Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File:                     VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier:          NolxxI+ZoahesQySrI5DMixD28HZtL6Q2/Nqvv3ywyc=
Subject key identifier:   62:F4:F4:7B:E4:61:A7:08:B5:1E:6D:8A:65:0B:41:F1:F2:DD:03:CC
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer:       /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial:       01962E2B4B5224A1D6493987F3D9FFF61005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number:          1524
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
                          2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
                          3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: i5lAnSGuR+gepgYOoOmnpv0lAevbCXHP9h+NzArpUO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4b:52:24:a1:d6:49:39:87:f3:d9:ff:f6:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=62f4f47be461a708b51e6d8a650b41f1f2dd03cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:c6:a8:03:7b:6f:cc:68:72:46:77:a8:6e:
                    67:80:9c:5b:5a:35:c6:76:0f:6f:cd:84:01:cb:75:
                    bc:14:a7:7b:36:0d:e4:79:bd:f1:83:03:7f:94:5e:
                    71:c5:89:0f:62:fa:36:04:c3:db:c7:cd:95:fb:73:
                    a9:4f:f8:cc:f1:fc:e9:54:ca:49:cc:00:1e:1b:e2:
                    ed:ef:e0:ed:a8:c1:17:fd:0f:be:8b:f7:89:77:91:
                    15:d3:d3:63:4b:1d:fc:69:b9:3a:80:ee:76:9e:62:
                    95:5e:2b:e9:e4:d6:1d:de:ec:19:84:10:fc:8b:42:
                    d6:13:aa:92:c8:45:5a:2a:00:4c:a1:06:7f:21:3e:
                    c5:81:e1:38:91:d4:24:6e:bb:df:82:89:c1:19:3d:
                    64:bd:26:51:8e:f7:1b:8c:15:8a:35:c0:c0:8a:28:
                    50:20:a2:78:18:bc:be:e8:92:cb:01:9c:6d:e6:91:
                    b6:2a:a1:6e:ae:f0:eb:5b:65:f4:06:3a:aa:fa:43:
                    6b:95:61:70:cf:34:1a:26:cb:c7:c9:c6:5a:7e:bb:
                    f4:a8:75:93:62:b7:05:33:a3:81:91:75:ab:e3:3d:
                    74:76:f5:05:77:a8:dc:16:aa:34:ff:97:df:b1:99:
                    13:47:c3:90:1b:43:78:1d:91:47:b6:93:82:00:63:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:F4:7B:E4:61:A7:08:B5:1E:6D:8A:65:0B:41:F1:F2:DD:03:CC
            X509v3 Authority Key Identifier:
                keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:53:92:95:cb:f1:79:93:ff:cf:40:d8:07:68:a4:6e:61:
         42:75:1e:4b:e4:48:5f:b5:3c:8d:1f:e9:6b:b0:28:da:10:a6:
         8b:21:e0:01:a8:24:25:19:63:23:dd:7c:9f:47:28:37:cf:c3:
         d6:19:60:02:a2:05:ee:f5:55:da:89:50:e6:14:60:a8:e9:e4:
         f3:57:53:25:42:43:1a:ea:a6:ec:0f:d9:f4:10:63:ce:c9:04:
         ac:96:70:6c:28:f0:e2:ff:75:89:9c:3e:5e:75:5f:69:ce:11:
         e0:02:8e:12:25:e5:73:27:e7:93:75:a4:b1:87:66:b0:28:cf:
         fa:28:b6:39:af:ba:0f:a3:56:05:10:49:78:cb:f8:bf:0e:9d:
         ec:8b:e4:b3:61:3f:de:9f:36:84:38:52:f2:44:06:89:c0:5b:
         cb:34:11:cf:29:c6:82:fd:a5:2d:4c:a5:d8:5c:99:a3:13:4f:
         9f:5b:6d:9c:98:ae:7e:7c:91:68:9c:ce:d9:d9:b8:94:ae:4d:
         9d:4a:83:58:d3:e0:1b:88:a8:47:58:30:2c:30:ac:24:19:be:
         ff:89:68:b1:d5:28:35:c3:80:8e:1b:84:e1:c4:b3:e7:0e:7f:
         90:01:b5:3f:16:db:ab:49:3a:77:7a:18:0f:9a:1c:be:42:0b:
         53:8f:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----