Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          5TxDQ84bMBB5CpKiDeIUqQYeaZGVQkBiF7lKpTf6wGI=
Subject key identifier:   9F:4A:C2:AF:FA:FE:A4:25:A5:01:0C:9D:91:9B:74:3F:F2:E1:05:02
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       01962FAB41F2E89D798295C6B1972DB007A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          0E19
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
                          2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
                          3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: wU7sAR9fjzThtM0HwqhyKTCsWzwuMk6NpMlsWvkp1Gg=)
                          4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:f2:e8:9d:79:82:95:c6:b1:97:2d:b0:07:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=9f4ac2affafea425a5010c9d919b743ff2e10502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:c3:26:5b:12:8a:5d:e2:f6:99:20:8a:00:
                    c5:f8:5f:69:3a:30:e7:7f:d6:c6:1e:33:13:60:00:
                    fe:1e:0b:55:28:39:a3:6e:34:33:f9:b6:0f:f7:25:
                    33:95:c4:4f:17:7e:ac:93:ea:69:6e:6d:b8:4d:11:
                    f0:f7:d8:05:b4:62:d7:14:b1:1b:9d:e1:42:ac:95:
                    d8:5e:80:3f:76:bb:17:ad:13:81:3f:2c:fd:ce:83:
                    4b:50:2c:40:4b:38:2a:4d:fa:20:4b:af:1d:a2:92:
                    cf:bc:f5:e9:3c:36:a7:93:a6:25:71:8a:24:5c:3a:
                    25:2a:7c:72:56:a8:fc:90:7d:87:7f:6f:4b:cf:30:
                    26:28:ef:b5:6c:86:53:90:ee:8e:2f:ec:c9:f1:73:
                    83:cd:a7:f5:01:80:1a:87:50:1c:81:fd:b5:b9:be:
                    83:66:2d:64:8b:3a:c9:b8:10:a3:72:75:56:9a:36:
                    58:f1:06:66:87:2b:55:54:d1:a3:49:73:b1:53:86:
                    eb:45:a0:35:d2:0b:16:92:73:14:09:43:12:d9:7a:
                    ba:07:fe:e0:19:cf:df:c0:62:78:a9:a1:64:7a:db:
                    e7:c3:64:2c:14:a0:cf:ec:ec:ef:df:a8:7a:7b:f0:
                    4e:a4:ac:d1:c5:a2:03:6c:7c:c0:7b:1e:f1:e3:bd:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4A:C2:AF:FA:FE:A4:25:A5:01:0C:9D:91:9B:74:3F:F2:E1:05:02
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:df:23:9f:c5:12:fc:06:69:9a:79:02:c1:03:8a:5a:e3:46:
         da:2b:d4:92:f5:8f:5c:7e:e0:a0:ca:37:7d:3e:fb:bc:64:64:
         05:14:79:fb:93:bf:25:de:c0:89:d1:8a:fe:0d:61:d1:9f:fd:
         8d:e0:e9:51:8b:1f:61:c8:85:57:ee:6f:7f:c2:f6:37:0a:fd:
         e0:97:f1:5d:14:1e:74:70:a9:35:c3:70:8a:f2:cf:d8:da:96:
         6c:fa:63:1d:ab:9b:de:a3:6c:94:50:2d:15:b8:9c:a1:b5:93:
         ea:19:cd:8d:fa:bc:c7:67:88:5b:27:6b:cc:24:80:2e:b7:78:
         76:f5:99:ac:2a:5f:33:c6:26:85:1a:7c:21:06:0f:2c:ce:e2:
         d3:11:12:af:17:e1:81:a0:3f:77:13:fc:ee:8b:ae:e3:11:4c:
         1b:4a:44:f6:5b:b6:7d:3d:ba:cb:2a:4e:fb:87:5a:3e:bc:27:
         6d:0a:6e:5f:1c:51:0a:2e:d1:51:d0:33:09:b1:61:0c:dd:64:
         34:cf:74:c9:60:c5:2a:c1:73:4e:54:30:a2:2c:f0:46:7c:92:
         5b:4b:c3:ed:e0:1c:f9:e4:fb:5b:a3:88:18:75:69:fb:a9:6a:
         0c:cb:9c:59:fa:98:61:1b:f9:41:f0:bd:c3:fe:80:20:91:09:
         43:90:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----