Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File:                     VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier:          00I6lKx32v0ppttpT1cgQROCapt/IctIiDLSUwq4+0E=
Subject key identifier:   7C:40:4E:94:0A:89:69:A7:F0:D0:D1:53:C5:EA:3B:2B:F8:FA:D2:45
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer:       /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial:       01962E99AAF83BC21CD7D9DBD37BC315C1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
                          2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: MBCOdYtyB4UT58VzmupGo75om1jO56LUJlhHyYjxQoc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:f8:3b:c2:1c:d7:d9:db:d3:7b:c3:15:c1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=7c404e940a8969a7f0d0d153c5ea3b2bf8fad245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:c4:c9:d7:f1:80:c1:38:58:9d:88:3d:a9:
                    84:08:4f:cf:0b:64:61:0b:af:f8:cd:3c:f2:9f:57:
                    09:29:13:6f:69:a2:44:d4:4a:bc:84:ef:c0:d9:d3:
                    9a:24:cc:cf:de:d0:85:07:fb:71:2e:de:aa:10:fc:
                    bf:fd:8e:69:0c:63:ef:d6:ec:5d:58:44:ac:4d:94:
                    e4:7f:83:6a:7a:68:d2:52:bd:1a:bc:55:f1:53:9e:
                    26:83:cb:2b:52:2f:79:39:5b:c2:73:0b:f6:dc:5b:
                    8e:eb:75:13:bb:57:56:2c:34:01:94:03:0f:1e:f3:
                    f5:cf:5b:f9:5f:3a:cf:5f:a4:e5:28:1f:3f:11:fb:
                    72:8c:e2:00:54:fd:24:e5:6d:0b:c7:93:ef:ea:ff:
                    00:fc:f1:0d:7a:bb:26:8c:5f:37:e4:75:35:98:23:
                    1c:ef:8c:f5:93:dc:10:76:e1:9d:b1:c7:cb:fa:81:
                    e4:64:d6:e3:e4:95:34:14:97:cc:8c:0c:75:e5:a2:
                    bc:93:60:fd:75:b6:65:37:f7:fc:2a:28:7c:85:b8:
                    fb:20:e2:a5:51:87:e0:c9:2f:a9:02:1c:33:18:12:
                    c3:b6:39:44:52:a9:08:5f:13:7e:bf:b5:ae:89:a6:
                    68:2d:4a:8d:36:94:ec:be:af:1d:21:d2:6d:db:3a:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:4E:94:0A:89:69:A7:F0:D0:D1:53:C5:EA:3B:2B:F8:FA:D2:45
            X509v3 Authority Key Identifier:
                keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:93:d7:f4:8c:a1:da:c4:19:b0:a7:63:0a:10:41:31:02:96:
         8a:0e:b6:48:07:ee:48:bc:fb:00:43:60:22:78:a1:f4:b3:50:
         dd:15:84:06:06:9a:72:20:2b:34:fb:61:90:e0:15:18:9c:cd:
         88:70:73:e3:22:6c:bf:4d:18:56:47:84:1d:6d:b9:4f:89:d2:
         4b:50:64:4a:8e:55:b9:3b:34:8d:94:09:0e:57:25:92:e8:39:
         0f:12:c4:5e:ef:3c:0c:92:22:7e:ea:3d:85:d7:37:25:8b:6e:
         1b:60:35:e6:0f:d9:9a:70:f0:03:10:91:e5:a4:bf:9c:c5:9a:
         6f:0c:0c:cc:93:ca:67:b6:51:d0:8b:a0:bc:d7:e1:81:6b:88:
         a6:4b:e3:6d:2e:19:a4:7d:06:2c:55:74:f8:cc:23:c3:74:48:
         f5:05:2e:ad:e5:56:f2:74:cb:80:37:de:d1:60:5a:30:5e:4d:
         87:bf:2a:54:36:3c:9f:75:75:21:e1:20:dc:77:f6:fa:aa:20:
         c3:55:ff:5d:73:e1:f7:c9:31:fa:5b:3c:37:93:78:89:2f:ec:
         e8:84:2c:20:ab:60:b7:93:24:c4:3a:2e:08:98:7a:a1:b5:54:
         07:0a:de:19:d8:f4:34:97:b6:42:6e:2e:f8:d8:12:b4:41:a1:
         01:3e:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----