Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File:                     vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier:          LLOFyMIJK2PVr6PNonJyWvW7SJduLEirImfiPZGeogI=
Subject key identifier:   0E:5B:B5:7F:72:90:15:0E:18:31:D0:47:2A:E6:81:59:A8:64:5A:5B
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer:       /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial:       01962F3D6478FBC8F9A524C1683B38ADC9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number:          146A
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
                          2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: F28F0h9aL5zgKaIMwzC40b+49Ej/IyY8VSsgANc6kwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:64:78:fb:c8:f9:a5:24:c1:68:3b:38:ad:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=0e5bb57f7290150e1831d0472ae68159a8645a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:9c:cd:11:34:20:01:49:ee:9a:ec:3b:5a:
                    50:1b:61:7f:a4:86:32:4b:4d:cd:3a:a6:79:ef:2a:
                    52:34:da:aa:6a:00:f8:c1:ad:07:ed:da:cc:91:1b:
                    88:f0:ff:58:56:79:f2:05:7b:25:0f:ab:d6:59:69:
                    5d:57:32:82:65:2e:4f:a6:86:ac:6e:05:73:db:28:
                    41:c0:28:12:0f:68:48:7e:6d:5d:f1:3f:a3:af:1d:
                    8e:81:10:59:f4:4a:62:07:ef:7c:87:60:c3:a6:3c:
                    38:9d:ff:db:7e:75:62:15:e9:95:f3:0b:37:d2:58:
                    f9:f0:8e:a4:e0:2a:0d:d2:99:70:da:82:d9:73:a5:
                    91:37:28:c8:4b:98:84:d7:bd:e7:1e:c7:1a:f4:53:
                    ee:f8:95:5d:88:64:a2:09:fa:c5:1e:73:38:20:db:
                    e1:71:d2:c9:34:57:a3:70:62:7a:0c:f4:97:2c:0e:
                    5b:d3:93:30:b5:44:49:40:23:bd:4a:ab:8d:59:90:
                    8b:31:76:74:19:2c:ac:4a:8c:45:3c:58:19:28:83:
                    25:c6:0b:9f:75:f7:e0:d1:bf:7f:b8:26:60:8f:15:
                    16:e1:33:0b:a2:88:7a:d9:f7:6f:ef:a4:08:35:ce:
                    cd:aa:ee:8d:41:e6:84:97:16:49:f3:53:d0:1a:c6:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5B:B5:7F:72:90:15:0E:18:31:D0:47:2A:E6:81:59:A8:64:5A:5B
            X509v3 Authority Key Identifier:
                keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:a8:90:f5:45:81:88:c5:c9:7d:7d:96:dd:ed:e1:f7:80:
         e4:75:4e:f8:b3:4b:c0:2b:f0:d0:b8:48:68:11:8d:3c:30:4a:
         c0:b4:17:f5:b3:c9:84:a0:d2:5e:a0:b5:61:fb:01:23:a4:f7:
         d3:dc:02:6b:20:72:68:3b:20:7c:90:f9:4a:81:61:9f:a7:ef:
         27:da:d3:9d:fa:81:c0:6f:37:f4:74:de:68:50:c3:24:b9:23:
         86:6f:ab:b2:de:39:f6:b8:70:d0:fb:d1:4f:fd:26:5f:c4:84:
         6b:26:00:fc:bd:56:f8:ff:f0:fa:07:ea:76:72:33:bb:1e:61:
         d7:dc:b5:72:66:8d:df:80:3d:38:d3:e0:96:85:0b:97:7b:6f:
         1c:e4:1a:61:49:36:ff:78:eb:6f:75:40:7e:1e:09:3a:ac:02:
         2a:29:81:1f:c9:45:51:5a:5f:4d:08:eb:48:18:ee:bb:28:9e:
         28:e3:f1:71:0f:d7:d9:1a:42:c0:fa:5d:50:35:90:8d:72:50:
         57:6a:22:0f:de:82:60:9f:3e:15:5e:0f:32:d3:c3:5d:da:15:
         2d:96:7f:e2:00:df:6a:f4:b5:ec:f5:69:69:9b:a9:80:59:dc:
         91:af:06:9f:b9:ce:10:4d:84:6c:46:21:27:0a:e0:ec:dc:ab:
         c6:4f:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----