Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File:                     vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier:          RIH1tRtTrmoakMivDC93D4vG6TwF5E9Y+NLHI1DcZb4=
Subject key identifier:   4D:77:48:CA:CA:67:1B:AB:B6:14:A2:8F:EF:9E:D2:55:A1:79:2A:7F
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer:       /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial:       01962E2AE0C0F1418B1F2F80C5B48F20C0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: iGx0ASbC0IY_V38PaAKzK-E2dmk.roa (hash: H2ehYzvvVTx5ItHmx2FObso7EsAZmXEeB6Z16rR/dFQ=)
                          2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: 41xmXdNyFcwGLgtrzB6ZspUgaUaFxpqu3+8i750NFlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:c0:f1:41:8b:1f:2f:80:c5:b4:8f:20:c0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=4d7748caca671babb614a28fef9ed255a1792a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:a7:0a:81:4c:99:1d:b3:94:ec:d5:44:39:
                    4a:c7:1c:d7:52:d1:e6:b3:2c:25:46:20:29:1b:84:
                    4b:fd:1d:24:01:a0:be:05:ab:b2:04:24:81:5e:d7:
                    7e:2c:2e:b2:c7:09:f9:86:c6:ef:e5:96:15:26:9a:
                    44:fa:f5:76:aa:6a:c4:1b:40:64:d0:1b:05:3b:da:
                    97:d8:d8:19:48:22:bd:fc:31:6d:72:e0:fc:b6:37:
                    06:a4:98:cb:0b:89:ce:46:f5:eb:51:da:db:8c:98:
                    ef:3a:8a:44:45:18:6d:3a:b8:9e:03:9e:42:84:ad:
                    23:24:a6:b4:e3:54:b3:d2:f2:a7:4d:b7:1e:3c:28:
                    8b:70:a4:fc:be:6d:84:b7:0e:66:1d:8b:00:a7:db:
                    19:71:b2:7e:16:76:ca:04:71:ca:c1:2c:90:e6:4f:
                    86:5f:07:c0:dc:dc:08:77:75:b4:19:d8:1d:98:b8:
                    dd:27:a5:b8:a5:00:13:2a:e0:ba:fa:e4:0f:80:40:
                    a0:57:8b:11:91:6e:34:55:2b:17:40:d7:9e:ef:77:
                    c0:f7:bb:d6:95:21:b8:4b:e4:55:26:c0:21:9f:a9:
                    26:f0:ac:18:c5:b5:fd:f5:33:ad:11:bb:96:97:20:
                    c3:98:ed:16:e5:a5:8d:cf:55:d2:38:6b:02:29:e0:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:48:CA:CA:67:1B:AB:B6:14:A2:8F:EF:9E:D2:55:A1:79:2A:7F
            X509v3 Authority Key Identifier:
                keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:8a:0c:a3:ba:34:a2:84:c6:98:c5:ea:98:25:d8:c6:5d:
         7d:ca:db:9d:07:c8:10:52:14:70:84:fd:7d:5b:b1:64:15:a0:
         a8:89:d3:77:23:53:57:db:7d:0f:7b:74:76:af:0b:97:49:64:
         6a:a1:8f:6e:f7:64:3b:6f:df:10:63:62:3e:c4:a8:e2:e5:7d:
         2b:e2:fe:e7:31:ac:24:fe:44:51:5b:d6:d2:f1:fe:53:ec:f3:
         5c:68:eb:91:0f:1e:5a:5b:bd:cb:d5:24:d8:e5:6b:f4:bb:cb:
         11:39:17:e0:0e:65:5f:e2:ee:5e:74:b6:5e:75:44:e7:cb:a9:
         3b:f9:8a:79:c4:dc:11:50:74:18:ac:63:ad:d3:35:41:7c:77:
         e7:ce:6f:85:32:11:95:59:cf:99:47:73:a4:6c:00:9f:47:87:
         16:da:6e:d1:1a:c5:9f:9e:3c:27:a8:93:87:5f:c7:11:d0:51:
         94:3a:b5:ef:02:e5:2b:02:67:05:b9:65:76:f5:0e:18:57:32:
         36:85:de:b0:3b:85:31:fe:34:6a:3e:3b:4f:2a:a4:ab:25:79:
         2f:4d:44:30:fe:c7:18:64:c7:ad:83:0d:85:0d:8e:c5:a7:58:
         8a:bf:a8:7f:7a:47:50:d9:b2:06:8a:34:e9:7d:de:60:e7:8d:
         bc:bc:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----