Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File:                     VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier:          Kh6vabjVVH1AyBsIGjeemExfs3+41bSz2W381a1+cj8=
Subject key identifier:   2B:30:81:CA:37:34:CC:4F:09:1F:27:78:8F:95:F6:E6:DA:23:ED:9D
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer:       /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial:       01962E9988488E424AE4D30B69325C86BAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: xTli3o+T6aeZoF+78j4RxjApDOYJJiZ/1nOKQXN2noE=)
                          2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:88:48:8e:42:4a:e4:d3:0b:69:32:5c:86:ba:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=2b3081ca3734cc4f091f27788f95f6e6da23ed9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:3a:3d:84:a6:3a:3b:bf:2d:37:58:a2:57:
                    c0:89:1f:47:de:33:fe:57:a5:4b:43:0f:06:cc:89:
                    63:a8:2f:32:d5:e0:cb:25:8d:07:d6:06:5b:e2:12:
                    de:9b:07:74:8c:16:23:9e:29:35:a0:25:0c:a1:c6:
                    4b:4f:a9:81:ce:0e:d9:bf:20:a9:f9:a4:e6:e3:7d:
                    30:ce:3b:42:7b:4b:64:63:71:ff:cd:7f:22:19:5e:
                    fb:bb:ef:30:40:0f:55:b2:20:15:8e:06:f8:72:38:
                    a0:bb:35:ba:fd:f1:f0:38:4f:c4:85:da:b0:51:24:
                    b4:aa:3e:1b:fa:5d:49:cb:01:6e:eb:a7:e5:c2:ce:
                    2d:91:7d:fb:81:a9:fb:74:5d:9f:64:d9:0f:bc:f2:
                    0f:bc:ee:4a:cd:78:da:b4:97:ab:b4:fc:27:35:d8:
                    3b:78:da:94:5a:29:ee:32:ae:15:6e:94:ba:37:49:
                    08:62:a8:d5:7c:72:4b:40:2d:78:65:de:14:e6:dd:
                    b3:60:96:24:9a:01:a6:80:0c:b6:11:8a:a1:a1:60:
                    67:40:47:7b:0d:9d:21:34:30:29:e2:c5:05:8e:d2:
                    62:ab:54:6f:76:da:34:78:20:ef:5a:c3:69:cb:50:
                    10:90:b7:22:57:01:10:a2:a4:6a:0d:a3:b0:f4:38:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:81:CA:37:34:CC:4F:09:1F:27:78:8F:95:F6:E6:DA:23:ED:9D
            X509v3 Authority Key Identifier:
                keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a5:c5:03:ab:93:6c:a0:a9:e0:d1:75:10:ed:aa:ef:08:83:
         c5:82:5f:d4:2a:99:cd:ed:29:2c:45:6c:31:f2:70:26:b6:af:
         04:a6:b7:58:28:a1:39:76:af:f9:26:18:14:05:ba:14:8e:8a:
         c2:23:0c:38:95:6f:01:b4:bb:c9:6c:3d:60:67:ff:6d:d3:16:
         5e:b9:c0:1e:38:48:23:0b:4f:fb:af:f6:cd:45:db:5d:39:03:
         76:93:a0:c2:5e:8c:6d:5d:74:95:e8:ed:2b:f8:8b:c7:cc:f4:
         29:db:54:a9:7b:bf:83:ba:45:aa:02:3d:4b:ab:09:2c:47:75:
         21:9c:63:c1:70:da:85:39:b4:41:1c:6c:44:f0:3e:02:ca:62:
         6c:a0:e8:e5:4a:f0:84:7a:4b:72:61:11:d5:ba:4b:23:24:13:
         c0:e5:27:b5:ac:5e:90:6b:53:c5:21:42:07:52:99:60:91:b8:
         80:12:8d:3e:42:5b:8d:81:ec:51:4c:d4:22:bd:14:ed:4b:02:
         35:c5:4b:2e:0d:aa:f4:f3:ff:5e:2a:7a:61:54:82:ba:aa:7f:
         60:3e:d2:30:94:b2:fa:25:c0:84:05:32:89:8b:d8:cc:9f:43:
         1d:d8:51:cc:ed:4a:2a:04:09:dd:fe:48:98:58:6e:12:be:d7:
         66:8c:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----