Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
File:                     vxfVoihiEhe4cYVdRhG8pGTg5iA.mft (raw, json)
Hash identifier:          BwQ765ZjvIDryuWiCVyGsgVwDF2po3eR5jSMWrTIy/w=
Subject key identifier:   F7:99:32:2E:31:E6:42:EA:61:49:5B:9B:3E:91:BA:0C:91:E1:6D:C5
Authority key identifier: BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
Certificate issuer:       /CN=bf17d5a228621217b871855d4611bca464e0e620
Certificate serial:       01948E506072B9BA563F245F14632C27E249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
Manifest number:          0243
Signing time:             Wed 22 Jan 2025 14:00:19 +0000
Manifest this update:     Wed 22 Jan 2025 14:00:19 +0000
Manifest next update:     Thu 23 Jan 2025 14:00:19 +0000
Files and hashes:         1: vxfVoihiEhe4cYVdRhG8pGTg5iA.crl (hash: MaSTzkEjEq02sb8I4pd+MUzouyHb4P8VtbflZRhy70M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:50:60:72:b9:ba:56:3f:24:5f:14:63:2c:27:e2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf17d5a228621217b871855d4611bca464e0e620
        Validity
            Not Before: Jan 22 14:00:19 2025 GMT
            Not After : Jan 23 14:00:19 2025 GMT
        Subject: CN=f799322e31e642ea61495b9b3e91ba0c91e16dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:11:b3:40:4e:dc:2b:1a:ec:78:22:7f:fd:
                    a4:2b:36:1d:d8:d4:20:4d:8f:29:7b:c2:55:75:8b:
                    e0:4e:5d:c2:05:7c:e8:d0:02:8e:60:4c:cc:1c:fc:
                    e5:8d:38:ee:96:6a:ad:dc:9e:10:18:f7:da:fd:b7:
                    75:e4:74:62:6a:58:be:94:8e:aa:15:48:97:9a:e3:
                    30:29:5a:ee:6b:a6:38:4e:95:dd:8b:b8:b1:93:ab:
                    1e:5f:cb:9c:01:e5:c7:e7:0e:2a:fb:74:61:09:2b:
                    bb:4a:9e:3a:ae:96:13:0d:da:5c:9f:90:d0:9b:d0:
                    5f:eb:a6:c6:7f:7f:11:b7:2d:f7:ae:8d:e6:fc:94:
                    a4:ba:a7:d0:7a:1b:e9:ca:23:d6:b1:da:23:c8:01:
                    42:f1:28:b1:64:a8:17:93:10:2c:45:2a:68:86:1a:
                    30:e4:9d:8c:7d:2b:e1:a3:d4:9b:32:dc:e8:72:8f:
                    fc:8d:e8:f1:08:5b:fe:b4:19:e4:f1:78:a0:a2:67:
                    81:c4:97:33:8a:a9:56:38:13:11:bb:24:5d:d3:a6:
                    cc:12:27:e5:2e:f4:67:c6:be:36:97:f7:ed:22:7e:
                    37:33:85:c6:8c:18:e4:eb:26:6b:e8:03:5c:38:31:
                    8c:c0:a4:b6:23:f9:50:da:92:f2:8e:db:fc:49:15:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:32:2E:31:E6:42:EA:61:49:5B:9B:3E:91:BA:0C:91:E1:6D:C5
            X509v3 Authority Key Identifier:
                keyid:BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:5b:d5:09:7c:35:56:f9:18:ee:f7:21:97:aa:66:ba:0e:40:
         a9:74:a3:9f:cd:50:4d:7e:e8:10:8c:2f:ef:a0:f1:7b:04:c9:
         0a:7c:58:a1:49:27:2a:5c:c3:7a:a7:74:23:dc:4c:18:98:d1:
         34:81:29:2f:70:ce:9a:0c:13:da:6c:a7:b3:8b:61:a6:5d:16:
         b2:85:b3:31:17:ba:35:95:5a:27:cb:ab:70:5b:9a:ee:f8:7d:
         bb:c8:fe:39:32:6d:0c:94:3b:7c:58:ab:96:4d:b9:65:c0:be:
         d3:8b:a9:28:b4:41:96:3c:41:43:ee:70:ec:81:dc:f5:8d:97:
         9b:6b:cb:a1:d2:1c:33:bc:30:d2:37:86:5b:2e:fb:70:65:3a:
         10:ed:3f:96:2f:1c:94:0c:3c:7c:79:aa:79:ca:00:06:55:2a:
         4f:50:f3:b5:1f:13:58:a8:39:33:92:c8:39:aa:b1:80:62:41:
         49:a9:06:cc:09:a5:6a:31:c9:97:bd:a2:ef:e0:7d:ae:52:89:
         35:82:04:ac:a4:e2:c6:ca:ef:10:d1:86:3b:8e:ee:12:07:1f:
         fb:f1:23:b9:b4:7a:6a:79:47:07:d6:ce:c0:56:68:5b:b4:dc:
         cd:b1:ba:23:49:9a:b8:14:11:92:74:d4:59:46:36:f9:e1:5a:
         a1:fb:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----