Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File:                     viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier:          dkYVwHaiSochmQJJVEXMYI2wI+hISyjcuz+73wLp7+U=
Subject key identifier:   8C:0D:CC:F7:C7:C9:EA:8B:F7:9F:84:E1:2A:40:FA:1F:A1:01:9C:44
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer:       /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial:       01962E98D6F1ABBE4394795D19A4D5B7F47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number:          35
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: viphXepqVOryff6ZwH483I13X74.crl (hash: dNNY5qCCiYsdL34r+9xlKr1R020c73HMwlV7CtKg8T0=)
                          2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d6:f1:ab:be:43:94:79:5d:19:a4:d5:b7:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=8c0dccf7c7c9ea8bf79f84e12a40fa1fa1019c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:fe:62:00:78:b1:29:d6:19:10:4d:51:90:
                    56:99:31:4c:b4:c8:06:a4:f4:41:5b:c9:7c:f2:00:
                    fe:d9:78:a1:56:7a:d2:1b:37:4f:46:05:bf:3f:96:
                    da:3a:53:e2:8d:95:5a:b1:75:3f:92:b6:10:3b:3d:
                    02:1a:ff:fb:e5:57:b1:3e:fa:b8:db:79:4d:6b:63:
                    6a:28:e6:06:e7:a3:4e:bd:1c:25:fb:3c:f6:a0:51:
                    0e:21:44:0e:6c:18:80:33:12:40:6a:ec:23:ce:0b:
                    73:01:ee:a2:a3:81:63:a8:5c:3f:93:02:ca:c0:47:
                    73:8e:e0:09:bb:79:6f:3a:53:6d:c6:57:bc:fb:09:
                    76:19:01:76:71:e3:d0:e1:df:55:58:ab:f3:fe:2a:
                    bf:58:bc:7e:e1:bd:b1:bb:4a:75:dd:0a:8b:86:05:
                    98:dc:e4:38:1e:23:17:ba:0c:f0:b2:2d:12:e7:fe:
                    39:0a:2e:67:4e:a5:24:6e:c3:15:3a:c3:2f:61:0b:
                    7c:93:07:a5:ee:d5:d9:55:b1:6c:97:57:59:91:b7:
                    2b:e6:0d:65:dd:ee:83:c3:d0:17:d3:e1:62:de:9d:
                    6a:43:6a:fd:87:8d:d6:23:dd:1f:e7:97:5f:35:4a:
                    8e:29:8b:de:03:9c:58:a0:d5:69:7d:62:1f:45:e1:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0D:CC:F7:C7:C9:EA:8B:F7:9F:84:E1:2A:40:FA:1F:A1:01:9C:44
            X509v3 Authority Key Identifier:
                keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a2:5b:67:2f:a9:28:66:e0:a1:b6:7a:6a:4e:6c:f0:fa:e9:
         35:e0:1f:56:8a:82:ed:0c:82:3d:11:3d:35:14:15:12:eb:d1:
         fe:ac:50:2d:e2:d8:28:f6:1c:1b:5e:f8:58:35:a4:e8:c0:8a:
         cf:41:fb:69:21:48:c8:17:14:42:82:16:33:30:df:cf:28:10:
         c6:8c:45:5b:9c:ef:ce:ee:48:b9:85:2f:59:95:81:50:ac:ed:
         4d:96:7b:55:2a:c6:95:0f:a5:b8:4c:5d:11:12:bb:f4:da:94:
         8b:b8:73:d2:03:42:41:90:b0:76:98:a6:62:9b:13:07:15:bd:
         55:3c:e5:43:b7:fc:0b:9d:79:20:3f:63:e4:ed:dc:a3:25:7a:
         18:b5:30:98:3c:6d:b5:60:2e:27:96:52:de:90:6a:08:a4:1a:
         f2:e2:ce:06:b4:eb:af:c2:74:56:c5:04:bb:88:75:d6:aa:a8:
         59:2f:47:e2:28:70:a5:cb:e7:ab:2d:96:0a:8e:1d:29:91:6f:
         0e:e1:6d:fa:53:32:40:c5:59:4e:54:b7:e4:45:bf:ac:b6:d1:
         98:12:1c:97:4c:e7:9e:5b:42:ff:ba:d6:77:d7:56:12:5f:38:
         78:e3:e1:03:55:b2:da:46:66:bf:e9:c9:52:83:00:8a:04:91:
         69:94:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----