Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File:                     vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier:          aAU9xFz5kpct3me3eOn4sFsEfpjsXxADUGd1gMZEdXM=
Subject key identifier:   6C:7F:8B:14:B7:4C:7C:69:A7:82:07:DC:CD:E8:BE:3D:A7:74:76:7F
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       0194BCAA3F1581CF7F8CF31DC9961FE72804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number:          0D47
Signing time:             Fri 31 Jan 2025 14:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:01 +0000
Files and hashes:         1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=)
                          2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=)
                          3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=)
                          4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=)
                          5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=)
                          6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=)
                          7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: 34DQhWG1qcSsiUv/nE5+m+gqRcPwz1Yme535dhVkQ1w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3f:15:81:cf:7f:8c:f3:1d:c9:96:1f:e7:28:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jan 31 14:01:01 2025 GMT
            Not After : Feb  1 14:01:01 2025 GMT
        Subject: CN=6c7f8b14b74c7c69a78207dccde8be3da774767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:e3:e1:79:3b:1f:b5:cb:52:62:f8:19:68:
                    5f:1a:2c:e6:70:f7:bf:50:cb:82:55:5f:8c:de:94:
                    dc:3e:82:f1:2d:b7:fc:13:e9:a9:56:f0:76:82:b9:
                    80:c7:4d:5d:96:42:6f:45:eb:0a:b0:1e:ee:29:dc:
                    93:2c:48:4b:b4:d4:bd:e6:f1:a0:e9:51:fa:70:e2:
                    64:24:a2:8a:b8:a0:a2:d7:36:f1:d6:81:54:06:e0:
                    30:54:96:0c:76:3e:36:20:43:04:b2:1d:91:f9:e9:
                    3f:93:1a:ed:5d:66:da:dd:bb:dd:8e:cc:f8:ce:38:
                    9b:88:df:13:cc:d6:18:49:0e:8a:09:b0:42:60:ef:
                    c4:cd:7a:30:25:49:5c:7f:f0:bb:87:ee:43:cf:dd:
                    db:f6:76:b4:32:eb:f5:b2:fb:5d:dc:d8:8c:72:55:
                    9d:b5:4e:88:7b:1d:7a:de:c4:0b:d7:3a:fa:8c:b5:
                    62:92:f3:62:79:b7:c3:7a:43:93:55:5a:80:33:bd:
                    10:44:74:64:db:37:b6:84:36:67:c9:66:be:0b:6e:
                    55:99:c0:ce:0e:53:36:42:1c:77:88:7b:51:e2:b4:
                    1d:ae:ed:7b:c9:99:8c:3f:92:1a:51:f1:87:79:08:
                    53:0e:a7:12:42:a1:0c:57:ea:91:80:ed:a2:c8:8f:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:8B:14:B7:4C:7C:69:A7:82:07:DC:CD:E8:BE:3D:A7:74:76:7F
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:13:0f:92:6a:f9:4b:b3:c2:7f:56:e7:13:03:e5:f4:b2:
         ea:3b:79:a6:d1:66:5a:01:61:61:95:ee:f6:bb:15:f5:c1:31:
         55:ba:8e:b0:dd:64:8f:de:5e:ad:18:0a:5e:5a:fb:a6:7e:a2:
         be:59:b1:18:07:39:de:40:59:68:49:7a:94:a5:f6:8c:7c:58:
         d6:52:ce:a6:3c:ef:f5:7a:73:f4:1a:e7:d5:42:56:20:5e:3e:
         0d:0c:3f:53:4f:69:c7:bc:17:22:39:91:b8:31:48:f6:a7:b7:
         78:c9:b3:3b:31:96:f2:05:fe:b8:1b:75:3f:27:22:b1:b5:73:
         84:61:27:29:62:1e:8c:ae:16:8a:8a:9f:43:69:b7:01:65:99:
         a1:6c:91:a0:de:7d:10:e4:40:d2:1e:f4:7e:16:4d:0d:de:54:
         a8:a8:c4:48:2d:3e:6b:cf:ac:56:a2:0b:22:29:d9:b6:2f:82:
         90:f6:04:b0:2b:ec:3a:60:64:50:85:7f:ac:43:6f:1e:84:5d:
         9c:24:b1:32:a2:1a:60:f9:54:63:5a:7f:e6:74:c0:a8:4b:1b:
         15:6b:5f:1f:fd:cb:79:6d:17:71:61:e9:91:28:61:bd:34:cd:
         50:e1:2b:dc:7c:4e:0d:3d:09:89:98:2b:e3:b1:e6:1d:e7:8e:
         33:fd:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----