Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File:                     RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier:          KweQgCWXAPhU6Nh4/+NGDW6AXhi4c9iN9oNYseCKCqQ=
Subject key identifier:   07:EE:70:A3:7F:A8:1D:82:68:AE:81:76:9E:98:89:1B:F8:CC:96:66
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer:       /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial:       01962FAB3DFD1E819E063E5F79A35985DF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number:          1056
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
                          2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: MRBPNRxhwW51w29RDdP8cGiFmVbha6Q8X61Lu4XF+eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:fd:1e:81:9e:06:3e:5f:79:a3:59:85:df:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=07ee70a37fa81d8268ae81769e98891bf8cc9666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:a5:3f:53:15:25:7f:1a:bc:a3:1f:08:0a:
                    53:f0:6c:c0:d6:f7:ff:54:13:58:7c:4b:fb:a1:52:
                    33:cb:f7:12:83:da:0f:2e:a7:dc:ac:e7:4a:81:c6:
                    18:ac:5a:a1:0f:bb:10:d2:06:56:bd:96:13:50:46:
                    4c:5c:16:94:a2:4e:f7:4f:a8:11:f8:68:f3:3a:70:
                    71:34:5a:1c:62:1e:2f:d5:dd:8d:03:c8:83:55:23:
                    53:bf:f6:05:23:39:71:7b:5b:a0:7d:bb:57:9d:11:
                    65:44:83:79:6e:89:42:8f:d9:79:23:ce:92:79:61:
                    18:79:9c:aa:71:28:d8:61:85:03:b0:c9:70:e1:b8:
                    d2:70:5c:87:36:8c:7d:eb:6d:7f:e2:45:82:4f:d1:
                    05:aa:a6:ec:f0:ba:d8:f6:1b:3f:3f:b0:a2:67:e9:
                    ce:27:97:36:72:2c:16:ee:07:c3:cf:a5:cc:3e:dc:
                    bd:bc:69:e0:00:f4:5c:60:75:0c:ec:2d:3f:75:4b:
                    62:ee:0d:de:e3:20:c5:93:9c:52:d1:97:6d:fb:57:
                    f6:39:61:62:ec:54:71:b6:93:89:9a:fc:17:d4:53:
                    ed:99:ec:54:4d:67:16:87:80:5c:ef:7b:74:a9:04:
                    f7:96:ca:22:45:cd:cf:ad:fe:d0:aa:ca:5c:b1:a2:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:70:A3:7F:A8:1D:82:68:AE:81:76:9E:98:89:1B:F8:CC:96:66
            X509v3 Authority Key Identifier:
                keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:79:ea:ec:9d:40:55:1b:91:9b:54:87:6e:1f:aa:e7:57:
         51:0d:4a:9b:b9:8b:42:91:cc:78:f7:ab:89:ff:73:c0:3c:88:
         4d:bc:76:be:08:d4:a3:36:a8:c5:60:61:b1:22:52:23:29:0b:
         a1:ed:a6:4a:bf:a6:b0:ea:62:44:5e:9b:3d:98:73:91:b0:2f:
         5e:ed:0f:c7:1a:df:9b:15:ae:c1:39:bb:0d:ec:97:d5:ba:a2:
         8f:b0:e1:1b:d4:1a:74:ca:69:08:b0:b1:66:36:fc:9e:89:29:
         49:dc:bc:7f:72:b3:97:82:87:ee:1a:42:d9:56:05:b1:09:ab:
         c2:50:fe:7d:3f:ff:ee:2e:e7:b6:d3:0a:66:23:47:13:66:18:
         09:bf:18:2e:05:db:5d:83:45:5f:28:d2:22:8e:77:23:4f:16:
         cc:83:07:08:28:80:6e:17:26:98:93:4e:10:5f:d8:6e:41:57:
         18:63:dd:54:80:26:2c:d4:72:23:b5:0b:3c:30:28:9c:1d:d5:
         a5:d3:95:07:9d:3b:41:de:2a:8d:cd:8e:06:c2:02:ac:2c:1a:
         a0:51:f5:8f:76:34:f9:b0:93:b9:ac:4c:b8:fc:00:61:99:cb:
         c3:8a:4f:44:ee:5e:28:e3:66:c0:21:84:17:bd:28:ab:53:60:
         76:91:89:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz39HoGeBj5feaNZhd8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjU2ZWNkM2Y0YjFkNmU4ZDY2OWVhZDBlMDMzZmRhZjBi
ZTRmNDAwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
EygwN2VlNzBhMzdmYTgxZDgyNjhhZTgxNzY5ZTk4ODkxYmY4Y2M5NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0telP1MVJX8avKMfCApT8GzA1vf/
VBNYfEv7oVIzy/cSg9oPLqfcrOdKgcYYrFqhD7sQ0gZWvZYTUEZMXBaUok73T6gR
+GjzOnBxNFocYh4v1d2NA8iDVSNTv/YFIzlxe1ugfbtXnRFlRIN5bolCj9l5I86S
eWEYeZyqcSjYYYUDsMlw4bjScFyHNox9621/4kWCT9EFqqbs8LrY9hs/P7CiZ+nO
J5c2ciwW7gfDz6XMPty9vGngAPRcYHUM7C0/dUti7g3e4yDFk5xS0Zdt+1f2OWFi
7FRxtpOJmvwX1FPtmexUTWcWh4Bc73t0qQT3lsoiRc3Prf7QqspcsaJsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfucKN/qB2CaK6Bdp6YiRv4zJZmMB8GA1UdIwQY
MBaAFET1bs0/Sx1ujWaerQ4DP9rwvk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMt
MDM2MzU0YTJjMjJmLzEvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMtMDM2MzU0YTJjMjJm
LzEvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYt56uyd
QFUbkZtUh24fqudXUQ1Km7mLQpHMePerif9zwDyITbx2vgjUozaoxWBhsSJSIykL
oe2mSr+msOpiRF6bPZhzkbAvXu0PxxrfmxWuwTm7DeyX1bqij7DhG9QadMppCLCx
Zjb8nokpSdy8f3Kzl4KH7hpC2VYFsQmrwlD+fT//7i7nttMKZiNHE2YYCb8YLgXb
XYNFXyjSIo53I08WzIMHCCiAbhcmmJNOEF/YbkFXGGPdVIAmLNRyI7ULPDAonB3V
pdOVB507Qd4qjc2OBsICrCwaoFH1j3Y0+bCTuaxMuPwAYZnLw4pPRO5eKONmwCGE
F70oq1NgdpGJ2g==
-----END CERTIFICATE-----