Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          7/Ge9ppRimohJjwe2QCsvRP1e0vVx4CJDlxOqmQN7gU=
Subject key identifier:   C8:B7:A5:43:9D:2A:5C:5A:10:04:58:28:2F:D0:61:97:EF:85:AE:1F
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       01962E2AF06322FDC2B2871B90A170DA7046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          03EE
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: Um0e/QHJFDPnDmmS1N3GE4K6pP9TcEzRdQkOvjc+/oQ=)
                          2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:63:22:fd:c2:b2:87:1b:90:a1:70:da:70:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=c8b7a5439d2a5c5a100458282fd06197ef85ae1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:bb:98:a7:9b:a5:14:23:95:73:48:2e:de:
                    19:00:d9:c3:f6:d1:ef:91:c1:31:00:7c:39:34:5a:
                    0a:16:70:63:58:9c:64:ef:6a:0b:0d:f0:f4:2f:4b:
                    f0:f3:dc:a4:54:00:51:1c:5a:69:de:58:4d:53:d5:
                    29:51:48:78:5c:bb:f0:79:a5:a3:10:73:d6:ad:e9:
                    c1:fe:17:88:15:91:12:2f:91:46:e4:a4:9e:7c:81:
                    21:7c:6a:e2:d3:25:9b:b3:0b:d3:33:ac:6b:ba:9a:
                    65:6c:da:e9:15:9d:e9:9c:de:97:f1:4a:66:08:c9:
                    ea:27:c1:57:43:1b:bd:c1:33:a6:06:17:8a:33:ed:
                    fc:02:de:50:53:b1:d4:ee:aa:ca:86:69:2d:9c:48:
                    7f:ad:e0:c7:e4:5b:52:00:03:ca:77:db:76:3c:5f:
                    c4:6f:b8:7a:67:9d:d0:b2:57:0d:68:4c:d9:9d:2e:
                    32:5d:32:6d:85:1f:6e:31:ca:2d:a2:5f:af:a1:0f:
                    f5:15:53:e9:7d:ff:52:66:9a:c8:27:08:fa:8a:04:
                    bf:31:98:14:ab:9e:bd:11:cb:0e:08:e2:46:8d:27:
                    fc:bc:bd:ac:ab:df:ef:b1:c9:4a:9d:6e:4e:e6:a9:
                    e6:6e:d4:a5:e7:c9:62:bf:77:40:4f:30:c9:b5:c9:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:A5:43:9D:2A:5C:5A:10:04:58:28:2F:D0:61:97:EF:85:AE:1F
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:73:df:92:57:ad:a0:a2:76:e2:8e:22:bf:8f:b6:00:a8:
         99:64:80:19:7d:13:93:e2:a3:c3:55:ca:53:4e:30:c1:29:ab:
         a8:f7:83:a4:e3:f8:3e:43:24:8a:a0:25:25:62:ae:bb:78:a8:
         cf:1e:26:f1:8c:f2:3d:63:bd:72:92:79:4f:95:08:95:b1:02:
         93:de:65:71:8b:08:8e:71:48:7b:dc:fd:df:97:17:79:a2:92:
         4b:17:37:1f:d1:f0:dd:8c:b5:5d:89:ee:ad:56:b2:b6:78:d5:
         d2:4d:b5:7f:53:86:29:c1:8c:43:bb:16:64:75:73:c4:6d:2c:
         60:2d:43:46:cd:e8:5e:07:0e:16:28:01:2d:e0:53:31:13:7f:
         de:2e:6e:e6:04:fe:90:3d:43:63:a6:ed:03:9b:4b:a3:0d:10:
         ed:03:fb:4c:66:61:19:1d:80:0e:5a:2d:b9:7b:35:26:b8:4b:
         ee:f0:dd:6f:b3:cf:ac:73:85:a6:97:ee:49:e0:3b:12:b7:cb:
         34:1b:84:cb:5d:ae:4e:d2:89:ff:a4:a7:29:74:e3:36:20:1a:
         9b:8e:74:3d:30:16:14:f1:e2:db:9b:1d:d6:e6:8d:87:10:03:
         b5:a1:57:99:07:2c:6f:78:05:b6:fb:dd:22:d7:91:32:d3:77:
         64:0f:44:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----