Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File:                     vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier:          qaixlJ0JIHm7sP77NvI4SKOixRNxxUsNQ0nyEISiLTE=
Subject key identifier:   BC:CB:A1:26:87:0F:5B:EB:17:88:68:1B:71:5A:11:B7:63:C1:00:57
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer:       /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial:       01962F3D72CBE27AA7634F7AE3E27B130C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number:          08E0
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
                          2: REnNHc3EdwxgjNw-VpXGx_g82qg.roa (hash: 124s1GBcl/AFEUck0q3Uo/i9OIRaWtaDN26Tjn+07fQ=)
                          3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: NR8JEb85WHXDII8Z9Bcjl1h4en63yIfJIa38pelFiXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:cb:e2:7a:a7:63:4f:7a:e3:e2:7b:13:0c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=bccba126870f5beb1788681b715a11b763c10057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:aa:d3:20:fa:09:fa:46:16:8b:66:5a:62:
                    ef:80:27:7b:21:19:1f:dd:f1:84:7f:6b:86:eb:1f:
                    4a:0d:d4:72:e0:9a:45:ee:11:de:e9:5b:10:8f:35:
                    9b:0e:6b:71:87:98:7e:26:92:95:b7:da:92:6b:1b:
                    15:6e:1d:9d:d1:b5:6c:8a:4b:07:b8:46:64:19:c2:
                    77:f7:df:20:25:c8:0a:43:18:49:07:88:44:90:9b:
                    19:39:fc:67:e8:fa:8f:2b:43:e3:c6:1e:68:d3:3b:
                    1a:d5:3c:58:9b:04:ef:6e:5d:fc:c6:9b:c9:0e:de:
                    92:f7:fb:02:6d:55:b5:d8:d8:e9:60:8a:1a:a9:38:
                    5e:d7:eb:c6:6c:dc:6b:25:50:e7:d3:39:d0:02:62:
                    0d:01:07:f3:53:ab:7f:be:eb:3a:ff:96:19:c7:af:
                    dd:b8:75:b8:99:8f:48:1f:65:13:5b:3f:4d:51:64:
                    12:7f:de:32:4b:72:5f:54:17:fe:a0:ae:17:a6:39:
                    65:75:ba:8c:82:ad:9e:99:c6:51:79:7c:c3:fd:c5:
                    94:43:a4:f4:53:fb:75:38:78:34:af:59:7a:b5:92:
                    3f:d9:87:29:bf:5d:17:55:5c:77:4a:d4:4c:ae:6a:
                    27:22:7f:41:27:20:a4:61:6e:1c:01:b9:1f:1e:d7:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CB:A1:26:87:0F:5B:EB:17:88:68:1B:71:5A:11:B7:63:C1:00:57
            X509v3 Authority Key Identifier:
                keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:29:f6:0d:a9:17:2e:2b:96:12:cf:6a:13:7a:0a:c1:8a:
         3d:83:96:70:1b:66:91:bd:b1:6a:7e:76:4b:ee:a4:16:7f:f1:
         f7:f5:43:df:6a:eb:94:a7:28:68:d8:c2:ab:ca:c9:9c:7a:3f:
         7e:cb:e5:ae:ad:df:7e:64:9c:9b:e1:0f:e5:23:6e:f0:23:4c:
         d6:ed:85:e4:7e:a7:97:92:0a:cc:0f:0c:30:dd:f3:9f:55:24:
         a2:12:9b:8f:ce:1d:63:a8:24:7d:d1:45:80:0d:60:a2:77:b1:
         9f:b9:d6:92:da:8d:19:39:2f:51:f6:b7:23:66:55:9f:3a:35:
         55:e7:39:25:d8:51:bb:5f:2f:b0:05:69:cb:86:c8:b8:06:5d:
         85:f3:0d:4a:21:81:c1:b7:d7:df:f2:58:b4:5d:f4:c9:a3:46:
         03:83:15:41:7b:f4:5c:c5:f9:49:fd:76:ea:05:69:eb:78:cd:
         c6:71:c6:68:32:2d:3d:c1:73:33:d6:0a:9b:13:bc:a8:fa:3a:
         ad:cd:da:5a:d3:75:a4:ff:cd:3c:42:5b:83:1d:17:9f:f4:63:
         2c:3b:c6:4e:55:85:eb:95:ce:40:f9:35:49:db:93:d7:2e:0c:
         ae:3e:b7:73:c0:74:3f:d9:3c:67:b7:94:a7:6a:96:d6:15:ec:
         6c:ce:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----