Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File:                     vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier:          BeapWOOnU+wcWLzz6qmpqgHGK4fHnMpUpXc/RLxVDSA=
Subject key identifier:   9C:84:A5:E5:F1:CA:11:08:18:81:0F:D4:6B:9B:9C:9A:E6:30:0A:09
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer:       /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial:       01962F0674E6810D07C79F7D12FAB44F10EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number:          0608
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=)
                          2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=)
                          3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: zu7Sh7vSsn2GiJCXAxIIpWQkDZVsMpxbYjYAuHMuvPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:e6:81:0d:07:c7:9f:7d:12:fa:b4:4f:10:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=9c84a5e5f1ca110818810fd46b9b9c9ae6300a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:eb:3c:a3:e1:7c:37:a5:a4:50:dd:dc:d6:
                    41:c2:b8:66:71:94:d5:6d:03:60:58:fe:8b:21:91:
                    3d:4e:4b:45:0b:1e:f7:75:94:09:09:b4:d4:3c:34:
                    e0:f9:f5:01:97:56:d4:6c:d7:c9:2c:15:26:ad:14:
                    e6:6d:c7:52:18:8d:51:88:c7:f8:e5:f7:e4:ad:d0:
                    f8:59:78:7c:04:77:fc:5e:be:ef:d5:da:75:b5:75:
                    bb:c1:11:6e:32:b1:b0:95:40:ce:db:d4:27:1e:f4:
                    3f:68:25:c5:d1:d8:ee:70:22:46:63:41:9d:bb:1e:
                    3a:bb:0d:62:1b:54:9b:b2:57:eb:cb:0f:6a:63:13:
                    6f:a3:f6:5a:1d:79:5c:38:93:a5:cc:49:e4:4e:05:
                    09:1a:b6:5d:de:bc:9e:e4:7f:3d:5d:30:bd:72:c5:
                    7d:c2:50:ba:70:ca:df:25:f9:ab:a3:5d:c7:69:03:
                    23:33:0e:5d:30:75:6f:d5:54:72:28:ae:9b:fe:9f:
                    c0:7a:46:1c:9f:74:91:e7:d3:5c:cb:8b:de:a3:2e:
                    f5:aa:54:d8:7c:8c:3a:0f:82:2a:51:55:bd:8a:51:
                    9f:e2:06:f6:2e:2e:1b:88:87:30:ab:e7:75:d1:73:
                    a0:8b:a9:80:76:e5:6d:e5:4c:94:b7:ee:c9:cb:ce:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:A5:E5:F1:CA:11:08:18:81:0F:D4:6B:9B:9C:9A:E6:30:0A:09
            X509v3 Authority Key Identifier:
                keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:95:d7:29:ed:76:69:7a:42:0f:c2:55:a4:9f:92:e5:9a:
         62:57:ff:40:f9:53:68:1f:e4:c5:2d:78:bd:0e:06:26:97:92:
         c6:21:47:c3:37:17:4a:31:5c:ce:34:aa:8c:ee:50:88:3f:ac:
         d4:ba:6c:dd:f6:10:fa:2a:17:f1:1d:2b:f7:c4:04:b8:fe:1e:
         00:2a:f9:e6:1f:24:78:2c:55:6d:ff:27:69:71:0a:a5:5a:b9:
         68:5a:28:46:ec:2e:86:6e:95:26:4f:7d:c1:b0:d4:fb:b5:44:
         04:8a:d7:d9:a0:d2:48:31:34:cd:d8:55:5b:af:8a:34:59:64:
         0b:0d:04:f6:1c:2f:a3:59:fc:b8:bd:4a:dd:e5:17:0e:97:24:
         c6:9c:7b:35:71:fd:fb:d3:e6:1c:1c:07:c5:d3:eb:cc:c6:98:
         fe:87:35:87:c8:94:4f:20:63:d3:09:f3:8c:48:b0:f5:2a:28:
         0e:3f:9c:f4:2a:ff:80:92:aa:66:73:e2:b6:4e:d8:fc:38:01:
         60:58:bf:37:96:8a:86:44:34:a0:f1:f2:63:1a:cf:e1:1d:2f:
         90:34:a3:8c:72:66:36:ef:e7:d0:f8:d8:de:6a:e2:aa:1d:47:
         e2:6d:cb:29:d3:83:23:ff:ff:fa:37:72:97:2b:1f:24:2e:0f:
         37:d2:1c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnTmgQ0Hx599Evq0TxDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl
MGVhZTYwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
Eyg5Yzg0YTVlNWYxY2ExMTA4MTg4MTBmZDQ2YjliOWM5YWU2MzAwYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQDrPKPhfDelpFDd3NZBwrhmcZTV
bQNgWP6LIZE9TktFCx73dZQJCbTUPDTg+fUBl1bUbNfJLBUmrRTmbcdSGI1RiMf4
5ffkrdD4WXh8BHf8Xr7v1dp1tXW7wRFuMrGwlUDO29QnHvQ/aCXF0djucCJGY0Gd
ux46uw1iG1Sbslfryw9qYxNvo/ZaHXlcOJOlzEnkTgUJGrZd3rye5H89XTC9csV9
wlC6cMrfJfmro13HaQMjMw5dMHVv1VRyKK6b/p/AekYcn3SR59Ncy4veoy71qlTY
fIw6D4IqUVW9ilGf4gb2Li4biIcwq+d10XOgi6mAduVt5UyUt+7Jy87l5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyEpeXxyhEIGIEP1GubnJrmMAoJMB8GA1UdIwQY
MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt
YjUxYWRmZmM2ZWVjLzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj
LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOqV1ynt
dml6Qg/CVaSfkuWaYlf/QPlTaB/kxS14vQ4GJpeSxiFHwzcXSjFczjSqjO5QiD+s
1Lps3fYQ+ioX8R0r98QEuP4eACr55h8keCxVbf8naXEKpVq5aFooRuwuhm6VJk99
wbDU+7VEBIrX2aDSSDE0zdhVW6+KNFlkCw0E9hwvo1n8uL1K3eUXDpckxpx7NXH9
+9PmHBwHxdPrzMaY/oc1h8iUTyBj0wnzjEiw9SooDj+c9Cr/gJKqZnPitk7Y/DgB
YFi/N5aKhkQ0oPHyYxrP4R0vkDSjjHJmNu/n0PjY3mriqh1H4m3LKdODI///+jdy
lysfJC4PN9Icxw==
-----END CERTIFICATE-----