Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          wZZ9PCiE2bY9kFf/0Jxk0zKSwnuKPXuPmvd3d2tQ4Dg=
Subject key identifier:   2E:11:CD:20:11:AD:63:51:DC:80:F9:18:7F:C1:24:CC:C0:A3:07:26
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       01962F74C1A2C08F643672333438E13C3BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
                          2: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
                          3: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: xSj4Map9ckg4fHfHwNNLDLDdfKBWpk8v7Ka5vwqlPPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:a2:c0:8f:64:36:72:33:34:38:e1:3c:3b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=2e11cd2011ad6351dc80f9187fc124ccc0a30726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:67:cc:cc:70:dc:e9:a5:c2:9a:26:ec:5d:
                    d9:36:2d:54:7b:f5:c3:95:3e:04:df:0a:71:87:f1:
                    49:09:2d:7c:29:a0:49:a3:d9:61:ac:02:c2:4c:51:
                    57:0d:59:36:42:34:de:37:d9:52:1d:43:69:d0:d0:
                    eb:48:e9:98:7d:2b:bc:63:33:07:87:cd:14:f4:10:
                    6b:c6:5a:c7:38:29:65:c3:2f:86:e4:79:58:ec:03:
                    84:a7:77:7f:0f:4c:e4:0f:c6:ad:f0:ed:55:fb:6f:
                    06:ad:94:10:03:90:94:8c:75:65:29:dc:33:d9:a3:
                    76:8c:33:1c:33:d2:a8:c0:e2:7a:6c:9b:ae:84:70:
                    ac:bf:6e:bf:af:e7:f3:a9:e6:5b:90:2e:25:74:48:
                    4e:75:e3:ed:c3:9d:4b:0f:62:5b:f3:f0:17:d0:42:
                    1c:2c:f6:32:ce:1c:f2:65:92:e2:65:63:c3:17:c9:
                    e8:71:31:ad:44:86:a3:41:b8:80:65:b9:1d:89:ae:
                    51:f7:c9:04:94:d5:b9:ee:8c:db:18:46:29:6a:bd:
                    eb:9c:dd:4b:dc:6d:23:a0:e7:a0:27:c9:02:8f:14:
                    8c:e5:f0:a6:e2:dc:a2:41:c6:79:d0:20:9d:fc:de:
                    0a:05:01:af:6a:89:be:de:d1:db:d9:44:8d:05:83:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:CD:20:11:AD:63:51:DC:80:F9:18:7F:C1:24:CC:C0:A3:07:26
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:d7:c0:3d:c9:2e:c2:a0:b8:97:01:20:e7:1d:62:c1:2d:
         6c:5e:37:6c:14:58:14:89:b5:b4:d1:d2:72:ff:78:f0:f4:cf:
         17:5a:27:45:7a:07:4c:b2:85:39:2c:00:6d:fa:c4:92:73:6c:
         36:06:60:f8:5f:3c:5f:3f:1d:9f:e4:04:fe:a7:02:73:fa:d6:
         8d:16:f3:d5:eb:1d:67:3b:8a:be:7d:d9:2c:1f:0c:91:7d:e3:
         2c:c7:b0:77:0b:21:af:ce:51:dd:60:bc:1d:71:d6:e4:26:4d:
         14:78:81:10:c8:e8:52:af:5e:81:ec:01:30:a1:0a:dc:8d:4d:
         12:95:62:f0:29:44:f6:2f:a0:34:6c:d3:df:43:ae:8c:3c:37:
         83:07:49:72:f4:57:97:1f:46:86:d3:12:c4:26:be:8d:34:79:
         25:5b:dd:93:c8:30:df:a6:93:ad:e1:7e:48:60:c5:6a:6a:e5:
         e0:0b:ec:e7:75:93:86:3b:96:72:d6:de:42:24:d9:cb:fe:55:
         c5:32:fd:ad:c0:f8:ac:c8:4f:5b:16:83:13:16:66:3c:20:bd:
         f4:ba:85:39:fd:a3:49:2e:ab:76:7e:db:45:2e:5d:a9:bb:b3:
         bc:0d:d3:ef:14:6b:e8:0d:86:28:66:cd:2e:bb:29:87:1e:b6:
         22:7d:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----