Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File:                     vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier:          nidTTKdUxqjSpPo9JlPgsIArT1WEG/TZE4SScZUJz64=
Subject key identifier:   6D:74:4E:04:0F:B0:AA:3F:A8:71:56:0B:A6:D2:07:7A:23:E7:91:3F
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer:       /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial:       01962F74EE08662480B017FF351010FA36F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number:          12B1
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (hash: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=)
                          2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
                          3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: wTlqgi80p0Q8rNi6SEck0S9lGyAxLB3+5ndAatvsoyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:08:66:24:80:b0:17:ff:35:10:10:fa:36:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=6d744e040fb0aa3fa871560ba6d2077a23e7913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:33:13:b6:13:22:33:04:8c:8f:c5:6e:71:
                    99:41:61:59:4b:08:16:ab:5e:9f:02:9b:47:f9:1f:
                    b0:fc:85:c4:e1:42:f7:6e:82:97:00:e3:30:36:d3:
                    d8:33:fa:c6:a8:c9:f3:14:62:c9:36:4a:e0:5a:d6:
                    3c:1e:f4:40:14:e7:c0:de:f8:c1:0c:f0:7c:31:38:
                    af:b9:11:43:92:64:1f:09:94:7c:43:ca:3a:46:c7:
                    79:54:4d:5b:9d:ae:7c:8c:ba:e2:85:f7:00:91:c2:
                    12:53:d5:d0:3f:2d:46:a3:8a:dc:b4:4d:d1:1d:da:
                    42:14:1b:1c:12:28:7f:20:bb:b8:19:75:6c:86:0f:
                    6b:3a:52:2d:4e:a1:7b:c5:dc:12:d8:9d:a1:fa:d1:
                    47:49:10:1c:1e:53:6f:9e:e7:02:8a:11:91:a7:1b:
                    49:10:ed:f4:f6:59:49:fe:56:c2:a7:55:d5:f0:e0:
                    e5:12:e8:e6:0b:04:a5:74:0d:d0:6a:a1:98:62:42:
                    fc:81:17:4a:60:e3:16:d6:dc:1c:7c:82:e1:ce:41:
                    de:bc:d1:31:e4:4f:66:c7:2c:17:d1:ba:f9:1d:2b:
                    1d:a7:1f:7a:25:f4:44:39:ba:46:c6:29:fd:0e:83:
                    7b:9c:6a:66:fc:7b:fa:cf:24:bc:e0:c0:45:2e:6a:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:74:4E:04:0F:B0:AA:3F:A8:71:56:0B:A6:D2:07:7A:23:E7:91:3F
            X509v3 Authority Key Identifier:
                keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:c9:4f:aa:5c:07:33:fa:a0:39:79:62:ea:15:0f:50:8f:90:
         dd:31:c0:c3:4b:a7:0d:9b:74:35:30:90:ef:cd:00:ab:b3:f9:
         15:fc:61:8f:aa:11:db:cc:e5:97:e0:44:83:cd:f2:05:17:f8:
         83:22:7c:1a:02:e9:cc:4a:02:ac:ab:05:bb:26:d0:2c:3f:9d:
         b2:d5:7f:c4:3a:50:0f:9b:ec:bc:29:1e:28:14:18:43:f1:7e:
         cb:a8:8f:cf:19:40:f4:32:84:dd:c0:0f:d5:77:aa:31:37:ef:
         7c:13:4b:55:24:d0:45:72:23:73:3f:23:f2:f7:c2:28:9a:45:
         49:26:cd:09:45:4a:00:f4:e3:9b:a1:09:d9:fe:76:28:75:5e:
         9f:1a:ae:36:4f:e3:21:92:a7:0f:36:9c:fc:17:2c:0e:66:8d:
         ef:1f:76:24:59:e3:a3:bd:36:60:8e:15:b6:9b:54:e7:e0:1a:
         fb:2d:01:59:db:bd:2e:95:a2:23:38:d1:27:6f:db:01:dc:2f:
         b5:f2:44:79:65:bb:c6:ba:62:7e:7e:8e:17:6c:6e:a7:2e:f0:
         0a:bb:f2:5a:4b:cf:72:89:23:c5:4d:10:b3:18:7a:f8:f8:1a:
         a0:a2:0d:b4:72:4e:27:43:31:f9:12:93:05:b7:c0:56:70:03:
         89:de:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----