Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          9HEiqwYw6xwHZ+P71xU8mYDuiuxhvybYV0S8ORPizNc=
Subject key identifier:   70:2C:88:F6:EC:30:74:38:57:EA:A0:CF:2D:8F:37:04:3D:DC:D4:64
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       01962F74A3D1BADC994B636D33D24DAC2741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0E07
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: GGIFYKQU2mEByob34YIFE/vYZPpLWVigDsCtynRIQJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:d1:ba:dc:99:4b:63:6d:33:d2:4d:ac:27:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=702c88f6ec30743857eaa0cf2d8f37043ddcd464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:0e:1c:ee:4d:49:45:cd:a9:06:a1:c1:38:
                    e6:75:f6:a5:f4:24:2f:c5:05:e6:a3:31:29:57:e2:
                    72:dd:e2:80:72:8a:2e:29:c6:00:99:66:f6:95:f2:
                    4b:82:34:c4:82:70:81:46:aa:39:2a:39:d9:2f:a2:
                    2b:d1:b7:c2:a2:bb:0e:d8:b2:31:b9:dd:da:42:5b:
                    5c:0c:1e:ae:e4:b0:63:4b:03:6d:c6:d4:00:58:54:
                    0a:ff:a2:d1:5e:ef:f6:97:96:de:7e:1b:03:4c:99:
                    6e:51:4f:89:8b:3d:ee:70:8e:80:4b:fe:37:e6:ec:
                    48:dd:ec:57:d0:ac:46:68:87:c8:22:24:69:e1:1e:
                    83:0c:5b:61:51:b6:5c:da:e7:51:fe:0b:ae:28:b0:
                    32:e0:97:12:30:f2:30:c4:43:80:06:c9:27:56:d8:
                    56:31:18:ff:64:84:10:87:54:23:11:67:7c:a8:eb:
                    21:9b:ba:e9:74:48:90:54:2a:7d:8f:80:7f:32:4c:
                    a8:5a:a3:25:9c:20:39:22:c2:95:e3:f5:e5:96:88:
                    11:1d:7a:77:96:91:7f:62:f4:bd:a0:e1:33:05:6f:
                    dd:66:68:25:2e:78:10:54:f9:fb:d4:b4:1f:b7:36:
                    87:e0:71:da:a3:be:00:c7:f7:83:87:56:8c:c5:4d:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:88:F6:EC:30:74:38:57:EA:A0:CF:2D:8F:37:04:3D:DC:D4:64
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:88:ef:d3:1b:17:59:f8:a2:94:e5:9b:12:8f:cd:29:34:e0:
         7c:c3:5c:e4:0d:56:fd:9d:db:c6:f6:71:1d:21:2e:72:8e:82:
         86:ce:05:ae:db:9a:12:21:5f:18:3b:7b:bf:00:71:d3:1c:7d:
         7c:60:08:bd:9d:f8:2a:36:c6:6f:af:f1:35:20:4a:a2:91:92:
         41:99:7b:53:f7:f1:c5:6e:69:a0:a8:3c:7f:41:53:65:af:39:
         20:9b:f7:91:13:22:fc:4f:59:97:d5:db:3c:82:45:7a:f5:58:
         5c:46:64:8e:dc:af:3b:67:72:ac:0b:42:cb:17:72:d9:84:fd:
         7c:94:2c:c1:7f:fe:d3:fb:a8:5a:a8:a6:b8:85:51:f9:da:79:
         75:a9:26:d5:60:fe:97:0e:cc:da:2c:e6:9d:c1:d3:2e:b4:38:
         55:e2:95:42:42:b6:45:64:62:ff:de:74:08:4d:a2:2c:c3:08:
         35:1d:f1:fe:9f:47:c6:1d:f4:d6:4d:ac:aa:7b:b7:e6:60:3a:
         4b:ce:27:97:15:88:ed:c4:af:d5:fe:99:fb:c1:3d:fd:5a:af:
         7b:ff:59:7a:c3:cd:b9:ec:d8:ca:a5:83:d1:e2:89:18:39:86:
         f1:7d:2a:79:f2:df:3d:b1:d3:89:f9:ca:73:d1:dc:32:f6:23:
         52:06:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----