Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File:                     Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier:          80nFpSwnOlRmy2HpegNpJdzzWQ/JHKmxwYKup/qVaC4=
Subject key identifier:   95:34:F5:F5:DD:F6:93:27:48:7D:3D:E2:C6:02:9D:E7:22:63:7B:84
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer:       /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial:       01962ECFB20BB391D8AF8D27687745EA7992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number:          09A5
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: NImrohl8yuIzWrjZv0nD9z7nUv/FVlTUce6v9noIcu4=)
                          2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
                          3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:0b:b3:91:d8:af:8d:27:68:77:45:ea:79:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=9534f5f5ddf69327487d3de2c6029de722637b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:95:8c:ed:4d:85:77:d7:dc:4f:34:d5:b2:
                    3a:81:21:7c:bb:46:d9:4c:2d:a9:79:30:b6:84:0b:
                    f5:bf:f2:0f:20:08:a4:41:0f:7c:66:f9:0d:87:0b:
                    3b:6c:65:64:f9:73:de:8d:94:f9:09:79:45:f2:ae:
                    e6:d8:a2:22:57:2b:f5:b8:8a:91:df:a5:ff:0e:7e:
                    5f:10:0f:be:32:57:a6:19:c8:ff:c5:82:9a:8b:6e:
                    60:72:5c:44:ea:1e:7d:5b:72:b9:a9:e4:81:6c:71:
                    6b:80:f3:b5:2f:fb:8c:08:63:55:99:c1:db:aa:5d:
                    99:3a:8b:65:16:18:8c:4b:b9:de:be:ab:31:2a:00:
                    6b:23:d2:8b:a0:23:cc:6a:24:c0:1b:06:b2:ec:33:
                    1a:ce:c9:cb:78:84:1c:69:3e:d9:5e:d7:cc:72:42:
                    43:06:d5:a8:f8:fb:2c:ce:8c:ec:c6:37:51:f9:90:
                    1e:14:32:56:17:61:59:a7:74:2b:75:9d:ea:68:02:
                    8c:26:18:14:3d:83:c2:df:8f:a1:2a:34:c2:cb:0b:
                    46:d5:9f:3b:21:f9:fe:de:ba:7b:c9:32:16:1b:94:
                    df:d8:cd:f8:11:32:6d:c2:e6:75:43:32:78:6c:c9:
                    86:96:c6:fd:0a:0c:d9:e5:b3:d4:c6:58:fb:28:7d:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:F5:F5:DD:F6:93:27:48:7D:3D:E2:C6:02:9D:E7:22:63:7B:84
            X509v3 Authority Key Identifier:
                keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:55:55:a4:a7:37:6e:85:7e:79:0a:ff:69:87:e8:e9:df:5f:
         fe:9c:50:a5:4c:28:d4:49:70:32:91:41:2d:fa:66:d8:96:ac:
         37:8d:41:5a:63:45:8e:f6:c7:e4:12:cd:23:5d:b5:ec:16:32:
         63:6d:b9:87:be:f8:95:12:f6:bf:58:47:0e:10:1d:2e:c4:3a:
         34:2e:9f:c3:c1:7d:1a:90:4b:70:78:e8:ec:7b:5c:f8:17:c8:
         73:d0:06:91:60:90:71:d9:82:84:39:95:90:29:1e:07:8c:30:
         07:16:e6:39:23:71:ea:22:f8:59:de:35:8c:cd:6b:f6:da:7b:
         f8:fa:2a:18:5a:10:dc:65:6d:96:4a:6e:46:07:c7:49:61:bc:
         d9:8c:0f:65:da:87:78:dd:b6:64:ed:ad:f4:fd:f6:09:13:6a:
         c6:2b:c1:d8:0c:04:6b:bb:8a:d4:88:5b:8d:a7:84:33:92:1f:
         02:7e:13:eb:14:dd:cd:df:59:ab:45:b2:f4:a1:7d:a3:ae:12:
         55:37:55:69:26:43:c5:24:73:21:4e:04:59:0a:17:c4:fa:b1:
         16:3a:13:ff:a8:75:29:04:61:8e:4a:47:95:a8:ac:16:c4:eb:
         0a:3a:72:3a:d4:21:94:25:a0:0c:c4:bc:d7:21:9b:ab:d8:9e:
         f6:43:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----