Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File:                     VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier:          OsmZTHXS1kvtv5l0J5aXq2idltoGlKdQUostQ93AWP0=
Subject key identifier:   5E:89:9B:26:D9:55:4B:4B:38:90:23:DF:F9:1A:13:93:5E:D0:89:28
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer:       /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial:       01962ECFCA51CE1D7AFD02D67DB3A25E3027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number:          0A
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: QhM9rVnj4AvED8EegV2B5prJ5/h7uAJXZaiWnlU+jwc=)
                          2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:51:ce:1d:7a:fd:02:d6:7d:b3:a2:5e:30:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55973204a369680586de27f946fc81665632aa83
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=5e899b26d9554b4b389023dff91a13935ed08928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:59:92:1a:e4:ce:96:9c:d8:ae:53:43:07:
                    25:84:2c:09:61:51:c9:94:53:b7:f8:ad:9c:11:0e:
                    6a:6d:ac:0f:8b:38:52:11:03:f2:3c:6b:9e:b0:29:
                    9a:ba:b3:34:e9:d7:56:67:48:7a:5d:3c:f0:fb:e6:
                    01:b0:9a:71:65:95:25:16:97:77:95:98:59:87:12:
                    b2:4b:b1:2c:45:76:71:1c:0b:9e:86:92:42:b6:4d:
                    ee:ef:0e:1b:96:93:67:6f:f7:a3:da:7d:af:82:fb:
                    89:5a:a1:56:4c:a8:ba:82:8a:2a:7b:27:f3:09:c0:
                    07:cc:61:de:35:e6:fe:a4:ac:a0:82:ce:a3:d1:4a:
                    07:c2:3e:3e:b8:74:61:52:32:0c:5a:1c:ed:51:5e:
                    f6:73:43:c9:53:73:d0:ce:2e:f9:74:c5:99:0c:62:
                    c3:4b:d6:3a:2c:b2:c6:92:af:03:b3:6b:72:eb:80:
                    ff:39:2e:75:bf:44:fe:06:4f:29:0c:22:60:85:79:
                    48:f8:21:04:3b:a6:db:cf:23:bd:c3:e7:a4:41:ad:
                    45:dc:1f:2e:2f:27:26:aa:06:ee:c9:95:9a:59:0e:
                    89:81:c2:0c:4c:31:20:c7:34:5a:de:00:46:2d:31:
                    3b:8f:fd:9b:d9:cc:3f:72:e4:29:e9:fd:f8:47:08:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:89:9B:26:D9:55:4B:4B:38:90:23:DF:F9:1A:13:93:5E:D0:89:28
            X509v3 Authority Key Identifier:
                keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:11:9f:5b:11:ad:ee:04:30:8a:90:14:a9:74:b9:44:aa:5a:
         ac:32:e9:79:3f:9e:7c:58:ea:a2:d6:60:7d:26:58:8b:f6:75:
         a8:0f:29:e1:7c:42:0d:7c:8d:20:33:2b:13:40:13:c0:cc:32:
         e6:8d:d3:5c:a7:6a:01:1e:65:82:5f:c7:46:4b:e1:4b:fc:25:
         1f:5f:e7:a3:78:74:06:55:05:f6:3a:08:d3:08:eb:53:04:be:
         7a:38:6a:a7:f1:66:4f:2c:40:c0:0b:3f:4d:a4:e4:75:2b:7e:
         1f:ae:68:ef:db:e3:ab:90:1f:f7:0a:06:88:09:a2:8b:d2:6e:
         9a:6a:b5:cc:1d:e5:df:cf:62:7a:d4:b6:2e:51:e2:ec:ef:21:
         7b:16:2a:b1:26:10:a1:16:d0:58:da:b7:e5:db:4b:68:b4:3a:
         5d:86:44:e2:e3:7d:41:65:e4:a6:bb:7e:ea:d5:24:39:83:4c:
         87:7c:93:a5:3b:12:64:8e:a5:ec:46:ac:f8:77:69:d9:30:27:
         c9:de:72:33:b1:c9:53:63:2c:db:ba:ce:45:7b:58:35:0f:68:
         54:6e:0a:45:c6:ff:e4:cf:91:1e:ef:18:fd:5e:e3:a9:be:c3:
         6d:9f:45:b1:a7:d3:bd:ef:4d:ed:6b:38:7d:51:c1:0f:65:4d:
         2b:42:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----