Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File:                     vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier:          HQVuBK8fUj1+Ce97aZIba1QU5wre1cyVAhRAtMJq60g=
Subject key identifier:   D3:14:71:F0:7C:85:37:D0:C8:50:2F:8C:02:B1:95:16:58:AA:EC:06
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer:       /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial:       01962E6202CD5DA890E48FB13109B473EEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number:          12CA
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=)
                          2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=)
                          3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=)
                          4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: ZvmurWWVrRCEfePIAUvYDDX/UHOTY5Agtdd6LgMsjRQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:02:cd:5d:a8:90:e4:8f:b1:31:09:b4:73:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=d31471f07c8537d0c8502f8c02b1951658aaec06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:10:f2:d0:a1:86:92:4d:cc:8c:45:79:1f:
                    da:9a:38:94:25:13:95:d0:83:90:3a:b5:ff:66:c5:
                    c1:3c:94:3f:c4:51:86:6c:77:83:fe:50:fd:e6:b9:
                    4e:40:60:ea:0a:7c:e7:86:bf:e9:29:ae:cf:b3:cb:
                    a1:53:d8:67:42:fa:43:18:4e:dc:2c:68:c0:18:c8:
                    00:9d:d2:50:04:58:7e:df:a6:14:2d:a3:c2:1c:4d:
                    9c:2a:9a:6b:ef:54:ed:90:8c:10:ad:68:82:fe:83:
                    b7:be:9a:a6:a0:7e:9b:ff:2f:1e:f1:4e:3f:94:f8:
                    58:86:b8:25:d0:ff:22:d6:4f:6a:54:1f:de:0d:90:
                    22:9e:ff:42:d9:d1:47:53:88:f8:1b:01:27:32:1f:
                    cb:1c:e5:2d:71:31:8d:a3:f7:dc:39:22:6d:48:68:
                    d8:f8:54:fc:39:ff:d6:ab:c4:bb:2b:1d:4c:ee:75:
                    66:44:aa:23:c8:f8:28:16:4f:46:d7:c7:25:26:f6:
                    6f:c1:c2:f2:9b:15:37:c4:8f:98:29:b9:66:70:a1:
                    c2:9c:1a:15:2a:90:7d:83:4b:4d:ce:f7:64:f7:8e:
                    3b:ec:57:40:02:da:e7:c1:7b:de:37:c2:1e:37:53:
                    34:b2:55:4a:b1:83:c8:e7:18:fe:5b:9e:9b:d2:b2:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:71:F0:7C:85:37:D0:C8:50:2F:8C:02:B1:95:16:58:AA:EC:06
            X509v3 Authority Key Identifier:
                keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:65:e1:d2:4b:65:2f:c6:90:80:e5:5b:45:84:22:bf:0a:17:
         90:7f:36:5b:19:f4:85:2a:a3:79:7b:10:16:07:b8:1d:56:f6:
         43:46:f3:d9:20:79:05:13:f9:75:5b:80:d8:f6:76:dd:4e:b4:
         dc:c3:ad:e7:c4:58:bd:18:47:84:30:cd:39:40:fa:6b:86:be:
         f4:40:a5:9c:ff:b0:5d:48:48:0f:92:4b:7b:75:8e:bf:d9:94:
         7d:0d:d6:4d:54:be:99:44:81:d6:db:e1:7a:a5:18:14:01:2a:
         a5:fd:a2:12:70:d7:2d:c9:0d:47:70:d5:06:4d:b2:78:8b:db:
         3b:d1:03:59:6c:28:ee:4a:bf:9e:07:53:ba:1b:a0:65:bb:52:
         ec:9f:0c:a1:db:73:a0:fd:4f:47:e1:d6:12:c8:e7:db:75:3a:
         c6:f5:82:c2:35:93:a7:82:ae:05:a2:1c:57:86:c6:29:82:7a:
         69:fe:0b:2f:e0:35:5a:a5:6d:e6:2a:9f:16:7e:05:7d:b7:94:
         a6:c8:1a:90:06:45:39:14:2d:e6:49:5c:0d:b7:0a:a6:48:6d:
         1b:d9:05:2e:e6:05:e0:30:2c:c8:0e:2b:fc:a5:e0:5f:82:17:
         ba:cc:88:d7:69:91:39:f5:03:2c:03:2b:7f:88:0b:f4:d8:33:
         7a:cd:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----