Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File:                     vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier:          G5X/9YLCTIPgX0IzmGmdTL5LSE+SwyxwbaZRaVzNgeI=
Subject key identifier:   64:3D:68:E3:C2:0B:40:50:12:28:C8:A4:0D:0C:94:0C:41:72:EF:EE
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer:       /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial:       01962ECF4FE5775089B1E62E59B10FEE4EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
                          2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: oF0W3xP9WVFBBx06OHAzrRsdFj7CYtCRBaDTy7DVjU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:e5:77:50:89:b1:e6:2e:59:b1:0f:ee:4e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=643d68e3c20b40501228c8a40d0c940c4172efee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:46:60:79:d8:e3:8a:49:e5:0c:83:d9:2f:
                    a8:65:32:dd:90:d9:8e:0b:1d:40:92:2b:ed:38:fa:
                    25:96:d6:17:54:4e:6f:3b:35:82:53:c0:96:34:ec:
                    30:99:de:a5:b5:b5:29:0f:92:f9:82:5e:51:3f:1c:
                    6a:07:c7:c2:5c:2c:94:18:99:06:c6:a7:53:3c:95:
                    8d:af:b1:6b:6a:5f:7b:2f:75:92:2e:23:48:32:ba:
                    ae:4d:be:38:60:0b:fa:e2:67:03:d3:9e:45:91:ca:
                    b9:fa:d3:01:1b:d3:59:da:d2:27:58:ee:11:d7:e3:
                    9a:6c:2a:9b:7c:55:1d:0f:5a:d7:28:33:8d:5d:4b:
                    18:1e:af:91:e0:83:3a:ac:c1:1f:53:cd:6f:98:36:
                    8e:e8:c5:24:57:c8:13:2d:46:a0:0a:1e:5c:7c:5d:
                    8a:00:48:8f:c9:51:9b:cc:52:f0:c9:23:9d:ce:24:
                    af:31:a9:8b:6e:c1:54:d1:62:da:da:17:08:15:5c:
                    88:24:45:e7:a8:cd:ee:88:f3:f7:30:d3:43:4b:88:
                    21:59:f6:8f:78:ba:ed:4b:de:55:39:b5:34:dd:c2:
                    f3:0d:aa:8b:44:91:6e:ab:e5:d2:b3:5c:05:0a:bc:
                    b9:7f:5e:92:1c:28:ac:29:2b:01:a6:cb:b1:89:5f:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:68:E3:C2:0B:40:50:12:28:C8:A4:0D:0C:94:0C:41:72:EF:EE
            X509v3 Authority Key Identifier:
                keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:0f:49:87:57:3b:f1:e0:d3:5f:44:04:df:e4:4f:b8:36:
         5d:d4:5b:74:9a:67:03:60:77:49:73:a2:61:b2:13:e6:af:6b:
         32:7a:ca:ef:19:a9:9f:a4:08:d5:ea:5a:3f:1c:21:16:56:29:
         09:c8:d3:90:4f:c2:57:c9:c6:98:29:f1:45:ad:64:7d:d9:d0:
         44:01:69:0b:70:0d:44:19:b6:9e:73:fb:16:5e:93:02:44:22:
         41:9f:ab:d3:5f:3f:6d:a0:0d:cf:90:5a:42:47:6e:18:7c:0a:
         f2:69:fd:fd:c0:b2:d0:b4:7e:c5:8f:60:e3:a9:ac:7c:c6:36:
         54:be:bf:fa:be:7a:00:45:9d:90:69:2b:9a:d6:bb:8a:2a:d9:
         aa:90:9b:30:d8:15:36:ec:53:47:69:1a:88:aa:ad:65:3f:d9:
         d3:d3:05:48:14:6c:95:45:27:11:cf:34:48:10:2c:45:c0:34:
         a8:a6:88:61:dd:f2:d9:76:52:90:cc:99:3d:b5:73:f0:37:b8:
         95:38:c9:1c:4b:6e:8c:45:09:22:5a:f9:55:0f:f2:f5:fa:56:
         07:dd:b7:b4:ef:8c:aa:f9:31:46:c1:ca:3e:30:ed:4c:6c:d7:
         c7:f2:79:43:96:36:f9:18:c1:35:90:3a:54:dd:90:cb:2a:76:
         31:f9:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----