Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          2Lukzni7vmjSm+FgjUAoth40/eb9oc6TpZTbO22IbzE=
Subject key identifier:   49:ED:E0:F6:2C:38:98:81:4F:E8:AF:77:35:A0:7A:1F:F2:B1:DD:76
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       01962E2B093BC29AAE81298738C3144321D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: U4F6OtD6cfUpP1ZM5uMi/6q4EiRoYbfAu7337PCPOwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:3b:c2:9a:ae:81:29:87:38:c3:14:43:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=49ede0f62c3898814fe8af7735a07a1ff2b1dd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:71:a5:cd:40:87:40:ba:05:c6:94:7a:1a:
                    e0:05:6a:af:c0:8a:66:21:b1:72:35:4d:6d:86:41:
                    72:e2:97:b0:88:ed:08:9b:89:11:d7:20:6b:11:86:
                    fa:f5:d0:19:40:c0:19:3b:af:96:fe:e6:b9:7d:37:
                    c5:e7:b0:b0:72:53:55:67:da:09:3a:c7:69:fe:ed:
                    06:32:a7:75:2d:04:22:e7:d7:c2:ca:fc:67:42:07:
                    0b:9b:cd:00:d1:32:94:67:b3:79:7f:e2:8d:21:1c:
                    d7:6f:4b:ca:f2:ed:4b:76:7e:5b:69:05:1b:5c:0e:
                    9d:0a:ce:d4:d8:db:55:58:3c:a3:83:d9:bd:ee:84:
                    0e:51:b6:d6:2a:ec:69:6b:23:db:50:9e:d8:ce:8e:
                    42:42:ef:45:f5:7f:ef:67:95:6a:25:61:fb:13:05:
                    be:b0:7f:59:d4:0a:a6:24:51:82:ab:68:3b:57:29:
                    45:5f:28:b8:d5:3d:69:68:4f:eb:4b:85:f6:59:bc:
                    03:77:6c:a2:f2:22:31:26:3e:03:2b:ce:87:f1:a7:
                    bd:0f:f7:5e:d3:bf:0d:34:d9:d3:35:7e:f5:28:c7:
                    d7:c5:48:d2:4d:22:73:ad:b4:a9:18:99:ac:47:27:
                    57:d9:ac:e3:c3:54:10:11:20:ab:9d:ea:7b:cc:6f:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:ED:E0:F6:2C:38:98:81:4F:E8:AF:77:35:A0:7A:1F:F2:B1:DD:76
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:c1:cb:f3:ef:32:8c:b0:69:be:a3:3e:a9:46:ef:38:41:
         35:f3:eb:c1:03:ab:34:07:1a:e7:00:f3:64:8b:dc:3d:d5:89:
         35:27:b0:36:0e:0f:44:08:43:cf:78:75:ab:c4:c7:3d:9c:3d:
         c9:37:cb:44:15:d1:18:1b:c9:ec:a4:0e:4b:e2:38:c9:a2:ee:
         3e:63:98:e4:59:ac:60:fb:80:b2:e8:ad:d5:e0:7e:a9:c7:51:
         9e:07:ad:df:da:28:10:78:9b:c1:62:99:40:f6:34:c1:8c:22:
         3a:83:36:70:21:5c:72:2d:0f:07:91:e9:4c:b7:35:1e:4f:77:
         e4:2c:20:c4:b3:ee:2b:46:f3:4c:f2:19:6e:c5:25:5b:e9:30:
         2d:2d:98:9a:00:30:e2:23:39:fb:f4:89:6b:04:20:c8:23:f9:
         28:fe:da:68:39:3c:39:70:1d:b1:8d:67:e5:5a:2d:a9:49:49:
         53:2b:68:4e:89:b2:8e:ef:92:86:c9:b2:b8:49:55:c0:85:38:
         a2:bc:d2:37:5e:a9:b4:df:b1:6a:2e:04:e9:54:f5:ed:a0:59:
         e3:c1:55:fc:41:c5:09:60:94:07:20:7c:1e:01:24:91:3e:c2:
         0d:d3:57:db:c2:98:ab:1a:04:4b:13:77:98:37:47:5e:de:ab:
         7f:b2:49:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----