Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          OD4xZDJVFuo2vSw7OkRgOVQrbB5o07FOzL+0HMA3Qcw=
Subject key identifier:   AC:F8:AF:76:EE:FB:88:FE:6B:92:1B:03:8B:C9:F3:4C:79:53:B8:35
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       01962DF3C86AF86044F56A5CF8547F233C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          06CF
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: pJxbAynYAVMuxCYI9fjMWPnEqnE.roa (hash: X09w84W5zdqhQp1J0A98/qFI2PJLHu66aEtf6RsnuSc=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: kEazW294VhirM5vDFPSTZoY+cXG9F09FCtIZElJorUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c8:6a:f8:60:44:f5:6a:5c:f8:54:7f:23:3c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=acf8af76eefb88fe6b921b038bc9f34c7953b835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:aa:1e:f8:1a:1e:ca:8d:d6:4a:d5:ef:09:
                    d5:0a:67:4c:07:e1:96:5b:31:da:66:ad:be:9d:c0:
                    f1:36:fc:74:27:c8:13:90:2c:d5:b8:da:3e:81:6d:
                    b3:42:e5:84:2d:f1:69:74:b7:b0:e2:ca:56:8c:a4:
                    18:f5:33:d2:78:64:45:a3:b8:36:65:31:3d:80:63:
                    9e:0d:0d:86:6f:23:4f:c9:6d:30:41:50:e5:04:27:
                    05:08:32:4c:31:b4:d0:f3:96:23:9c:92:cd:c0:ad:
                    b5:f0:31:8d:98:b6:a3:b9:61:7f:46:77:fa:bd:70:
                    61:7d:d2:24:ba:fa:84:05:5c:54:63:5f:b3:67:d6:
                    ca:f1:1a:88:67:9a:63:65:c1:99:73:1c:44:97:05:
                    50:7a:df:9a:f2:42:99:1a:38:b3:7c:d0:f6:0e:6a:
                    44:90:5d:fc:d0:70:d4:2a:f3:47:84:39:b8:72:cb:
                    65:5d:73:28:d9:e6:ad:8b:aa:7f:fd:02:a9:04:54:
                    9d:6a:5b:06:7b:f8:de:8f:d9:da:b7:0a:93:ea:d2:
                    6a:fc:87:3f:10:11:fc:b0:93:01:81:a6:42:90:41:
                    b8:db:2c:28:b6:ec:57:43:ee:7c:0d:2f:dc:e4:cc:
                    98:8b:64:e5:dd:a2:f8:a2:62:f4:00:42:67:50:8d:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:AF:76:EE:FB:88:FE:6B:92:1B:03:8B:C9:F3:4C:79:53:B8:35
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:64:f6:33:b1:02:5e:73:12:90:a7:f1:7a:1c:92:4a:5c:
         a4:10:38:b0:f8:ca:61:2b:21:1d:64:35:2a:7b:a9:50:73:54:
         5f:57:6b:f2:f1:d5:fb:94:86:2b:e5:06:9d:a1:ff:cb:fa:6e:
         87:0e:b2:77:1f:58:ce:7b:5e:89:17:99:eb:e5:71:8c:46:04:
         85:18:f1:f9:cc:a7:88:af:17:2f:0c:83:0d:89:8d:e8:a3:23:
         30:4a:ea:95:d1:a7:8a:1e:79:cc:c4:49:78:89:5c:c3:94:89:
         a9:46:80:81:d2:bb:ee:a7:cb:d1:c6:c7:2f:d2:b9:d4:4a:2f:
         0b:03:92:0f:4b:3c:ae:37:aa:ae:b9:02:c0:6f:61:c8:d7:f1:
         9e:9b:3f:5f:56:5c:33:89:62:1c:be:3f:31:8a:77:00:b1:78:
         b3:a6:c5:53:45:f7:3a:d4:4c:3b:09:c6:6d:80:d4:b6:76:63:
         12:0d:16:c3:ed:f5:a3:c3:6e:ce:0d:ce:c1:8a:35:10:ff:30:
         7c:d4:a9:74:f0:f3:c4:8a:48:02:ea:db:98:5d:db:43:30:d4:
         48:e7:d7:80:17:18:d2:a7:05:f6:eb:e2:25:ed:87:d5:68:42:
         74:6e:51:10:1e:5f:ea:a2:c9:39:73:b6:8b:d0:d7:8b:06:20:
         56:a4:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----