Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File:                     VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier:          TJ510RHVJtqYk8uPdT9s4QgiTTFu2g/WblR66pT6Wrk=
Subject key identifier:   CA:88:94:73:F4:87:42:89:02:78:AF:EC:01:A3:8C:5F:D3:24:B6:C1
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer:       /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial:       01962F7432CE1D9087DB375E54E177BAAE8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: yU8jEUQpfcCaryWu7Q1QjLT4cOOGIkV2SQ2P8uDdnmA=)
                          2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:ce:1d:90:87:db:37:5e:54:e1:77:ba:ae:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=ca889473f48742890278afec01a38c5fd324b6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:9e:e5:45:cd:d0:96:85:7b:1c:e6:84:9a:
                    c2:c5:00:fb:41:34:b6:4e:61:5f:d3:94:56:40:fc:
                    59:0f:c8:82:56:23:7f:53:4d:d2:55:d4:de:24:36:
                    ae:c5:8f:d4:5e:ac:50:7d:5f:03:8c:34:e1:54:fd:
                    ef:ee:7c:29:75:50:9a:ce:9f:6a:db:20:c9:6e:ca:
                    30:13:4a:7d:d2:fc:5c:5e:bc:23:d0:c3:37:ec:9c:
                    fe:c6:e8:43:72:3c:29:d1:42:83:12:5e:68:4b:42:
                    83:e4:b5:c0:f5:70:d1:dc:d6:a2:f7:ac:fd:ce:df:
                    94:6d:20:9e:19:0e:56:02:05:a9:07:e7:f4:3a:5e:
                    ce:cf:0c:e8:26:a5:81:f4:fd:5e:56:0c:58:86:1d:
                    b6:c9:22:62:c8:78:c3:a2:3e:cd:f1:58:d0:54:11:
                    0c:76:b0:65:9b:cd:04:12:b7:fc:42:ad:b8:25:f1:
                    23:b7:da:d8:d3:79:79:bf:34:31:04:60:7f:cb:c2:
                    65:11:25:22:6e:1e:0d:13:8f:13:04:b4:c5:31:c3:
                    b6:41:aa:db:3a:29:64:e4:57:93:07:00:42:dd:8b:
                    04:97:3f:34:0a:17:a7:84:1a:e8:34:30:38:4c:70:
                    1d:24:f1:e0:d4:5f:ce:38:3d:be:a0:25:6a:6c:f6:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:88:94:73:F4:87:42:89:02:78:AF:EC:01:A3:8C:5F:D3:24:B6:C1
            X509v3 Authority Key Identifier:
                keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:42:64:52:7d:6f:69:2c:fa:d3:05:c2:da:93:3c:2a:ab:
         80:ee:82:41:5e:f4:dc:e3:c8:cf:9f:f8:2f:0a:43:f0:e4:4f:
         e5:d8:41:a2:f3:d6:5c:2c:2d:77:97:34:58:c6:d9:f2:64:5d:
         f6:22:89:c8:85:50:10:58:fe:f2:dc:ba:52:e3:c4:f1:9f:3d:
         5f:c6:6a:25:ac:c7:bd:22:26:6e:6e:80:f5:49:d5:58:e4:7a:
         49:32:3f:08:be:3b:38:67:45:22:ee:54:5d:3d:8d:50:be:d3:
         6f:95:1e:49:2c:49:be:c3:96:ac:4f:6d:6d:42:54:23:47:cf:
         fe:19:13:5f:cc:f5:ea:17:09:f4:46:36:8f:a2:bb:7f:34:b5:
         73:7d:82:61:07:15:0f:fc:a1:6b:71:69:3d:8b:37:34:ed:f8:
         6d:0c:03:df:9e:b6:4e:2e:4a:f2:55:a2:70:80:b8:f6:d8:e2:
         f5:f2:6b:e8:f1:0f:10:d4:92:32:7e:e1:36:38:bb:54:1b:7e:
         da:60:86:e8:7b:6a:4c:27:22:54:48:08:87:47:d4:a6:65:ec:
         f1:0b:b6:6f:01:5d:e8:dc:3f:db:05:15:c3:16:8a:ea:e3:28:
         b9:dd:dc:df:15:a1:46:b5:34:e3:b0:83:48:9d:57:07:6a:cb:
         93:dc:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----