Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File:                     Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier:          H2fVGaOQeh49CMb+H8xbhboARJu9bCIf1Tw7109Yu0E=
Subject key identifier:   59:05:9A:5B:A3:3E:F9:16:55:62:61:B9:04:86:74:21:AE:AB:3B:E3
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer:       /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial:       01962E2B14FC1DDED9A5D477B452FD5CDFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: qfKCD4IVxMZwsH1RwFZPBYZRg4aWWQT/nKM/sQqDUTE=)
                          2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:fc:1d:de:d9:a5:d4:77:b4:52:fd:5c:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=59059a5ba33ef916556261b904867421aeab3be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:c4:0a:c4:50:c3:9b:8b:b5:83:15:ab:b1:
                    1a:d8:20:e8:f1:84:fb:ab:92:7c:b7:aa:4b:6d:26:
                    59:57:a6:5e:98:90:e0:19:13:b8:89:2a:b2:31:bb:
                    88:30:6c:1c:15:27:72:c9:b2:e6:b0:f5:f6:34:1d:
                    77:d7:2f:9e:ff:89:4b:9a:fb:5d:76:3f:6d:24:43:
                    37:0f:ce:f6:87:1b:77:74:bc:ee:10:97:7c:c3:7b:
                    3f:c2:92:2b:93:1e:a6:85:b7:95:4f:ad:ef:be:d5:
                    48:56:49:6f:2d:62:6c:ff:05:97:15:63:98:27:c3:
                    52:ae:c0:40:ed:0e:90:37:ed:e8:f9:b9:aa:7c:0c:
                    43:5f:d1:e9:82:38:f2:d3:ae:b8:76:dd:d6:f5:5e:
                    6c:33:d1:f4:25:34:5c:b5:f6:6e:af:0a:6b:e4:55:
                    b8:7c:d6:e7:e8:05:5d:05:a8:d3:04:cb:82:93:ef:
                    c5:5d:14:23:c0:dd:9c:11:67:c0:7f:9f:5f:5b:e3:
                    67:dc:e2:10:63:25:71:b8:86:83:c2:37:68:ce:97:
                    41:3b:e7:2f:09:16:85:c3:63:9a:4f:f8:be:c5:b7:
                    dd:b0:16:eb:b8:ba:7a:03:41:ad:c1:1b:d2:00:9c:
                    d3:18:5a:7c:83:97:12:30:fa:ae:ff:5f:7e:22:ad:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:9A:5B:A3:3E:F9:16:55:62:61:B9:04:86:74:21:AE:AB:3B:E3
            X509v3 Authority Key Identifier:
                keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:97:09:74:a7:43:cf:68:65:83:f9:82:61:09:c3:7e:3e:
         ec:ec:c3:18:24:9f:36:6e:87:e2:e3:46:a6:d7:0f:18:8b:12:
         75:fa:83:11:06:8f:1c:7a:29:df:54:cc:36:a6:23:1b:4d:b2:
         b3:1e:d1:41:a8:5f:f0:3e:a3:b7:d3:72:e2:dc:e1:7d:1a:65:
         5a:3d:d4:1b:29:9c:49:fa:e3:80:dc:0c:68:1e:3b:d8:7b:81:
         ee:29:1f:be:7a:e0:82:c0:31:43:89:1e:22:5b:f4:1e:30:3a:
         19:dd:4d:90:94:9b:0b:64:8d:d5:1b:06:5d:77:03:71:92:4c:
         da:a1:c8:15:be:31:5c:60:6e:a6:a9:67:09:bd:19:a8:7e:f5:
         62:24:a1:5a:f4:83:9d:ee:e8:a5:12:0a:5d:8f:72:52:cc:1c:
         f0:d0:5b:b3:dd:ca:e7:1c:39:29:50:9c:c7:09:52:78:de:ea:
         d9:a8:2b:cb:75:18:fe:84:18:13:b3:17:31:28:a7:78:6c:75:
         95:d3:e7:a1:87:64:68:7b:e2:d1:5e:09:10:c1:ae:33:82:6a:
         29:fc:60:05:a4:40:1b:8f:70:2a:a5:d5:72:fa:f8:c8:24:30:
         68:4b:5c:10:d4:96:0e:12:8c:6f:92:97:40:99:2b:b4:59:6d:
         15:64:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----