5e:d9:b0:13:70:9e:4c:a3:5a:b5:70:60:3b:b0:1c:3c:44:
         1c:21:8f:a6:69:15:45:91:e1:82:81:c1:ad:67:e8:21:5e:e4:
         ee:96:61:f3:9d:14:44:6d:c3:fe:04:8d:fb:cb:b9:f6:01:18:
         66:1a:cf:b8:c9:e0:54:cc:52:fa:a2:03:33:20:e2:30:1a:49:
         ea:b2:58:91:99:d0:ba:f9:af:1c:9f:e1:c5:97:89:41:10:05:
         d1:c7:3a:c2:de:04:32:2a:58:6c:4b:28:30:54:89:8a:f1:55:
         d5:b4:28:41:32:ef:a1:02:d5:d5:5a:ad:9e:6e:bb:af:ee:9c:
         8d:0c:3b:9f:f7:b8:b8:da:18:92:6c:8a:dc:24:58:52:cb:3f:
         6e:24:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----