Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier:          ZGxUVQaBmKDNaHU739AJ1tdznOrb4m/XLo7xK4RD/aM=
Subject key identifier:   16:77:6F:D7:95:D5:63:4F:F8:F6:6E:B0:9F:A3:66:02:B5:25:42:26
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer:       /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial:       01962F06DD3C129FF8D2A003CCDFE9D9CE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number:          0356
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: LvZTBLU3QlfCOkA99Ndts0Y+unYm5F66cgsGif5CVSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:3c:12:9f:f8:d2:a0:03:cc:df:e9:d9:ce:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=16776fd795d5634ff8f66eb09fa36602b5254226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:d7:c9:b1:91:61:fb:23:81:d6:37:d6:50:
                    c9:a5:a1:63:94:65:9e:14:81:23:f7:cc:8e:c0:b8:
                    bf:d1:71:d8:57:51:02:a6:ef:aa:5a:ff:c8:97:6a:
                    45:65:dc:ce:b9:d4:d2:06:91:20:fc:cc:79:63:84:
                    7a:f2:c1:ad:28:7d:94:cf:a8:32:3b:73:68:67:df:
                    cf:e8:95:fc:8e:8d:ac:5e:10:a4:cb:33:99:65:47:
                    cd:56:81:9c:26:cd:b0:7f:06:96:ee:19:b6:5a:d7:
                    82:e1:a2:3f:21:31:7d:59:2f:63:17:5a:60:11:e7:
                    52:e5:60:e2:ab:53:65:8d:3a:24:81:74:ff:1d:f2:
                    41:68:b1:52:36:85:21:3e:c4:1c:be:4a:73:ab:25:
                    b3:16:86:fe:c2:d9:0e:b7:ab:2f:b3:89:2c:ac:af:
                    42:35:05:a9:48:42:56:77:83:a0:4c:7b:f7:33:51:
                    5d:7f:88:00:12:77:de:c3:99:07:ea:7e:c2:c5:58:
                    44:a3:40:20:a3:ba:03:0b:17:4a:8b:75:ea:ad:86:
                    1e:ed:a4:51:6b:29:99:31:84:6c:15:f7:cf:e0:68:
                    c6:e1:60:a8:f8:b1:00:d9:bc:de:4f:ec:10:ad:37:
                    16:98:4e:0c:50:33:4e:bb:27:dc:35:46:20:f2:04:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:6F:D7:95:D5:63:4F:F8:F6:6E:B0:9F:A3:66:02:B5:25:42:26
            X509v3 Authority Key Identifier:
                keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:ab:4f:72:58:ef:86:fb:1f:72:b8:b8:ee:e9:81:34:91:
         76:48:e4:8e:73:81:74:ba:cd:e4:6e:b8:bd:22:7b:b4:04:f9:
         c7:4e:4d:aa:5c:85:8d:22:7c:79:16:f1:ba:02:07:e4:45:68:
         99:3c:16:94:8b:de:04:81:6c:d9:83:6c:a4:1f:ed:42:8e:9e:
         44:2e:37:3a:bc:03:f8:cd:ab:2f:57:de:af:7d:74:59:6f:f1:
         47:19:ba:a1:63:76:10:83:87:90:1a:04:d0:71:8f:76:b7:15:
         da:eb:9b:e3:e8:e9:dd:65:e2:12:12:5d:72:82:1e:80:5f:97:
         9d:c7:75:5e:c9:b5:48:29:6a:d4:07:7c:37:b1:8d:af:01:5a:
         c5:2e:99:c2:2d:e3:0f:9c:49:53:90:b8:41:21:3d:5c:37:9b:
         74:97:f8:f7:08:e9:ee:5f:64:26:6e:96:c3:01:f6:0f:40:c9:
         29:52:bb:03:80:d3:7c:55:4f:e7:ed:5c:02:ea:94:70:5e:5b:
         dd:2c:a8:5e:a3:83:87:56:37:5d:5b:8f:a7:f9:e0:40:d3:62:
         f0:8a:b4:a2:aa:ba:61:9d:df:64:40:ee:0c:58:6e:4a:48:b2:
         2e:d7:21:63:4a:b5:41:5e:9d:69:b7:1e:8e:94:8e:2f:1f:c6:
         f2:4d:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----