Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File:                     vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier:          B3DTBehfXDg5IygyJISlfANI+0WkCAdNCJutH/Fd3ts=
Subject key identifier:   B1:6A:C1:A8:A8:E5:5A:71:2F:F5:7E:90:02:28:B9:4A:C4:4F:BF:42
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer:       /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial:       01962E2B1777CDD1226EF6FB714D6A981FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number:          132B
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
                          2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: 8HbenT6bvqcbJftUFG+kpeEduSECko9MKgl7JDSc+90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:77:cd:d1:22:6e:f6:fb:71:4d:6a:98:1f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=b16ac1a8a8e55a712ff57e900228b94ac44fbf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:88:fe:ed:84:93:ac:b6:32:ec:40:5a:23:
                    ad:f2:33:16:c4:58:14:14:ee:3c:bb:c2:5a:63:29:
                    25:8a:f0:e4:f2:ed:13:d9:33:4e:87:f7:55:1e:1a:
                    f8:fa:41:6d:0e:00:a7:51:c4:1b:94:a1:2e:53:b7:
                    57:13:76:b8:88:f3:58:be:bf:32:cc:4d:a1:fe:43:
                    f7:ef:14:bf:91:83:26:da:88:27:a3:08:44:1b:a6:
                    dc:6d:a8:1c:fd:cf:80:10:d1:35:f2:3f:1e:ad:ee:
                    75:c4:65:6b:d8:9c:58:29:2f:aa:85:b2:8b:97:65:
                    76:e9:48:c9:6e:45:af:61:f7:64:18:e5:f5:58:32:
                    aa:cf:5e:39:0a:8d:60:3d:c6:07:2c:c4:25:c3:2f:
                    80:ee:49:9f:f3:28:db:18:cd:f8:92:0c:b2:9a:49:
                    e8:af:0a:cd:c3:8c:fb:60:b4:1d:5f:3f:d1:83:a0:
                    96:14:62:74:a7:43:55:5e:b3:63:a5:61:96:93:be:
                    e5:1e:86:36:b8:65:3a:37:a0:82:fe:a0:a3:b1:31:
                    58:8a:a6:01:1f:ee:91:38:2d:46:26:78:03:9e:97:
                    78:72:17:1a:a3:92:2b:fe:a3:74:b2:88:7a:92:28:
                    9e:68:6e:92:23:64:8e:28:a2:13:25:48:ef:38:72:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:C1:A8:A8:E5:5A:71:2F:F5:7E:90:02:28:B9:4A:C4:4F:BF:42
            X509v3 Authority Key Identifier:
                keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:da:fe:ff:a1:a1:02:43:bb:b8:a4:4d:79:ed:9a:99:9d:
         ca:e8:56:41:84:a5:28:d1:14:42:67:12:16:c5:5e:44:eb:04:
         78:14:23:ab:d9:76:3c:e7:da:1b:39:86:f2:21:8c:4a:84:9c:
         38:2e:6f:13:c7:dc:2e:86:31:1c:e2:9b:f5:16:6c:f4:7e:b8:
         44:c3:f2:ae:b7:e7:d9:5f:6a:22:dd:77:f0:82:ac:be:a8:c5:
         f4:93:2d:25:b0:86:12:f1:3c:18:61:0e:73:91:b2:01:c5:d1:
         43:2c:b5:3e:48:0e:4e:3d:f7:d9:ba:1b:8e:90:a6:0d:c7:29:
         78:43:eb:0d:6b:46:8c:10:21:29:03:05:a0:20:d9:55:9e:1f:
         56:fa:8f:8e:77:65:88:fe:d2:f8:40:ec:d0:6c:76:a0:39:95:
         11:16:d0:b3:22:27:f1:ce:47:05:21:c5:ea:66:70:fd:b6:36:
         e1:88:8f:99:1a:9c:e8:c7:e5:b8:14:b0:01:04:8b:82:19:84:
         57:a0:b0:94:22:a9:58:bd:67:f9:d7:a9:de:e9:aa:bd:41:0c:
         6f:ff:ce:62:eb:b7:72:5d:7d:f6:30:19:dc:54:47:0e:19:96:
         84:08:78:30:57:bc:c7:18:7a:55:6d:56:d1:b3:37:16:c5:67:
         4c:96:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----