Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File:                     VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier:          fdzpsX1Mfd9f3cfLm8W6gZXjjIFMn1ioYs1orvhyekA=
Subject key identifier:   28:4C:F5:66:2F:28:EE:63:20:A0:B1:F9:68:7D:7E:28:14:93:48:17
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer:       /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial:       01962F742BF1C2E4C4314EFC5E50F2ACBFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number:          0153
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
                          2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
                          3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: vJTqpgxUaN/1ByegD81USpiJDYGzb7vVmseDiNNhrhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:f1:c2:e4:c4:31:4e:fc:5e:50:f2:ac:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=284cf5662f28ee6320a0b1f9687d7e2814934817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:55:cc:04:ce:88:a7:a1:f3:44:b2:a9:83:
                    e3:9a:82:78:f8:46:ec:bf:32:5f:00:45:00:09:3e:
                    b8:5a:80:a4:fc:fd:a2:cb:20:92:88:0d:8e:2c:21:
                    64:93:bf:e2:0d:17:17:12:b3:98:d6:ab:8f:73:05:
                    1e:91:46:2e:b0:8d:8e:f0:c4:8e:6d:c9:c2:9a:21:
                    64:20:4e:55:7e:a3:c8:8e:24:1f:4c:58:0f:68:ce:
                    35:27:6b:b5:d7:95:58:b3:fa:f0:91:9c:07:74:f1:
                    c6:5d:c0:3c:29:79:2c:ec:34:18:69:ee:d1:ef:c6:
                    07:75:5a:91:19:f5:30:c8:cd:d0:6c:51:62:9a:2b:
                    c7:f5:54:f9:ef:48:26:15:3b:df:9e:ff:96:38:a3:
                    da:c2:f6:d9:b3:35:7b:42:20:fb:90:05:25:84:b1:
                    e2:79:3d:0a:05:5a:ec:da:f5:f3:1c:55:02:18:7e:
                    df:e1:10:9b:d7:53:df:d0:ac:0f:59:6b:58:3e:e0:
                    2d:1d:0c:67:17:74:1a:85:c2:0c:cd:a8:80:45:f0:
                    1e:33:cb:da:3c:8b:68:96:3f:ec:fa:53:01:71:9b:
                    c3:22:5e:f4:a1:87:e5:85:6f:7e:3b:45:3a:f1:a2:
                    4c:54:75:d3:51:7a:f1:92:9a:86:f1:15:d0:16:27:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:F5:66:2F:28:EE:63:20:A0:B1:F9:68:7D:7E:28:14:93:48:17
            X509v3 Authority Key Identifier:
                keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:20:72:08:b9:23:23:ab:e6:7d:83:f3:db:03:5b:58:33:31:
         5d:37:13:49:a1:25:0e:14:3f:fe:72:b8:36:dd:a6:b8:3d:ad:
         a2:3c:04:ca:24:c4:e7:d0:09:78:66:67:ff:e6:84:3f:f4:c0:
         8d:ee:b7:17:84:9b:0b:89:36:f6:c1:d9:61:f4:f3:d2:3a:72:
         a8:ad:ea:6d:eb:29:3a:7c:16:42:d5:bd:68:3f:b0:2f:19:77:
         36:53:58:cf:93:2c:4a:8f:10:cc:ed:ea:24:ed:9a:d7:20:01:
         ec:7d:38:b5:b2:9e:bb:2e:2d:c1:90:ee:9b:a6:f7:ca:f7:a7:
         d6:cb:ad:0c:8d:70:fd:d7:5d:c3:f6:01:fa:ea:a3:98:54:95:
         fa:05:2d:81:9a:70:50:36:d6:ab:87:9f:dc:32:f6:50:e4:fa:
         29:ab:9f:b5:a9:da:5f:93:49:a0:74:1f:f0:4f:ab:b7:54:19:
         7c:ba:92:bf:3c:25:cc:0b:60:d0:fa:18:db:18:91:77:01:da:
         b9:94:31:48:67:ac:89:9c:eb:cb:23:34:d2:63:50:5c:c5:f7:
         0e:e0:37:78:38:23:c7:81:e5:37:ec:86:98:02:43:37:51:1c:
         49:f1:c3:35:a7:00:ea:01:c7:16:3b:41:fb:a4:61:1d:ed:a5:
         1a:1a:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----