Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          ygKYOQX7b9uxeISkMs8KFraAPG1a3qO69AS9g+YGgws=
Subject key identifier:   AD:5E:91:91:F4:CA:92:00:45:A6:3A:23:6A:02:A2:AA:F3:25:44:42
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       01962F3D648626B361A4AAFA44CF69FCD73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: jePPW122Gby4DQdpQIqXOdkeFYwm0Ep8Ag1wgwvqU/A=)
                          2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:64:86:26:b3:61:a4:aa:fa:44:cf:69:fc:d7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=ad5e9191f4ca920045a63a236a02a2aaf3254442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:5b:d7:38:eb:a1:0f:87:e4:05:90:bc:6a:
                    93:96:c5:70:d9:e0:ed:95:38:ca:6d:5e:a7:e2:f5:
                    1b:5d:b6:03:c7:69:46:bb:cc:34:9d:e0:e4:a4:60:
                    6f:a8:c3:dd:35:8a:78:95:5e:22:fb:45:c8:f0:4a:
                    11:27:a4:d5:65:02:98:e2:5f:43:53:41:ab:2c:98:
                    79:1a:f2:55:cd:33:e4:eb:d6:7e:77:8e:e1:c4:c6:
                    a0:9d:fe:f1:c7:73:c9:6e:58:50:de:d9:b8:ad:c5:
                    97:0b:ca:9d:37:fe:73:4d:c3:0b:86:39:c7:58:23:
                    42:03:2e:43:7e:ca:3b:4f:c6:a9:bf:7a:c3:3b:ef:
                    f0:f2:7a:19:1e:58:a1:71:34:21:b1:23:6f:fd:76:
                    33:7f:fd:4d:ab:d6:33:dc:53:82:c2:ca:4b:c5:ff:
                    26:d0:af:8f:c6:b8:39:62:e7:7c:e2:ef:3c:10:aa:
                    0c:58:a9:cc:7a:be:1a:87:ce:cb:bd:20:24:d6:b8:
                    2f:0a:fb:21:2c:ed:f2:c6:f0:73:e2:6b:7f:47:7a:
                    f1:a1:6e:0a:21:e9:54:40:de:0a:c3:06:59:5a:29:
                    c6:ba:d7:c2:4e:df:e2:31:2a:df:9b:39:9e:65:49:
                    ef:ed:33:ca:2d:be:e3:d6:97:c4:37:28:b4:34:d2:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:91:91:F4:CA:92:00:45:A6:3A:23:6A:02:A2:AA:F3:25:44:42
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:8e:4b:ea:1f:85:a9:b6:ce:4b:bb:ac:31:12:e2:28:67:
         af:ed:de:ce:4a:da:75:3b:5d:f6:49:0a:91:dd:b7:8d:9c:92:
         68:12:a5:b5:26:78:aa:85:82:9c:49:14:c4:f9:82:52:c8:02:
         ee:62:a9:6f:93:cd:27:49:86:d0:74:29:be:ec:9e:2b:20:d6:
         d8:e4:8b:b7:d2:7b:a2:ab:96:78:0c:03:df:c5:6c:57:79:03:
         56:a6:b5:31:53:95:0b:d0:d1:6d:e0:ce:d5:d2:45:b3:77:ef:
         31:ed:a4:51:72:dd:ed:dc:aa:a2:c3:33:03:14:54:b2:39:d1:
         a9:e9:6e:86:62:e9:24:ae:2e:05:4e:83:b4:00:58:4b:05:8b:
         26:0c:12:45:0b:8a:d5:da:68:7f:6f:e1:e4:fe:fc:21:b6:6d:
         91:f6:fc:91:05:c4:22:c5:fd:60:7e:04:b5:78:f1:89:25:12:
         64:ea:b1:f8:63:85:eb:91:da:a6:79:8d:80:96:dd:b6:34:67:
         1f:3b:d9:5e:78:8e:bc:65:7f:0f:36:7e:1f:66:85:57:87:79:
         94:7e:0a:89:26:2f:80:4b:e5:9a:1d:7b:2c:40:ae:d6:f4:8b:
         e2:32:74:1a:b2:35:5a:d1:fa:2f:74:34:3b:87:c0:c6:c7:5b:
         d8:f8:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----