Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File:                     VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier:          ggbvdh76jm/rf9nSuuGkGQH2E4rZZ5/UcRUc5Q+qzLs=
Subject key identifier:   54:6E:35:52:0C:93:BE:02:DA:E6:20:C7:B7:05:A1:00:21:41:DD:D4
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer:       /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial:       01962F07088C182192D4F4C768AD910790AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number:          09E6
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
                          2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: 56AMWt7wo+JA2uOk3p8SS5s3ZOH2p6rDlmHsGfoNH7A=)
                          3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
                          4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:08:8c:18:21:92:d4:f4:c7:68:ad:91:07:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=546e35520c93be02dae620c7b705a1002141ddd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:5e:9d:1b:02:52:68:13:1f:c0:e4:06:9d:
                    ba:69:2f:11:3d:ed:99:ae:42:48:8f:ce:fb:a8:fa:
                    2d:ce:3a:22:75:bc:37:41:11:2a:e8:e7:05:a2:43:
                    d4:30:3b:d3:8f:40:e3:ad:3f:fb:18:b0:26:1f:14:
                    ae:af:b9:a7:e2:fc:8f:e1:69:83:43:06:af:28:d3:
                    d3:7f:89:70:72:5a:a4:b7:ea:8f:ea:bf:a5:16:36:
                    4e:c2:68:04:a2:43:70:15:13:e1:37:71:36:96:75:
                    5d:8a:9e:9b:6b:38:2e:5b:2f:3a:65:e9:0d:3f:90:
                    06:30:d3:09:33:3c:bc:0f:9e:86:93:66:a9:70:9e:
                    cb:c1:ab:20:46:5e:99:d7:b7:9f:0a:e7:3c:2b:0f:
                    fd:54:c8:a4:56:81:10:90:2b:74:2d:fe:c0:e1:eb:
                    68:c4:c0:3c:44:7d:62:b5:38:2e:a4:68:42:49:14:
                    25:36:1b:97:f4:bf:6d:ef:d5:61:41:d8:6d:34:6c:
                    19:7e:5a:17:62:44:bf:57:0e:7c:46:de:aa:8a:87:
                    8e:bf:48:f1:a3:ed:2f:06:7e:8f:4c:f0:e5:59:6d:
                    37:30:7e:d4:e9:c6:e0:12:9f:5a:a8:c4:8f:e4:af:
                    f2:2d:f7:08:84:d8:0f:be:ce:de:89:e2:7d:15:50:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:35:52:0C:93:BE:02:DA:E6:20:C7:B7:05:A1:00:21:41:DD:D4
            X509v3 Authority Key Identifier:
                keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:24:a2:88:d8:8e:d6:1c:82:4e:0f:99:4d:84:ed:28:81:
         fd:ad:39:4f:e9:75:53:25:95:a1:ca:e7:89:22:64:2c:4a:8f:
         a6:22:f3:09:63:56:77:6c:b7:8b:81:5d:c7:26:5f:43:a9:c9:
         73:e3:20:45:06:d8:c0:fc:dc:03:89:d7:bd:d5:2a:9c:42:87:
         d9:77:ed:02:17:cd:54:5d:4e:4a:2b:b0:a5:4a:35:ad:f4:17:
         ce:96:f7:db:fa:07:24:a9:cb:80:a7:b7:9b:10:47:86:64:6f:
         00:fd:c8:71:71:40:8a:82:2a:d9:e0:32:c6:3d:53:61:ee:77:
         8d:06:01:14:f3:a3:2e:c2:69:fc:5f:e4:62:dd:54:df:18:1e:
         e1:0d:3b:7c:0f:a6:f2:5f:d6:e1:0e:82:ba:33:fd:25:31:9a:
         cb:eb:d1:86:fc:1d:c5:3a:9c:b1:11:6d:49:6f:2e:23:13:44:
         c2:36:4b:34:2a:43:68:7d:b2:07:58:cb:94:1d:41:b8:87:43:
         de:6e:8c:91:10:cd:72:cf:ed:40:58:24:91:9c:bb:9d:5d:3f:
         61:63:5e:12:0e:5e:ac:b0:50:e9:ef:f6:ed:64:e1:e6:84:d0:
         90:42:70:50:6e:49:56:e6:e4:4d:65:71:68:8a:cc:73:e1:a1:
         d6:fa:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----