Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File:                     VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier:          FI40+H8VkdMgZz1la7XtV5cJ29rPuPveBNeu2USAhxo=
Subject key identifier:   FD:75:AE:43:71:9A:6E:8B:EC:D2:5D:87:C7:DC:B2:A3:37:DB:7A:6F
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer:       /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial:       01962F06A5351525D5D3D002D97A0A4FE9FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: sJllDt6HUP6THBSRUXl9ZSUH6j7Fsw69d0sTrwmwfNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:35:15:25:d5:d3:d0:02:d9:7a:0a:4f:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=fd75ae43719a6e8becd25d87c7dcb2a337db7a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:55:08:d4:a8:37:1c:8d:02:02:76:91:05:
                    4d:f7:d1:57:24:23:88:c1:b2:c5:ff:b1:1e:fb:f0:
                    a8:d0:12:de:ae:f0:a9:d7:06:e9:e2:bc:a9:ef:a8:
                    25:2a:d6:b9:fb:31:47:09:b2:9f:64:85:80:3c:9c:
                    e4:ad:c6:6e:25:ae:05:36:d9:2c:3e:07:eb:f3:e1:
                    a3:0a:48:e3:f6:b1:5c:d6:ee:26:77:f5:7b:c9:aa:
                    b1:cb:05:a5:6c:49:43:b2:41:54:a9:24:1b:7f:75:
                    97:63:66:dd:93:0f:35:b7:43:2d:46:bb:2b:ef:a6:
                    6a:6d:c2:8f:96:a7:f8:7b:f4:e5:80:b6:4f:90:09:
                    45:56:70:a9:23:66:2d:54:aa:c6:04:dd:eb:45:a6:
                    7d:3a:63:49:55:0b:ee:f6:28:ce:f2:c1:b4:9e:8f:
                    45:e6:63:99:52:cf:83:b6:d0:76:e2:93:df:64:1e:
                    7e:aa:4b:1c:e3:c8:7d:c4:c3:ff:df:a5:e2:1f:d8:
                    d7:18:f8:f0:7b:b5:b4:d5:27:09:3e:7d:ea:b4:e2:
                    c6:04:6e:81:cb:07:5c:b4:bd:12:c9:7e:4b:58:48:
                    89:34:2d:88:ff:f8:7b:44:64:0e:b2:85:69:21:27:
                    15:17:70:4f:16:d1:8a:5a:a5:b5:09:c6:9b:1a:fc:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:AE:43:71:9A:6E:8B:EC:D2:5D:87:C7:DC:B2:A3:37:DB:7A:6F
            X509v3 Authority Key Identifier:
                keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:7f:74:d8:ac:ef:bf:29:f9:05:ed:ca:f6:ab:7b:e4:0c:
         58:e8:ec:de:d4:b6:c0:3c:79:02:91:f2:27:c8:31:9e:53:e2:
         b5:a9:39:3d:06:21:38:55:f9:46:d4:d0:5e:4f:2e:3b:a4:1c:
         b3:0c:26:f3:86:dd:74:ef:ab:e6:ef:a9:b3:75:6b:8e:b8:6d:
         88:4e:18:19:9e:1c:11:b9:cb:4d:9d:75:0d:91:14:61:0d:1e:
         ab:61:bb:61:87:0d:95:8b:f4:b1:f5:58:89:7b:d1:9e:89:1f:
         64:72:14:d3:9f:9b:1a:6c:20:4e:bd:b6:3f:40:06:0b:d8:12:
         4e:1b:89:18:5c:1a:5e:65:e5:30:3f:a8:70:22:26:e2:5e:b1:
         9e:ca:bb:9d:41:c1:50:1c:8f:4d:6a:c6:48:a8:7c:d5:1d:a9:
         27:c4:69:44:1f:95:8b:7c:70:f3:f2:cf:c9:f1:6f:8d:d0:34:
         65:c2:66:85:90:93:21:d3:a5:1f:d1:fc:af:52:6d:6b:f3:07:
         05:50:63:b6:b2:f1:bb:fb:cb:c1:17:2c:d8:6a:30:41:2b:7b:
         90:cc:e9:37:5c:07:6a:fa:16:74:63:d6:0f:61:51:41:3c:5d:
         83:8e:54:51:bb:75:bf:5b:23:e5:97:f3:9c:f2:30:63:8c:90:
         7c:f0:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----