Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File:                     VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier:          gv5iGZoG5mqFoE07dqyNwwWQOr9GumegfONQMvi6+H4=
Subject key identifier:   BE:7D:97:45:60:21:65:F3:6E:97:E9:C0:48:86:BB:75:48:FF:9D:27
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer:       /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial:       01962FAB2E2399B2D28189914BDDC5F7D5B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number:          0FC8
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
                          2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: N5ZSbysCByuAfVNQYx1Aos8rgdw7TtNLKq3JzaHZ2ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:23:99:b2:d2:81:89:91:4b:dd:c5:f7:d5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=be7d9745602165f36e97e9c04886bb7548ff9d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:65:8e:d7:fe:f8:fb:4a:18:91:53:1b:c6:
                    dd:e2:0a:c4:a4:11:4a:bd:bd:5a:a1:81:ba:04:4d:
                    9f:2c:80:b2:80:b5:1f:b2:84:12:99:0f:9e:b9:85:
                    68:95:a2:44:ec:8e:c0:76:30:f6:29:4d:dc:f7:c2:
                    30:df:b6:27:47:12:cf:1c:9a:ed:aa:85:e5:8c:43:
                    b6:69:e0:a2:70:c6:16:28:b7:cd:8b:6b:16:b8:64:
                    90:cb:ca:2d:69:85:86:b1:67:03:ec:43:74:d6:eb:
                    6d:8a:19:7b:3c:2f:2e:7e:1f:81:d7:fe:56:b0:e8:
                    56:53:88:92:ee:53:91:23:d3:38:05:11:03:65:62:
                    31:40:0a:82:37:ac:df:ad:0d:63:53:4e:26:a7:43:
                    01:d3:86:cc:6f:7b:d4:e9:e8:10:88:2b:94:0b:58:
                    fd:17:aa:e0:a2:d7:72:d5:f8:d7:67:df:a9:e1:e6:
                    10:0d:8f:c8:8e:8b:47:5d:e6:ff:f0:b5:cf:f7:0d:
                    11:5d:f5:20:3f:80:b4:17:f4:49:7f:c8:44:14:54:
                    6c:8a:b5:fa:ff:de:c3:a5:92:ff:6b:f3:c1:91:70:
                    97:23:b4:f6:42:e1:59:cf:2c:f8:40:8d:31:f2:ee:
                    65:9a:a3:8f:1d:97:35:5c:e1:70:28:34:fd:86:21:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:97:45:60:21:65:F3:6E:97:E9:C0:48:86:BB:75:48:FF:9D:27
            X509v3 Authority Key Identifier:
                keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:a3:0e:4b:af:7e:15:49:3f:9f:76:eb:35:5a:c7:b2:d3:
         3f:1f:e5:0a:ca:ab:1a:41:67:a7:89:9a:1e:0c:89:2e:06:d2:
         56:73:df:f4:c9:9a:77:c0:a8:c9:e4:b8:e2:37:df:4c:26:e6:
         97:6f:1e:ef:14:ef:07:72:7e:91:e0:fc:23:72:05:ff:e3:a6:
         18:f2:db:64:9f:52:5d:02:b3:f7:65:7c:d6:82:cb:84:76:0c:
         04:96:59:63:43:04:13:93:e5:e6:fb:9e:d5:17:d7:32:26:8c:
         fd:c9:f4:f0:2e:33:8f:a9:e0:7c:37:29:2c:ce:6f:df:20:6c:
         0e:50:95:95:c8:09:4d:97:38:18:0d:93:6e:eb:ce:ab:3b:93:
         53:42:b6:2c:85:bc:87:d1:93:22:50:df:13:44:d5:fa:49:eb:
         14:37:42:30:ca:66:c1:b5:b3:1c:84:57:78:52:05:be:0f:54:
         82:41:3a:d1:cf:a2:13:ce:d3:bd:cb:50:fe:c8:5b:5f:61:02:
         b1:9a:d5:73:21:1d:d2:77:13:cf:8a:00:04:d8:2f:1a:79:60:
         ae:5f:13:9f:6b:ac:2d:24:c5:a6:3f:a9:7f:58:65:dc:64:1c:
         95:e9:d5:2c:d7:d7:f2:af:83:53:31:c2:7f:7a:ab:f4:57:8c:
         89:21:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----