Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File:                     vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier:          r3xMank8yR7erY+xuO8MUGVJeO43AlIyRivR4MBYDtk=
Subject key identifier:   2D:9E:F5:84:5E:EE:74:27:2F:90:3C:ED:3A:02:F0:5A:91:EB:0F:2B
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer:       /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial:       01962ECF70469DABDDCE947DF9E60B452445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
                          2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: VzIo2Tn8LxslqA2m1G7CQ8aG02R5sXaT0S4wXI1pS+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:46:9d:ab:dd:ce:94:7d:f9:e6:0b:45:24:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=2d9ef5845eee74272f903ced3a02f05a91eb0f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:94:38:2e:26:49:cc:d7:e4:64:c7:53:e4:
                    b1:aa:41:6d:20:b6:f5:2e:13:24:77:10:66:d4:94:
                    30:84:81:a1:cb:c6:94:d2:7d:88:48:1d:31:a7:b3:
                    cd:61:25:ea:60:eb:62:46:ee:bb:9f:09:02:89:88:
                    0d:10:6d:ea:fd:be:6b:22:5f:dc:13:bf:1f:66:4f:
                    49:ae:78:bc:65:25:18:8f:fd:a4:3b:5b:a0:fc:e8:
                    23:6c:16:03:9a:23:d0:76:3c:47:a8:4a:80:e5:16:
                    cf:e1:79:63:9b:22:d5:aa:3c:c4:dd:58:cc:9c:39:
                    51:aa:3a:20:67:07:8c:fa:30:c8:7d:35:c2:d8:0c:
                    b8:89:34:79:36:62:e7:13:6d:d0:6d:f3:13:32:13:
                    4a:d9:9a:0c:e1:ec:5f:22:72:59:69:ad:68:b4:b9:
                    bb:e7:2c:f3:62:4e:39:c0:94:5a:8a:b5:49:0e:19:
                    f0:40:ce:89:78:7b:6a:d1:f7:58:95:cb:60:5c:ae:
                    4c:55:6a:b5:08:70:32:9a:e5:eb:50:4e:bf:cf:e9:
                    f4:82:03:7b:77:79:c0:a9:09:c7:71:93:d2:74:23:
                    f0:12:76:13:a0:36:a9:70:ac:b4:f6:be:25:a6:6e:
                    de:be:76:31:e0:e6:61:62:88:ca:0c:b8:79:07:2b:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:F5:84:5E:EE:74:27:2F:90:3C:ED:3A:02:F0:5A:91:EB:0F:2B
            X509v3 Authority Key Identifier:
                keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:0f:65:63:62:b7:62:38:36:f8:8d:db:fc:95:c6:f0:36:
         04:22:6e:69:52:f2:9b:ff:3f:f9:b0:7a:3f:70:15:3d:1c:0b:
         cc:6f:70:16:9c:8a:3c:19:cb:77:02:b0:2d:7a:a1:90:16:e8:
         83:6c:56:69:0e:20:60:fb:8b:4a:ed:ca:1e:fd:f4:34:e5:d0:
         a5:57:0e:e6:54:c9:1b:0b:b2:31:4c:c9:a5:ef:cb:98:b4:5c:
         5f:d9:30:72:2f:e2:ab:27:21:b3:e1:01:9c:00:ce:b4:a5:4d:
         6a:57:60:80:7b:88:26:c0:ca:35:f3:e7:b1:05:75:a9:10:31:
         64:b9:a4:2f:1c:e4:3d:4b:e6:40:c0:0d:b3:bd:92:2c:e0:04:
         ad:d3:02:f7:ef:4f:86:09:9e:63:7a:bb:30:3a:64:22:cd:63:
         ef:2e:db:0c:2c:25:a5:ed:ae:f5:83:17:f4:fc:60:63:e6:5b:
         7d:13:d4:26:22:a7:ed:39:5c:a2:4c:a9:b2:e3:2a:2a:d9:ec:
         e0:77:17:3f:ee:fe:06:7f:7b:11:2b:5c:c7:88:b6:7e:a6:f0:
         af:16:fe:e8:fe:dc:a1:84:0c:5b:78:0f:25:e3:46:90:da:0a:
         20:f2:91:d9:e0:12:ec:8b:36:6c:f1:96:71:7b:b3:27:b8:17:
         fc:c8:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----