Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
File:                     Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json)
Hash identifier:          JV8M2uFHoXuj0fhhWAd+UUUQs3hzU5JXac3/31ZNp9g=
Subject key identifier:   4B:F2:1E:50:A5:F6:46:25:49:47:05:74:DD:72:F9:1D:87:86:88:9F
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Certificate issuer:       /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial:       01962F3D635E76D287108671BA14F1EF4E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
Manifest number:          025E
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: rfsHNqIvzr69jbW+cORRVC/Mj8hkwOlPUHsIva42wow=)
                          2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:5e:76:d2:87:10:86:71:ba:14:f1:ef:4e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=4bf21e50a5f6462549470574dd72f91d8786889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:9b:58:e6:e7:a4:30:1c:b1:84:8b:ce:a7:
                    33:2e:fa:3f:02:f5:7f:9d:53:be:de:a4:69:4b:7a:
                    7c:e6:54:c6:6c:a8:ea:0a:c8:4b:d2:02:b0:2c:4e:
                    96:d2:03:40:54:56:18:d7:4b:5d:9f:1a:c0:cf:03:
                    f8:9c:11:6d:8b:95:f8:cf:46:54:32:65:d7:5e:1e:
                    7c:ca:29:ef:43:18:cc:4e:b0:b7:de:30:2e:3f:2c:
                    d0:03:74:f0:91:3c:fb:52:36:73:48:16:99:b9:f5:
                    31:11:6a:75:ec:80:ea:be:ff:b5:af:e1:ff:ef:50:
                    c8:53:64:aa:0f:b4:ba:84:48:0c:d0:6f:84:94:44:
                    ea:d9:46:88:ce:d6:8b:0c:69:bb:19:01:2f:b0:a5:
                    9f:5d:b4:03:b1:e0:70:5a:83:42:07:9b:fe:d2:1b:
                    31:58:da:d0:16:56:18:0f:57:94:4b:a1:a3:e8:d7:
                    4e:83:6b:ab:e1:eb:6c:2d:e9:cf:96:20:21:b3:c0:
                    f0:eb:04:70:8f:e1:bb:ff:99:bf:e7:00:38:0c:7b:
                    5b:0b:c0:f3:61:06:95:16:ab:da:b4:6a:a5:2d:07:
                    91:64:9c:0f:43:ac:91:f0:b3:6a:e9:e3:78:85:28:
                    1b:20:07:cb:5d:d4:1d:73:d0:f0:87:68:3a:9b:5e:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:1E:50:A5:F6:46:25:49:47:05:74:DD:72:F9:1D:87:86:88:9F
            X509v3 Authority Key Identifier:
                keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:4b:51:b2:d1:50:d2:82:23:d0:48:3c:e8:de:fc:0b:a0:
         e0:97:b0:08:7c:f5:a2:36:1a:87:97:d0:9d:d7:50:f8:65:95:
         cf:93:db:a2:3f:3f:04:9d:c8:86:70:49:08:81:37:b5:ca:2a:
         e6:2a:3d:ba:f8:99:44:e4:e6:ae:25:00:3a:9f:34:f2:37:cf:
         e7:2f:5a:7a:fd:26:2d:a9:f2:fa:34:a9:e9:35:99:e4:cb:43:
         99:ff:8d:84:d7:fa:a4:a5:95:10:d3:1d:a7:2e:ee:1a:dc:e6:
         2a:88:2f:79:b4:8a:78:7c:e2:18:34:1b:08:f6:65:98:0b:8d:
         b1:07:17:2e:02:c8:97:5a:17:0b:9e:c9:fc:d6:5d:f8:db:47:
         57:ee:9a:04:fb:32:8f:c0:d6:f7:ba:c8:4f:a9:d0:d3:15:35:
         ff:62:02:87:5f:9d:51:ca:b6:39:ea:9d:9a:d7:fd:c4:99:41:
         57:d5:58:59:02:83:2e:d7:1d:25:76:e7:c2:25:6f:d1:35:40:
         38:56:08:55:2f:9b:73:26:37:95:f7:22:a6:41:f0:72:cb:c4:
         0f:0f:b4:b6:a8:e7:f9:ec:bf:40:a3:d7:44:c1:63:b4:12:7d:
         b5:ec:75:ba:52:1a:ad:50:b0:12:40:76:cd:fe:25:de:42:1d:
         ab:c6:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----