Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File:                     VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier:          v9UfdnRuhyuV039t07cLvfrIBZm/Jd+S2zJmwmXLY18=
Subject key identifier:   3B:EA:F1:57:EB:62:90:A8:2D:83:A3:58:0C:91:FB:42:44:EC:83:53
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer:       /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial:       01962F06E64D51D2A24EE3AB3E3FC4BDAD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
                          2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: 8zOlE+obs8T7/yQvJ2CUEsRDZuaERu2F9zDgKM0ilmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:4d:51:d2:a2:4e:e3:ab:3e:3f:c4:bd:ad:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=3beaf157eb6290a82d83a3580c91fb4244ec8353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:50:99:f9:19:cc:e4:3e:c9:de:cf:fa:97:
                    c8:2c:97:59:74:9a:9f:25:58:91:1a:bc:05:a6:77:
                    61:14:3f:7f:07:38:43:45:fb:ae:71:53:c8:5c:4e:
                    2f:1d:86:2d:a6:ce:d7:c9:4f:56:79:cc:e7:8a:b5:
                    fd:5f:bb:7c:cd:7e:33:3d:18:0f:e6:55:54:17:99:
                    b1:f5:44:59:25:27:f1:9b:be:63:a6:11:58:21:da:
                    68:cf:82:e1:97:9b:b7:cc:27:07:d5:d2:16:6e:c8:
                    56:d5:3f:b1:f2:82:d3:4d:76:6d:32:82:40:b3:ce:
                    c6:5b:f2:92:7c:72:48:35:53:be:25:5c:f5:65:b6:
                    82:1b:68:a5:87:d4:e2:5b:6b:be:9a:ef:55:17:01:
                    e4:6f:ec:61:8f:06:9a:2a:37:b3:66:ad:3c:8d:0a:
                    83:1f:1b:a0:a0:f4:b7:f9:16:42:23:91:a7:9c:e1:
                    8e:2c:b0:ce:92:f0:f9:8d:98:d1:64:eb:a2:a9:70:
                    bc:b5:d2:e1:7b:d6:59:3a:3e:67:b6:51:97:4f:31:
                    81:b8:03:31:81:3e:f2:3a:c1:df:fa:8e:ad:a6:f1:
                    3e:bc:94:54:94:a4:64:cb:ac:a5:c6:af:1e:15:11:
                    28:7a:df:b8:c0:cd:12:3b:32:bf:b3:a3:d3:ca:df:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EA:F1:57:EB:62:90:A8:2D:83:A3:58:0C:91:FB:42:44:EC:83:53
            X509v3 Authority Key Identifier:
                keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:63:ba:1b:15:03:39:dc:70:e8:8b:3b:98:d4:16:a3:33:7d:
         bb:05:04:90:3c:8f:fd:a6:b2:15:a8:a3:64:bd:fe:bd:76:90:
         44:3f:e9:eb:4a:c0:bf:d4:0a:b3:f9:5e:06:6d:87:25:79:84:
         99:78:09:9a:4c:77:f8:a0:1f:6f:94:2d:55:13:55:e0:d2:4b:
         bc:d5:3e:7d:34:57:1b:1b:73:6d:ae:86:71:19:44:20:eb:73:
         ec:49:98:66:85:08:e0:82:40:fc:af:64:75:fb:48:52:15:d8:
         02:c4:d9:33:c3:85:67:72:ad:23:18:89:59:9e:1d:04:e3:ab:
         af:c3:91:7a:c0:b1:e5:28:d8:4c:d1:2e:1d:67:cf:2a:f8:d6:
         85:90:0f:06:ad:d0:a5:19:4b:c2:1d:a0:22:e5:43:92:9c:a3:
         6e:60:22:5e:7c:88:b3:4f:94:33:3b:c6:0d:0e:d8:04:d9:c2:
         3f:4d:7a:dc:0a:48:55:aa:53:a1:04:fe:88:6c:cf:a1:cb:d1:
         29:03:01:6f:da:f6:90:ab:88:99:46:6f:52:53:e0:3e:96:26:
         7b:2b:fa:8c:7c:6b:11:03:92:c7:66:83:ed:2b:ac:f1:05:d3:
         88:89:0a:a8:be:69:82:50:29:1e:ce:b6:40:30:7c:63:2b:9f:
         6c:db:19:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuZNUdKiTuOrPj/Eva0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwNDEzMTIwMTQzWhcNMjUwNDE0MTIwMTQzWjAzMTEwLwYDVQQD
EygzYmVhZjE1N2ViNjI5MGE4MmQ4M2EzNTgwYzkxZmI0MjQ0ZWM4MzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypVQmfkZzOQ+yd7P+pfILJdZdJqf
JViRGrwFpndhFD9/BzhDRfuucVPIXE4vHYYtps7XyU9WecznirX9X7t8zX4zPRgP
5lVUF5mx9URZJSfxm75jphFYIdpoz4Lhl5u3zCcH1dIWbshW1T+x8oLTTXZtMoJA
s87GW/KSfHJINVO+JVz1ZbaCG2ilh9TiW2u+mu9VFwHkb+xhjwaaKjezZq08jQqD
HxugoPS3+RZCI5GnnOGOLLDOkvD5jZjRZOuiqXC8tdLhe9ZZOj5ntlGXTzGBuAMx
gT7yOsHf+o6tpvE+vJRUlKRky6ylxq8eFREoet+4wM0SOzK/s6PTyt+plwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvq8VfrYpCoLYOjWAyR+0JE7INTMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2O6GxUD
Odxw6Is7mNQWozN9uwUEkDyP/aayFaijZL3+vXaQRD/p60rAv9QKs/leBm2HJXmE
mXgJmkx3+KAfb5QtVRNV4NJLvNU+fTRXGxtzba6GcRlEIOtz7EmYZoUI4IJA/K9k
dftIUhXYAsTZM8OFZ3KtIxiJWZ4dBOOrr8OResCx5SjYTNEuHWfPKvjWhZAPBq3Q
pRlLwh2gIuVDkpyjbmAiXnyIs0+UMzvGDQ7YBNnCP0163ApIVapToQT+iGzPocvR
KQMBb9r2kKuImUZvUlPgPpYmeyv6jHxrEQOSx2aD7Sus8QXTiIkKqL5pglApHs62
QDB8YyufbNsZ5A==
-----END CERTIFICATE-----