Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File:                     VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier:          T762NsBjIqBOaVxqNQPmxXYHN39wW8s7cmQ5ViJoIb8=
Subject key identifier:   AC:72:6F:C5:E6:E9:3A:FB:E3:74:57:F0:8B:FD:83:4D:7F:67:3A:8A
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       01962E98B2E51303514A26BB2C0D0FF215F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number:          022C
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (hash: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=)
                          2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: yW5XlxmJImOy0t1KrrEK5JD55mW3BBfCGPK74rOhnII=)
                          3: yqEmqcbhmnb46ykBCYCzd7P1rRM.roa (hash: VNz3bBdEChpstgbAZJ0LtBM0pJErcl090waf56cLjb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:e5:13:03:51:4a:26:bb:2c:0d:0f:f2:15:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=ac726fc5e6e93afbe37457f08bfd834d7f673a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:5b:4f:55:6f:35:8c:45:ea:70:7e:26:18:
                    f5:8d:2b:2e:1e:10:d7:64:8b:28:8e:fd:0c:91:38:
                    c6:b5:c6:91:b6:43:b8:33:f8:fa:62:46:6d:3a:ec:
                    e5:54:cd:dd:20:16:be:6c:fa:89:1c:7b:c0:a4:e3:
                    76:92:5a:df:5c:da:8c:11:a1:a1:a9:bf:47:e1:ca:
                    f6:54:c6:f0:9c:f0:14:d3:f4:3b:04:48:1c:2b:56:
                    90:e0:9a:48:66:e1:f1:ce:db:16:f5:4e:5d:bb:82:
                    7e:54:b7:45:8f:8f:0e:da:96:dd:56:d4:05:94:4e:
                    6d:4e:3d:7c:ab:b4:0e:9d:7b:e8:ac:02:15:6a:65:
                    33:6a:69:7a:c7:56:b1:c8:e5:12:d4:a9:2a:35:29:
                    7b:dd:52:96:73:5d:a4:bf:ad:7b:7d:04:03:23:e6:
                    e0:81:1d:26:d4:7f:42:7f:f9:9e:27:d1:2b:7f:d4:
                    de:b0:66:9f:b0:ea:05:04:d4:fd:93:7e:cc:17:9b:
                    23:c2:3e:bd:01:eb:a2:8e:c4:54:9d:04:a6:1c:94:
                    13:9d:91:bb:34:e6:2c:94:a8:4a:36:b4:b9:42:03:
                    e8:09:91:52:f0:48:fe:f4:3c:d4:df:4a:00:60:fe:
                    47:2d:6c:85:9d:d4:95:62:38:65:ad:06:c3:41:bc:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:6F:C5:E6:E9:3A:FB:E3:74:57:F0:8B:FD:83:4D:7F:67:3A:8A
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:0b:6f:3e:3e:7f:c8:9c:b4:e2:5a:e6:e5:7e:bb:7b:73:
         a7:d8:3f:74:a1:ee:52:80:aa:78:f6:09:da:73:e4:67:cd:22:
         4f:b2:83:d4:d0:1d:b5:54:7a:f3:f4:a1:4a:c3:61:2f:1d:d3:
         39:46:8f:f5:8d:f6:ed:9d:2f:f8:07:48:cc:90:8d:ce:94:7b:
         a6:eb:46:f6:df:de:6d:02:40:4e:0a:bf:ff:87:76:1d:51:6b:
         09:98:9f:15:23:42:8d:a1:ab:34:ff:9f:6b:d0:e5:b7:a5:f2:
         5b:a8:7a:58:11:b3:a1:48:c8:76:d3:f4:ea:da:64:9a:91:b7:
         35:18:0a:ae:1f:2a:df:a8:21:89:cc:d5:26:e8:eb:9f:09:de:
         a0:4f:0e:b4:1e:b7:39:42:86:3e:a9:8c:06:73:7d:1e:8a:6e:
         6a:d1:88:0a:c0:38:bb:c4:97:3e:db:a3:cc:3c:c9:01:5d:de:
         03:8f:c3:07:40:65:09:77:2d:a4:43:aa:0b:63:51:27:13:a8:
         66:33:e2:a6:b8:ad:48:37:8d:c1:66:23:a5:b9:64:f2:b3:5d:
         ee:5e:ec:51:3a:e1:30:40:50:98:c1:6d:1d:f8:9d:4f:89:92:
         5c:f1:e1:36:30:1d:b3:2e:4d:05:da:0e:1f:f5:d9:0f:db:e5:
         c3:fe:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----