Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File:                     Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier:          wfltINAA/VWBR2ypYwJKUAN8BbPnZzc7F+lxoUFrFIU=
Subject key identifier:   49:EB:9C:2D:55:B7:E6:0F:3D:8E:46:CD:D3:D3:31:F5:89:30:6B:ED
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer:       /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial:       01962F3D662CA9D826FBE22D762539D442C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number:          0F7C
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
                          2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: REV8tW1zAqDf2xPZgynB/OM1bOninDN1Agiw0T3TNbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:2c:a9:d8:26:fb:e2:2d:76:25:39:d4:42:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=49eb9c2d55b7e60f3d8e46cdd3d331f589306bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:c9:83:2c:40:03:74:22:2c:67:4a:6b:1a:
                    28:dc:ac:b0:71:13:d5:99:02:ba:c8:59:f7:3f:dc:
                    4a:60:46:5f:fd:56:5b:d9:c0:6f:35:2b:f1:be:49:
                    95:f4:7a:f2:45:9a:6e:af:ab:45:f1:13:29:f1:2a:
                    70:e5:fe:5c:ea:7e:f1:fb:92:3a:42:9d:28:c2:dd:
                    dc:5f:73:57:6a:24:11:cd:07:41:aa:09:af:6f:d3:
                    78:21:bf:25:a7:03:c5:d7:d3:09:0a:5b:cb:05:c4:
                    40:02:10:f9:f5:62:26:d8:a7:17:1a:a5:fe:b5:c3:
                    72:b2:fe:c8:fa:5d:70:c6:18:e2:41:a1:01:7a:b2:
                    a8:cb:6f:21:c3:15:b0:88:3c:14:03:9a:c0:1d:5d:
                    90:cf:72:71:a3:87:03:0e:d6:0f:96:e4:7b:6f:24:
                    af:14:54:7c:bd:cb:c4:d7:9c:8f:60:77:8c:cf:5a:
                    91:50:90:9f:31:c9:f1:cd:40:e4:f1:5e:ad:ab:23:
                    35:02:4b:ef:8e:21:68:de:3c:fa:2c:2b:4e:87:21:
                    6b:a4:d0:b2:19:aa:05:4a:72:bb:11:6f:0f:e4:70:
                    db:90:bb:7b:05:79:53:2f:79:68:99:22:0a:39:a3:
                    80:10:44:37:04:9c:ee:04:4b:2b:e9:64:9b:7c:fc:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:9C:2D:55:B7:E6:0F:3D:8E:46:CD:D3:D3:31:F5:89:30:6B:ED
            X509v3 Authority Key Identifier:
                keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:d1:34:03:d4:5f:eb:bc:e1:2c:26:4c:d0:83:1f:9d:fb:
         b5:85:08:73:a6:8d:49:93:83:cf:cf:4f:d8:9c:19:69:f6:14:
         bc:cf:a4:f4:9b:89:ad:a1:58:af:35:8c:48:ad:1e:42:05:a3:
         6e:83:1d:d9:b9:19:74:54:3c:6d:1f:11:5c:0b:95:9e:31:a9:
         da:6f:39:4e:02:18:d1:59:5c:eb:55:3a:44:8c:52:6d:94:da:
         fa:31:64:5b:30:29:7c:b6:84:3a:f3:08:54:22:bb:7c:76:4c:
         43:9d:83:49:c7:cb:a7:33:0d:b1:8e:af:00:dd:4a:38:c0:04:
         68:d2:1c:4c:8e:f5:70:07:de:37:17:bb:cb:c6:73:db:43:6d:
         5e:71:9f:44:dd:36:e4:b2:cd:6c:d2:d8:55:68:14:7d:c2:ab:
         d1:4d:79:29:fb:81:2e:07:02:5f:8c:0f:47:4a:4e:bf:bf:57:
         bc:d7:88:f4:06:70:fa:6d:57:10:c1:db:ff:6e:7e:dc:63:6c:
         a5:00:c6:f5:2d:06:8a:ce:32:1c:cf:1a:d5:32:5b:67:14:ce:
         ad:4b:7d:e6:ae:fb:46:82:6f:a5:b5:bd:b1:92:b6:16:37:a7:
         5d:e8:85:1e:46:4d:3c:23:67:58:e7:71:44:f8:34:42:a5:85:
         70:aa:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----