Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File:                     vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier:          fw5aOPaPyiEijXyeMbWZuklFJs96DKqQftKxnVxDtkM=
Subject key identifier:   22:58:CC:FB:9A:37:54:00:22:54:6B:A3:F1:0B:E1:63:34:5A:F0:C9
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer:       /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial:       01962E98AA03DFDB18E7F2F93F3A09B38CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number:          062E
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: bsi8fI+noUFknpfBjgPWKjLwEdoq779YROULjaIqN1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:03:df:db:18:e7:f2:f9:3f:3a:09:b3:8c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=2258ccfb9a37540022546ba3f10be163345af0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:99:a2:0b:42:1f:d0:90:89:0f:42:ad:df:
                    71:5b:33:e6:ce:40:18:43:44:54:95:67:fa:a8:2e:
                    7f:9c:da:a1:95:28:30:60:e4:3f:4e:a3:dc:7f:b1:
                    e4:fc:6f:ec:42:05:cb:53:65:91:e7:4d:a7:1f:57:
                    04:2b:dd:b9:1b:e6:bc:be:d5:f9:fe:ba:82:77:6f:
                    31:e7:6e:2c:09:8e:69:11:17:9e:11:19:ce:66:9d:
                    16:fe:cb:37:50:b4:9e:e2:df:3f:ba:00:72:b0:71:
                    f7:91:d7:29:87:f7:d6:70:ce:f4:43:c5:53:84:78:
                    a3:f9:5b:9d:dc:1c:eb:e7:c5:a6:f5:4f:0b:6e:e3:
                    3f:d4:1f:86:dc:53:48:ac:c9:e2:8b:1b:84:d0:45:
                    60:57:f2:ba:03:f7:3c:d5:cc:d6:3a:ac:7e:eb:ca:
                    84:d6:f7:de:e1:c7:b5:35:86:28:01:8d:0f:13:ef:
                    a1:03:36:a0:49:8a:03:0a:33:e6:ff:e4:ec:70:fa:
                    1f:2c:32:34:fb:d5:89:c1:fe:2e:15:6f:cb:f7:9d:
                    f6:ea:cf:e1:37:90:07:48:ba:6f:3f:04:65:18:41:
                    f7:d1:59:4c:e5:36:7d:e9:63:a0:03:bc:26:5e:4c:
                    1b:ae:17:44:ea:75:a8:f2:87:d5:09:62:c7:27:4d:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:CC:FB:9A:37:54:00:22:54:6B:A3:F1:0B:E1:63:34:5A:F0:C9
            X509v3 Authority Key Identifier:
                keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:7b:0b:96:7c:33:61:ed:23:fd:5f:74:9d:5e:7f:ef:57:
         d3:95:c1:ec:d2:1a:33:7c:38:37:98:58:b1:b5:b9:0e:90:b7:
         8e:75:cf:77:09:59:92:78:cf:7e:b6:6b:de:35:5e:08:01:b4:
         8d:b8:ef:cf:52:69:c5:2a:2d:28:1c:f1:2f:a0:3e:98:a3:5a:
         22:3f:e5:4f:79:ff:da:70:42:6b:f7:e8:05:ec:15:17:48:a3:
         1c:ea:45:c3:a6:4c:57:05:d2:00:63:fc:7b:a4:67:3a:e4:7c:
         89:df:6e:53:4f:61:38:7e:40:f4:d7:c6:05:4c:59:33:63:24:
         ee:95:23:d5:5c:ff:f6:11:4a:68:60:ac:d4:11:01:c3:6a:5c:
         4f:04:2a:00:dc:6a:a0:b6:1c:d7:b3:7e:73:73:78:b5:df:50:
         5d:43:f9:15:4c:49:a9:07:39:1c:24:7f:90:f1:de:7a:c9:41:
         14:3f:1e:ae:e7:a3:49:eb:88:51:52:17:d5:2a:6c:79:6b:75:
         d7:3b:90:78:8c:c5:cd:58:9c:94:f4:ae:9d:1b:0b:bd:50:d5:
         dc:fa:c1:97:26:2b:df:b0:a1:57:22:92:b0:48:96:09:0b:fe:
         4f:6e:88:95:aa:a7:a7:7a:a4:c4:57:bf:03:69:7b:90:81:ff:
         ef:87:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----