Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          EI3EbyyY6aoRL30mg+B/sRoFRsrKTPaFhhtNsgwIIGw=
Subject key identifier:   A4:FA:4E:E3:D3:83:6C:21:85:CE:61:DD:19:90:AD:DD:5A:02:57:F0
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       01962FAB799DEBF40FCD6548682C2100AF6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=)
                          2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=)
                          3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=)
                          4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=)
                          5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=)
                          6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=)
                          7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=)
                          8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=)
                          9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=)
                          10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=)
                          11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=)
                          12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=)
                          13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: wrXb6i5ZxJQxXDXDREczrDdo/z2PRwNYy8T8OZ2a9i0=)
                          14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:9d:eb:f4:0f:cd:65:48:68:2c:21:00:af:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=a4fa4ee3d3836c2185ce61dd1990addd5a0257f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:a9:52:a5:93:82:88:32:01:33:1a:50:84:
                    d5:93:6f:00:45:dd:81:bf:02:21:4d:bc:3e:b3:4a:
                    8d:dd:76:ca:4a:a5:ef:cf:05:5f:3f:bf:23:74:6d:
                    b6:ea:e3:22:ad:08:4a:47:d3:9c:f6:d3:5f:c5:d3:
                    cf:61:7f:88:2f:f4:88:f5:c9:2b:b8:74:fb:7a:8b:
                    a0:70:ca:1c:3d:5c:26:1d:be:26:84:6b:04:02:83:
                    5d:df:22:52:9f:b8:1d:a1:95:04:38:07:08:61:14:
                    2b:6e:27:24:0f:ac:c2:df:40:02:79:5f:93:ec:51:
                    50:cf:43:af:69:5c:7a:1b:9e:28:e1:13:cb:10:04:
                    b6:47:3d:9c:ad:10:b7:64:97:02:91:aa:ce:3e:b8:
                    48:c1:0e:3e:25:dd:6f:33:25:aa:80:4a:d2:75:ea:
                    93:b1:14:74:1c:90:94:1c:5f:af:57:27:f2:04:1f:
                    ba:3a:52:26:45:06:1f:49:8d:9c:0a:9a:42:ff:f3:
                    ea:4c:4d:cd:10:c9:5a:dd:54:ae:a7:a0:52:71:c3:
                    5b:05:40:3e:ca:56:dc:85:b7:12:88:b6:e1:48:80:
                    b0:54:f8:bc:20:0d:98:56:88:94:79:42:cd:a4:dc:
                    6f:d0:49:d2:6e:0a:e8:e4:65:c6:db:10:e7:6d:18:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:4E:E3:D3:83:6C:21:85:CE:61:DD:19:90:AD:DD:5A:02:57:F0
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:04:45:18:53:06:ea:5d:de:68:22:bb:1b:46:27:15:8b:73:
         dc:df:2b:ca:91:e7:c7:6a:c5:45:96:7f:cd:45:e6:84:5f:e2:
         18:95:25:77:c8:73:54:80:c6:bf:a0:cf:c4:5c:35:37:e4:7b:
         91:f5:d1:89:17:57:b4:42:bf:84:fe:f7:fd:14:e8:db:bd:7a:
         ef:e8:e8:66:97:58:ff:c5:92:8f:14:99:8f:c7:43:4e:c4:4e:
         fc:7f:c1:12:ac:3a:bb:7f:21:42:1f:5d:44:2d:a5:64:14:a1:
         97:b0:70:78:21:64:2c:e6:44:de:b3:1b:e6:27:e0:5d:25:b6:
         8b:b0:58:29:9a:cf:ef:09:17:13:28:ec:48:bf:25:2d:32:ee:
         29:9f:e6:0b:54:dc:7a:91:3c:2f:c4:f2:73:b0:33:7a:e6:69:
         2f:b0:91:c3:a0:ec:db:53:92:dd:06:76:4f:77:5d:16:45:7c:
         8f:45:50:ce:0d:38:3d:c1:17:fd:26:72:87:78:ab:1e:5f:34:
         a0:9a:ec:5a:e8:4f:be:18:6a:e0:d8:74:ef:e7:84:0e:38:dc:
         09:b7:33:11:f2:4d:51:82:00:21:62:f6:e6:d0:18:63:11:28:
         5a:94:94:0b:b9:a4:cf:f6:d1:b6:e4:c6:65:ae:de:55:d4:b1:
         07:39:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----