Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.mft
File:                     Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.mft (raw, json)
Hash identifier:          Lfq2t0KflNeJv1bWWO5S8yFo/bg2k9k4xH5yoalMzns=
Subject key identifier:   C9:25:62:6C:D6:3B:50:94:40:CE:BE:6D:E1:5A:46:0B:B8:1F:39:C5
Authority key identifier: 56:6F:B9:B3:7C:55:DF:1A:A8:F0:03:4A:57:D6:22:F4:D3:73:23:55
Certificate issuer:       /CN=566fb9b37c55df1aa8f0034a57d622f4d3732355
Certificate serial:       01922F1217BBD45558D80CA216699C8E3D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.mft
Manifest number:          12D9
Signing time:             Thu 26 Sep 2024 16:02:47 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:47 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:47 +0000
Files and hashes:         1: MW9yLxqjL83GO6EszGX210APBQY.roa (hash: x56TsXHmBTBMjJp57hLmCJLOZN6OI+F05KCFYtfymZs=)
                          2: Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.crl (hash: dgTIb+PjHWD0fw8uyba3G0+X4Rnei6JExn9Mt3v5tpM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:12:17:bb:d4:55:58:d8:0c:a2:16:69:9c:8e:3d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566fb9b37c55df1aa8f0034a57d622f4d3732355
        Validity
            Not Before: Sep 26 16:02:47 2024 GMT
            Not After : Sep 27 16:02:47 2024 GMT
        Subject: CN=c925626cd63b509440cebe6de15a460bb81f39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:3a:7a:28:7d:fb:8f:a8:59:77:f8:3c:52:
                    d9:62:22:f3:df:92:f9:45:0e:b5:f5:24:c9:e7:9d:
                    9c:27:4d:85:52:70:4e:6b:49:de:95:97:ca:ae:b4:
                    60:a3:34:00:02:60:cd:71:f0:4b:eb:8a:c4:0f:10:
                    6b:5c:da:95:0b:b8:a7:da:49:1e:fc:36:68:6a:6b:
                    44:6d:e3:82:67:6a:ee:ed:c5:4f:bd:a5:90:8e:27:
                    76:38:93:4d:a1:6c:85:19:e1:b6:a3:96:c0:80:c1:
                    d5:7a:12:a9:f4:f8:cd:09:c9:8d:10:b6:39:0b:34:
                    d5:65:cc:f9:4f:1d:76:1d:fe:e8:27:a5:e1:c0:62:
                    d7:ba:c5:3d:1c:02:5c:63:92:22:c4:21:cb:20:aa:
                    e9:1f:43:98:19:95:31:55:70:59:e4:6d:31:13:62:
                    45:86:af:71:f4:f0:5d:7c:da:72:22:43:00:de:4b:
                    26:8a:ff:fb:bc:42:1d:1d:f1:2f:44:6b:08:61:7f:
                    2c:8c:47:e6:c7:79:80:6d:8f:00:ee:df:ae:c4:f1:
                    5b:88:1e:df:7a:d2:c2:38:e3:b5:cc:56:e6:5a:e8:
                    db:51:4f:b6:03:d0:d6:6e:5a:5c:dd:fc:04:12:4c:
                    a5:c6:ae:50:5b:05:c1:26:29:33:36:25:d8:cf:f6:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:62:6C:D6:3B:50:94:40:CE:BE:6D:E1:5A:46:0B:B8:1F:39:C5
            X509v3 Authority Key Identifier:
                keyid:56:6F:B9:B3:7C:55:DF:1A:A8:F0:03:4A:57:D6:22:F4:D3:73:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:a0:25:97:9d:18:47:fa:55:ce:e9:bf:96:c8:ac:41:c7:
         c6:f0:6b:a9:de:3b:0c:55:db:14:b1:d5:39:97:36:02:64:aa:
         27:53:5c:35:e9:79:cf:a4:ff:b0:60:f8:b1:7d:de:a1:03:ac:
         96:7a:59:0e:d2:80:ac:03:d4:da:b0:7e:7e:6b:e7:aa:2b:c5:
         d7:97:ce:74:67:f9:b7:b5:83:e0:0a:2d:cb:4f:da:35:4b:03:
         d8:32:06:a1:32:3b:ea:4b:8f:6f:09:24:83:89:cf:74:3d:3f:
         32:ba:2a:1c:30:9b:91:67:17:b1:fd:29:4f:0d:f2:85:41:09:
         1d:44:5e:5b:e1:77:5e:90:ab:39:97:7a:4f:24:b4:bc:82:8a:
         de:e5:c6:54:8f:a9:c9:42:b9:0e:1c:e2:68:85:3c:6f:13:be:
         25:56:ae:b0:26:ab:e1:96:61:20:37:43:37:71:9d:21:22:0d:
         98:de:07:12:b0:ff:5a:1c:44:3f:c0:49:68:e3:c9:44:b6:15:
         35:83:6c:49:80:3d:d9:73:b5:f9:43:57:31:96:76:20:09:48:
         cb:4b:3a:42:c6:62:63:3b:18:42:69:87:da:68:be:5d:91:47:
         14:4a:21:10:b0:5f:5d:0f:00:9c:8f:da:18:bd:91:fc:9f:bd:
         d5:77:f7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----