Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          H3bsUWQ2ixPaB2MyPRKz0MIhwTRSwqXsaXGeV9x+hMY=
Subject key identifier:   1F:B0:CB:A7:2D:6C:B9:6A:91:EB:89:8D:9F:46:52:3F:1A:E0:B2:E0
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       01962E98642F47C1757D25C0876598BC7C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 4QrnT_XJTlF0PYSILolpGGuemuA.roa (hash: ciXZfxtZULDs53T0jmGQdh2nATSMcvG+lkh6H0M894k=)
                          2: HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa (hash: 1rwGaSaF+TCLDzH6gzPE1D/ug+G6OIuBh6+9zI6sNQk=)
                          3: NbRmZt6RSfP6iqfHak1bMrr79pU.roa (hash: AH4SWAW98wWueZRIy8qKwKk1DzljGkyjoMlDMde17AI=)
                          4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: JTseSN8Y5SpzO7ytXjUeDnIQG0SxCUmtYYKrLXTHZTU=)
                          5: petiIsIFbviSTRyaoMc5UMub-wE.roa (hash: l4qT7ZrSLWFzhclk+OXfLseDA6eVzRRK9BUNH6axnkY=)
                          6: qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa (hash: z4ijdqK6o/r9aonAGs2f4PTbJOqb1W3B/P9cGQoGZrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:2f:47:c1:75:7d:25:c0:87:65:98:bc:7c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=1fb0cba72d6cb96a91eb898d9f46523f1ae0b2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:5e:cb:02:75:83:b5:d1:26:e2:bb:4d:29:
                    d0:e5:75:4a:d8:b5:7d:39:6d:6e:3b:76:21:96:1b:
                    f0:2e:43:81:c3:e6:98:25:6d:12:0f:6b:38:a0:29:
                    70:82:8d:d2:59:8d:9d:b1:e8:37:4c:e5:ec:a5:7e:
                    38:f2:98:38:5e:f7:2f:90:dd:10:f2:e0:a5:61:aa:
                    af:49:46:73:0e:8c:e8:e3:2c:cf:51:3d:da:ce:e6:
                    f9:fb:d6:2f:5b:be:55:3c:e0:b7:1c:ff:d2:87:29:
                    98:ac:8e:57:a3:1f:7d:80:d1:ed:19:0f:6a:de:67:
                    44:31:5d:b0:38:47:86:db:0d:14:b7:59:7f:40:9d:
                    9b:ac:13:0a:05:d9:19:b2:4c:08:ad:7e:9e:47:e5:
                    a9:ef:6c:0d:b3:d9:57:fe:c7:0b:90:3b:93:3c:99:
                    af:0e:98:7a:2e:06:dc:31:8c:3e:4d:5a:b9:59:3f:
                    10:bc:9a:70:6a:59:e2:54:65:a8:81:e0:1b:af:1b:
                    1c:60:2d:70:a2:42:57:0e:e2:f4:f9:a9:f8:a1:8c:
                    47:65:2c:83:5a:04:94:b3:b3:c9:e7:08:d5:00:c0:
                    58:15:09:ca:50:95:83:5c:d0:65:ec:f8:f9:4c:1c:
                    34:17:a4:4d:d3:cc:c9:a4:65:8c:6c:34:e5:09:29:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B0:CB:A7:2D:6C:B9:6A:91:EB:89:8D:9F:46:52:3F:1A:E0:B2:E0
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cb:26:71:f9:5a:25:ad:75:11:ff:fb:06:e5:0e:45:1d:dd:
         fd:96:71:a9:2f:0a:04:24:96:86:c1:69:b8:82:b7:b5:0f:44:
         5b:d3:0c:4b:0a:ef:24:11:ca:d9:31:95:ca:ca:ed:02:9f:68:
         3b:10:b7:45:3c:b2:d6:99:82:d0:5d:fb:1c:cd:52:62:e9:a1:
         7a:93:9a:b5:d6:f4:1e:a7:23:d8:c1:8d:55:ce:30:2f:7a:cd:
         a5:7a:5f:27:53:ae:71:c6:97:46:eb:68:aa:84:ab:21:8b:03:
         b8:d1:5d:89:ab:8e:af:4c:eb:53:f8:b2:2b:aa:a3:53:21:f0:
         d4:0e:84:82:bc:3e:4b:c5:cc:39:cb:f3:3f:b2:81:72:67:b8:
         5c:d0:da:9f:a5:c6:f3:b5:33:de:72:5f:fd:d5:6e:a4:7f:e1:
         75:30:ef:d5:1c:41:c4:1d:47:3d:5b:5c:f1:77:47:00:69:64:
         e8:59:7a:b1:f2:e6:54:ac:49:ef:98:31:e0:14:b4:fe:2b:77:
         db:27:39:31:6d:c5:7b:52:8e:5d:a7:82:de:35:1c:d5:9a:fe:
         2d:70:ce:12:49:09:fc:1f:60:0d:93:1c:47:55:65:db:59:e3:
         35:1a:33:54:39:f9:65:6c:82:98:e3:8e:bc:08:e9:8d:41:30:
         5e:db:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----