Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier:          OYX7L/Apv5choBSISAX0NFheRpS/XhGAVl3VPvNeW8c=
Subject key identifier:   5C:99:25:EB:E4:F9:F6:E4:AE:65:96:87:8F:AF:90:B0:D0:93:E2:97
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       01962F06BEACCAA71BC223F6FA9EEC43E1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number:          09C9
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: YbW8B1VU4Q1AlEtMHsr3+WiF9NnsNlybhyMfHnUO7PE=)
                          2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:be:ac:ca:a7:1b:c2:23:f6:fa:9e:ec:43:e1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=5c9925ebe4f9f6e4ae6596878faf90b0d093e297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:dd:ee:41:d9:02:31:79:6d:20:fe:44:12:
                    b3:71:ab:ee:7c:45:e3:08:e1:b6:b1:2f:e3:e9:cb:
                    2a:74:de:6d:c1:d1:70:b1:5f:1d:5a:62:16:8e:52:
                    93:ae:8c:0f:a8:fb:fb:08:24:5e:b3:bd:ba:dd:1f:
                    f0:dd:16:9c:f3:b6:db:29:ce:2b:f0:f8:3d:69:17:
                    e1:60:64:08:01:48:c8:5e:06:b8:37:9f:62:8e:24:
                    fe:5b:f9:f5:8f:a3:2b:0a:e2:41:c1:a0:2f:bb:6b:
                    74:3b:e7:c1:fe:13:69:c2:9e:24:7c:3c:15:4b:74:
                    93:dd:79:fa:45:69:5a:ed:08:be:3d:d8:69:17:b5:
                    f3:a5:72:b5:11:91:38:53:65:8a:88:f5:df:fb:e7:
                    50:15:cf:7c:10:3f:f3:fe:82:b4:29:ea:d8:e2:07:
                    a0:75:0b:0c:2f:17:85:45:c3:76:07:d9:cb:ae:19:
                    9f:db:4c:00:58:ab:7a:89:30:87:98:cc:38:4e:cd:
                    11:ef:8d:13:17:1c:cc:15:36:3c:41:c0:f2:64:22:
                    11:80:02:db:3e:d4:cf:d0:fb:22:01:ff:80:97:0d:
                    3c:48:2b:97:d0:34:1f:35:35:a6:e8:2d:80:16:39:
                    e2:75:ae:de:8c:0c:26:fc:aa:2e:3e:18:ca:72:ed:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:99:25:EB:E4:F9:F6:E4:AE:65:96:87:8F:AF:90:B0:D0:93:E2:97
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:d0:e8:17:2b:a9:ad:29:4d:93:72:8c:16:5c:80:21:d8:
         6d:87:39:fe:15:f6:fc:0f:9a:22:65:9c:da:2c:be:29:6a:92:
         b5:38:a7:aa:77:51:fc:69:f6:44:93:a1:e0:10:fb:58:be:fb:
         a5:6e:cf:5b:a4:28:a8:e0:32:ce:f8:52:09:9d:49:72:f0:03:
         34:05:aa:d1:35:8e:c3:72:db:cc:0e:ca:42:07:2c:0e:10:42:
         c6:ec:76:51:7e:14:8a:5a:3a:68:2e:ae:33:63:8d:15:1f:c8:
         4d:21:a1:a5:58:1f:28:eb:56:4a:fb:52:c3:95:44:f5:49:09:
         87:b6:03:5f:1c:e7:7d:74:b6:0e:94:f5:d6:e1:1e:34:8f:ea:
         bf:20:1b:e9:1c:e9:a5:80:8c:44:d5:68:8c:98:6b:5d:70:aa:
         a6:ec:f6:49:27:54:3c:d5:3a:39:c1:91:04:d3:1c:ef:3f:a3:
         c4:f0:82:c9:77:1e:ea:e1:c1:24:7c:7c:b1:c2:7c:43:ea:04:
         12:fe:a7:fc:db:ca:8b:ba:ac:27:eb:ab:52:93:43:53:f2:0c:
         c6:1c:8b:fc:d1:4e:0f:c0:b4:93:d9:48:9d:ca:54:11:e1:ec:
         f6:46:5a:6d:23:78:45:72:56:8a:1f:78:d4:7d:3a:d0:22:9b:
         0a:66:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----