Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          2vSsUSr1Vqbhc/8n07KKJBzrLbdKCREf+3OEA9sSnMw=
Subject key identifier:   1B:2C:2D:7D:C5:0B:C8:A3:47:14:07:BC:55:76:0E:DF:8E:EA:06:B2
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       01962ECF7EB09E51489D6EA57A73EDDD01EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: h0zUUAX69lLfg1DUCK2FGouUEqNJsZFd2PM91W11KCY=)
                          2: r-28W7p2cDJvCgLzOQBlRQJral0.roa (hash: UHzSXGk7KneB035Tlu46305yUHm6EAg31b6sSaT63g0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7e:b0:9e:51:48:9d:6e:a5:7a:73:ed:dd:01:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=1b2c2d7dc50bc8a3471407bc55760edf8eea06b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:52:b5:4e:5b:c1:d9:87:dd:cf:5f:bb:69:
                    30:b7:ee:4c:bd:dc:ac:51:ab:e4:98:86:42:af:45:
                    c0:f5:c3:54:d2:78:af:05:72:fd:87:c1:a8:de:8c:
                    c7:b1:23:4c:75:5f:f9:4c:c6:a3:92:4a:10:39:8f:
                    b7:99:be:71:8d:9c:fb:a0:6b:01:3e:b6:9b:6d:59:
                    d2:ec:88:30:7f:b1:3a:04:85:c0:f2:19:ba:95:ed:
                    11:99:4e:8f:8b:56:d3:7e:b0:b1:47:05:00:e9:0a:
                    cf:d4:bf:8a:45:a4:01:db:69:52:a6:b5:80:9d:88:
                    5a:79:1e:c2:e3:59:7c:1c:8c:b6:97:07:8e:d4:a8:
                    24:aa:a9:9f:b5:70:91:ab:81:73:f0:5c:1d:49:cf:
                    1a:a9:b2:da:5c:1a:bc:a6:48:60:5c:0d:51:4c:e1:
                    ad:4a:24:41:de:a5:ed:6c:3b:f5:20:e0:d1:6e:22:
                    41:d2:25:27:b4:ae:3e:ae:2c:ec:29:d9:ee:93:04:
                    a5:af:a2:e0:f8:25:91:1d:e2:ab:88:d3:69:0c:5d:
                    30:0d:ea:61:7c:7a:82:0b:f4:65:33:70:7f:d2:34:
                    a9:c2:74:67:4e:5d:0a:89:d6:c6:a1:28:50:96:15:
                    15:ad:f1:56:fe:32:d1:d7:44:c2:6f:89:08:2a:1e:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:2D:7D:C5:0B:C8:A3:47:14:07:BC:55:76:0E:DF:8E:EA:06:B2
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:2f:7b:97:43:e6:df:fc:3f:23:71:ee:89:c2:01:85:98:
         d3:06:69:d0:fe:a8:24:b3:ff:8c:37:b5:1e:c2:ff:7d:8d:6d:
         43:29:5f:cc:dc:39:b2:1f:38:3c:5b:06:b5:8d:59:c1:d6:2e:
         e2:44:22:df:54:7b:a7:06:67:45:a9:c1:35:84:98:63:f5:43:
         2e:7d:ce:94:cd:ee:5f:ad:6d:80:79:a5:52:97:94:18:bb:0b:
         74:c9:a5:ee:4a:95:05:29:72:2a:43:ab:8a:3d:67:11:be:b5:
         b5:3c:2b:13:0e:cb:af:8e:eb:90:65:8f:bd:9e:26:e8:99:b9:
         0c:51:8a:ec:c2:e6:92:0c:2c:f6:eb:c2:5b:1a:cc:f2:69:d8:
         16:8b:6a:14:76:a6:45:c3:0a:98:1f:51:a0:32:58:7a:39:c5:
         7d:0b:34:c0:d8:81:60:4f:27:49:89:09:82:31:52:3b:ff:4c:
         7d:bc:93:a7:f8:96:19:a4:28:e1:bc:92:83:13:63:df:c9:09:
         42:83:92:cd:a1:39:cc:35:3a:04:c7:60:8f:4f:5b:51:59:d0:
         16:99:ef:28:19:8b:ba:62:b8:1f:7b:ee:b6:45:54:cc:80:43:
         7b:4e:6a:cc:64:4e:71:b7:3a:c1:f5:5a:9b:7a:87:fe:1c:c1:
         27:84:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----