Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          U+5iIr2mHNWg6r1JWvqrk5/emLqkU7CjXYAjg9o+AkI=
Subject key identifier:   84:9B:E0:3B:CB:06:05:AB:35:AC:8D:0C:9D:43:78:4A:92:A3:B8:67
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       01962F3D3864AC7CD198CAF7D24D689E74B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          080F
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: bFjo4D7viLzF5qhKTx4z46Rbe7ae82eFVAzX4qZiIZA=)
                          2: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
                          3: nlnL1KrlFfXQEwGDosct7b61rpQ.roa (hash: qhnchUWmXUGxeLQaDoPZCE17/L9LF/P0wpk8nhaLzWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:64:ac:7c:d1:98:ca:f7:d2:4d:68:9e:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=849be03bcb0605ab35ac8d0c9d43784a92a3b867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:c1:5f:06:2f:64:73:40:9e:ec:eb:af:06:
                    95:4b:ac:c7:ba:35:24:58:4c:b3:27:00:b3:af:2c:
                    e6:2b:7c:2b:35:85:85:dd:c0:9b:77:73:d0:87:45:
                    45:a2:fa:98:20:e8:c2:e5:5a:86:52:7f:07:5f:e2:
                    b5:7e:a3:94:e8:85:09:35:86:8c:d4:62:59:60:a6:
                    ff:7a:7e:ee:16:f4:ae:3c:55:23:06:5f:8b:7b:a2:
                    1f:97:4e:e2:4a:a3:4e:aa:ed:49:33:0f:81:56:cb:
                    cb:b3:70:95:6e:ec:63:40:60:dc:28:b7:57:bf:14:
                    34:e8:d6:94:ca:5d:e5:7e:fa:6b:cc:5c:bd:23:b1:
                    29:b6:ca:e0:b9:f3:82:0f:ec:53:53:a7:86:96:07:
                    43:9b:20:f7:18:20:1d:1f:3b:b4:1e:8f:5d:51:1b:
                    09:10:1a:2e:a6:09:fc:ef:97:1e:dc:f2:d4:72:31:
                    57:c8:4a:5f:80:0a:77:e4:19:2d:df:a2:56:51:00:
                    97:c2:fe:a4:60:93:61:7e:12:fc:2f:d7:d7:c5:01:
                    ea:4e:7b:59:05:43:7f:15:78:5e:f7:ba:cc:f3:36:
                    1e:d3:da:7e:3a:3c:c7:90:69:59:13:8c:25:c9:05:
                    ef:78:eb:f3:26:3e:57:1e:13:7d:d9:24:c0:b6:f8:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:E0:3B:CB:06:05:AB:35:AC:8D:0C:9D:43:78:4A:92:A3:B8:67
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ec:7b:64:65:5f:1b:c7:65:3a:c6:7b:ae:00:d0:c4:3f:05:
         fa:2b:91:bc:66:d0:33:31:d4:b1:9a:04:fc:ce:1d:cf:18:98:
         b4:1e:54:13:2f:da:ca:82:b8:66:6a:53:49:3d:a5:bf:5a:d2:
         aa:37:f6:00:af:03:72:e1:fa:24:e0:5b:f3:a4:8d:c4:2e:f3:
         aa:d1:d2:4b:14:42:61:6e:f6:52:09:fd:cd:2b:d0:0c:9d:08:
         29:24:2c:50:e5:db:7b:ac:ef:25:97:dc:76:81:8e:83:e4:16:
         09:02:b1:23:7d:18:e8:83:b0:01:f0:a8:c0:27:8f:de:30:82:
         75:21:cb:be:8f:1c:fe:e7:26:bc:90:9c:09:b9:84:4b:e7:ad:
         94:84:03:07:28:a4:9b:c1:53:9c:cc:69:36:9a:37:a6:c0:0d:
         ee:ea:e3:b9:a6:a6:fc:7b:e8:a5:76:53:58:8e:7c:46:41:a5:
         67:61:92:b4:fe:a2:24:f9:79:90:55:f0:38:b6:56:64:bb:f0:
         6d:50:82:3b:c6:36:f8:41:4b:b1:8e:42:2a:e3:f6:10:7f:3b:
         2f:71:da:a1:dc:5a:31:a8:6e:99:a1:46:0c:95:25:7c:cc:44:
         6e:3f:d5:89:f7:a8:ab:2c:1a:da:e1:e2:02:84:7f:81:1f:43:
         b5:71:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----