Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File:                     v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier:          Nju8ccSolzjz7XaOz/vm6KYYGQwJV5sBPbkKSb4Tm3c=
Subject key identifier:   71:40:17:F3:56:6F:1A:11:4D:89:E2:3C:E6:4C:4E:04:DD:07:65:A9
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer:       /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial:       01962F070715E75F728D96215283FB9E8B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number:          1209
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: /FIQgZgA95nNuB9sPuD+tVF7r9XGd0m881BU26Cxmlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:15:e7:5f:72:8d:96:21:52:83:fb:9e:8b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=714017f3566f1a114d89e23ce64c4e04dd0765a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:97:01:03:b5:28:03:a3:16:88:49:16:1d:
                    f5:0f:a3:36:5c:10:ff:4a:6d:59:de:3d:41:b6:d6:
                    61:2a:15:d4:a3:7a:20:6f:b3:60:7c:b5:32:d2:42:
                    8c:a8:87:98:1c:78:a6:e1:36:08:24:d2:72:62:46:
                    30:2b:e1:6a:86:88:98:98:5d:7d:20:cc:96:0e:1e:
                    b8:91:5f:12:5a:68:85:4d:2e:32:97:c6:72:0b:03:
                    94:4d:4b:12:fa:5a:c4:63:11:1e:3d:b8:a5:f7:9c:
                    20:94:cd:5e:9e:6e:f4:a6:e8:3c:5f:e8:c0:a5:84:
                    02:d3:27:42:b6:35:8a:16:97:e0:2a:0e:79:02:cb:
                    5d:b8:07:06:6a:47:32:50:71:b3:68:85:86:cc:d3:
                    f3:1e:e2:95:ca:ed:35:6e:60:c0:b7:1d:4d:23:52:
                    ab:92:67:f8:c2:24:b7:2d:0b:e2:09:73:58:42:20:
                    81:32:2d:53:89:0e:3c:b9:75:91:71:93:d3:d6:a8:
                    5e:d3:e0:73:aa:eb:b7:22:89:fc:17:52:ea:a7:72:
                    78:a7:80:98:7b:29:0d:c0:bc:fc:e3:2e:9b:63:70:
                    a4:10:7f:74:3f:34:8b:bf:bf:f1:18:19:cc:d7:2f:
                    7f:90:35:05:93:29:2f:85:53:f3:a5:bd:c7:a6:cf:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:40:17:F3:56:6F:1A:11:4D:89:E2:3C:E6:4C:4E:04:DD:07:65:A9
            X509v3 Authority Key Identifier:
                keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:5d:ec:bd:95:22:b5:f3:67:de:a8:b6:7c:68:6e:3b:64:
         7b:8e:cd:4e:52:77:6a:7f:8e:10:35:b6:b2:b1:2b:9d:91:9c:
         04:00:68:95:f5:91:1a:28:b5:11:ff:44:04:9c:ff:16:50:1a:
         e6:ab:13:be:ee:bf:2d:ab:4c:7e:5f:ca:90:a7:7b:fc:6f:c3:
         10:84:fc:8c:e8:a8:70:d0:30:bf:c6:69:7c:f8:47:f7:4e:00:
         af:45:21:0f:0c:a0:a1:06:ca:37:37:cf:c0:61:4e:5f:15:23:
         d6:c8:2c:06:1b:67:87:07:d9:a5:57:16:b4:56:f8:d1:07:b2:
         ea:07:fd:c1:91:24:10:bc:79:7d:20:87:0a:7d:6f:bc:4c:aa:
         93:61:6e:38:e9:f1:ef:8e:5f:5c:00:c5:fe:ca:e0:a4:0e:48:
         77:ca:53:c4:e4:07:cb:d2:51:d3:c0:58:00:1a:c8:9b:b5:a6:
         e5:53:77:15:f7:2e:be:9c:af:b3:ce:56:9d:0e:d0:4d:f9:8e:
         31:6b:da:21:c1:bf:1e:50:60:3f:2b:48:f0:d5:ee:85:d8:8c:
         f6:45:d7:15:67:a1:46:d2:df:be:1e:ac:77:23:d2:3b:d3:a8:
         da:9f:ec:21:a7:67:e1:cc:ae:5c:fc:c0:43:79:4d:26:02:04:
         8a:b3:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----