Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File:                     VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier:          Ur5Mv3U/H1O4XQcidcgzwYutZXxz4ypMmNL/vKzQEvQ=
Subject key identifier:   73:F6:1A:39:FD:B2:B8:BA:DD:18:2C:35:6C:A1:D9:D6:3D:FF:32:D0
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer:       /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial:       01962F747CCB7B7B0523A392D82981DE1645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
                          2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: FzOIaelShvR8RxS4+1AtLVDzL4/iASD9NucCwCOB+1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:cb:7b:7b:05:23:a3:92:d8:29:81:de:16:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=73f61a39fdb2b8badd182c356ca1d9d63dff32d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:72:02:c5:77:ef:f2:7e:f7:4e:9a:89:fb:
                    37:e8:94:89:60:8e:4a:20:5d:58:05:73:30:e8:ff:
                    ab:1b:20:5f:b0:51:0d:70:bb:33:0d:b7:f0:20:3c:
                    31:3b:78:4b:78:f5:f9:58:19:e2:8a:c0:39:60:b7:
                    89:bc:87:ad:cf:32:17:96:4e:cb:eb:e1:b6:2c:d9:
                    69:43:96:3a:7a:7f:13:fe:85:55:25:d2:f6:1d:5b:
                    1f:c8:fb:ed:e1:9f:79:56:9a:a9:6d:f3:98:c6:17:
                    65:dd:4b:b0:2b:72:14:82:ad:57:64:80:33:b3:55:
                    2b:24:42:24:7e:89:42:7f:97:fd:b3:84:b5:f7:81:
                    55:e3:14:af:5d:98:a6:6e:17:24:9b:cd:04:0b:25:
                    1d:a7:40:13:a2:46:ba:37:69:65:40:9e:60:aa:c1:
                    52:4d:cd:53:76:f7:ed:18:3e:fc:39:ff:e4:8f:89:
                    a6:9f:10:03:0b:ca:b3:96:df:02:c5:61:e9:b1:ff:
                    ec:98:9f:e5:21:cc:40:9b:49:37:c1:8f:52:54:a4:
                    bb:c8:ba:25:77:52:45:0d:19:f6:5c:6c:10:02:a5:
                    f4:c1:56:f0:79:b2:08:b5:45:86:a0:db:39:50:0f:
                    9b:a1:9e:ba:7d:f1:f3:9c:87:91:90:72:5f:4b:13:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:1A:39:FD:B2:B8:BA:DD:18:2C:35:6C:A1:D9:D6:3D:FF:32:D0
            X509v3 Authority Key Identifier:
                keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:01:46:35:27:96:54:24:94:76:64:2e:db:d0:47:6e:ee:46:
         f2:65:26:45:2f:29:d5:48:b7:e9:0c:4d:91:ee:d7:1b:1d:1f:
         99:a3:e5:ed:4f:82:58:a2:09:59:34:ef:cf:d9:22:28:36:c3:
         d3:9f:4e:55:6e:f4:a4:07:31:11:a4:db:a3:71:35:b4:ad:b3:
         4a:09:0f:f5:0d:6e:8b:b9:5e:66:b2:cf:e5:fb:bf:37:f0:ce:
         51:c2:50:af:4e:d7:b2:80:2a:75:1a:b0:cd:05:37:d9:10:8c:
         a4:ae:55:09:ea:18:12:a2:23:f1:3e:e2:e5:7a:fa:85:ab:b7:
         37:29:72:4f:86:18:18:9b:c7:c1:bb:9b:3c:87:61:1d:57:c8:
         ad:cd:33:7d:59:0f:48:81:a0:43:44:d9:49:97:1f:af:d3:84:
         20:8e:7e:15:a2:1e:27:60:c9:3e:74:fc:29:22:5d:56:42:a4:
         ff:cd:ee:0c:b6:fe:d9:f7:4f:aa:d5:0d:ed:57:3f:ee:d6:52:
         9c:d6:3a:78:21:c3:b4:4e:b6:1f:72:c6:05:2d:aa:ae:09:bf:
         e0:1a:a5:af:a8:40:e5:63:79:91:98:2b:d8:95:5a:61:10:f5:
         ed:b0:81:94:ec:de:2c:f4:40:0b:2b:33:9d:95:cb:a5:6c:f8:
         85:9f:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----