Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File:                     vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier:          pjVIxNmpkD1Ov+p/YGHvGt36MuSJbe6bW79QYhuaxog=
Subject key identifier:   13:70:D6:58:EE:BB:C3:DF:3E:0B:F1:77:04:F1:29:CC:5B:D7:C5:EB
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer:       /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial:       01962FAB25D9D03F0E91C77186B04A4885E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
                          2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: 4N4BEO8Le1PRSbj5lrIsEPz0hz16OHjnz/a5ZI0Afj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:d9:d0:3f:0e:91:c7:71:86:b0:4a:48:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=1370d658eebbc3df3e0bf17704f129cc5bd7c5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:3a:c2:ca:c9:2c:49:d2:2f:c3:06:d2:ac:
                    99:93:a9:60:96:9c:17:00:73:d2:db:9a:a9:8e:a7:
                    e6:d4:b5:36:20:54:af:f3:ae:11:cc:09:4f:c6:75:
                    ce:38:34:49:7a:70:7c:4e:60:3f:5a:31:a9:97:0c:
                    7f:8b:3e:90:eb:23:35:df:30:5d:08:40:65:9f:b9:
                    38:d6:2b:4e:60:d0:49:37:7d:98:ce:9d:ab:21:dd:
                    ce:c7:89:ce:d0:fb:78:c3:73:ae:a7:b6:aa:67:e6:
                    09:33:75:d3:33:22:a3:31:fa:f1:3f:81:d0:c5:b8:
                    c0:f7:14:3d:99:78:00:58:50:41:03:6a:13:d4:50:
                    e9:d3:3f:fd:25:48:8f:03:e7:33:23:3a:5f:02:0f:
                    19:2d:1c:d4:6b:e0:a9:41:c7:f2:6f:00:9e:b6:49:
                    99:fd:13:4c:fd:f4:72:c9:45:d9:f8:30:03:6e:85:
                    34:db:5f:04:78:00:24:ee:ea:30:36:61:73:14:87:
                    cc:cc:93:28:a6:c9:11:f9:08:41:d3:b5:98:72:1a:
                    46:ec:51:13:3e:71:36:94:ec:01:4b:e7:02:16:77:
                    49:3b:91:c2:3f:e5:d3:b9:dd:b5:4d:fc:c9:53:35:
                    4b:2e:79:3e:ab:25:35:c3:9d:19:74:56:1f:6d:e3:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:D6:58:EE:BB:C3:DF:3E:0B:F1:77:04:F1:29:CC:5B:D7:C5:EB
            X509v3 Authority Key Identifier:
                keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:7d:da:2f:0a:0c:02:ea:9c:65:09:7d:22:78:cd:0e:b0:
         ad:50:ac:05:5b:04:21:dc:0e:a7:b7:2d:d4:0a:e4:26:14:37:
         0c:96:e1:c2:2e:81:f9:33:30:e9:f8:37:14:f1:58:28:4e:50:
         d3:a3:fa:b3:82:67:a0:08:ae:50:50:79:d5:ed:c5:25:ea:1a:
         a3:f7:49:80:fb:4f:97:a1:a6:7f:60:60:b5:55:76:92:ba:f1:
         11:7f:4a:0a:74:dc:79:68:1b:a2:58:04:d3:b3:67:3c:df:77:
         e2:81:b7:f1:43:e5:e7:19:35:67:c7:34:5b:c5:0a:2d:28:18:
         7e:ca:48:c8:a8:46:d4:63:38:58:6b:f4:f1:e6:b5:fd:6f:37:
         a2:38:9a:bd:bf:bc:62:04:c6:06:04:eb:7d:7a:b3:26:93:e1:
         02:7f:08:e7:87:e1:30:e9:bb:a7:4e:35:9f:23:17:f3:77:fd:
         cc:f9:00:a9:80:74:a1:f7:d2:5a:48:a0:74:2a:e8:a9:0c:f6:
         22:62:94:27:af:19:fa:75:b2:19:3b:16:1a:d1:78:e6:69:ad:
         d7:94:d4:53:7b:58:55:80:77:ff:0f:75:83:1a:ff:9d:12:80:
         41:a4:a4:ef:61:a7:e0:9d:d4:77:c7:48:d1:3c:af:60:02:61:
         a5:80:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----