Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File:                     VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier:          AMb6zACuktes74lOquDAbcYjP9n/D0ykx7HIEhLqAHY=
Subject key identifier:   F6:25:38:42:72:F0:03:51:6C:06:57:85:8F:C5:86:ED:C0:C0:1A:CF
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer:       /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial:       01962F3DB2F46A99391263F44F1F6865C41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number:          0AAC
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: ciTfmFwJnVM7y6Jyzh8Cy4Ut4DXnuFuJ1okhe+24mKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b2:f4:6a:99:39:12:63:f4:4f:1f:68:65:c4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=f625384272f003516c0657858fc586edc0c01acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:65:4e:7e:37:36:af:df:cc:e1:f9:08:28:
                    e9:fa:62:f0:a7:f6:1c:68:8a:e1:31:6f:59:4f:c8:
                    f6:3b:5b:00:40:7f:dd:e4:a8:c7:28:05:81:39:5c:
                    d9:fe:b4:65:64:58:98:0c:cb:f4:80:d1:f7:c6:96:
                    10:80:5e:01:75:92:1a:cc:aa:6c:56:98:8d:f1:43:
                    64:6f:93:ac:69:85:31:41:88:74:69:a1:86:27:55:
                    29:c2:bb:e5:93:d6:30:46:33:af:bb:e2:00:60:d6:
                    d7:1e:95:65:c3:ff:69:d0:64:6b:fc:26:78:1c:7a:
                    13:6c:cf:93:c6:48:a5:88:71:b0:dc:cc:93:88:91:
                    f7:a0:72:53:e7:52:32:6f:ac:3a:a7:e5:46:16:c8:
                    89:13:fd:35:22:08:df:17:de:3c:5c:e0:2b:5b:37:
                    1e:61:74:f8:4c:8c:66:a0:03:c9:b3:16:4c:16:53:
                    c6:90:d9:7f:d3:c2:5f:c5:e6:6a:ee:ee:7f:c0:05:
                    f4:3b:67:9c:27:f5:a3:d3:ea:c9:74:d6:c0:16:4d:
                    51:4f:78:75:e4:60:01:12:24:1b:47:1e:29:41:0a:
                    29:86:dd:ce:4d:ce:9e:9d:9e:61:b8:80:37:92:13:
                    7d:49:a1:23:f4:e1:f0:65:58:2f:90:f1:c4:5a:1d:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:38:42:72:F0:03:51:6C:06:57:85:8F:C5:86:ED:C0:C0:1A:CF
            X509v3 Authority Key Identifier:
                keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:69:86:ea:b1:e8:39:82:c5:12:be:74:24:d4:cb:f2:8d:
         3c:97:5f:5c:af:a9:d0:c2:e2:95:bb:8e:bc:16:75:c5:54:a3:
         e8:98:80:44:7e:30:e9:34:dd:bf:6d:96:49:06:50:b9:8c:7e:
         ce:bd:7d:aa:cd:5d:05:72:b5:51:6a:65:43:62:e0:ac:60:77:
         a8:83:9c:2b:af:fc:78:94:e4:37:1d:d0:ed:63:9d:94:d5:71:
         44:e2:ba:f9:05:ed:31:0d:14:7b:2d:f6:34:ab:a4:67:3a:42:
         86:a1:63:b4:cf:bf:3f:56:cf:42:cf:42:96:4a:17:5b:18:44:
         c9:84:87:5e:92:15:0a:88:7e:d5:92:ec:ff:ad:86:ce:99:ac:
         75:38:6a:81:21:0e:0e:a1:1e:6e:2c:73:b4:89:0a:0e:06:66:
         9c:07:ea:79:ad:1f:23:ea:53:03:35:59:ec:ba:fd:12:79:ca:
         ee:cc:cc:66:c3:9e:de:3f:64:34:a1:6f:ca:83:ed:eb:c5:ab:
         ef:e1:8e:28:ac:3f:f3:42:a9:46:d4:53:e0:1b:be:b6:74:fb:
         cc:5e:e8:ae:21:5b:f2:91:13:d5:7e:ea:52:f0:54:7d:17:c3:
         84:df:24:20:f7:70:74:c2:e7:ec:80:14:67:ab:5f:fd:7c:22:
         20:b2:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----