Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File:                     vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier:          gSDbuhpuX5zUsdUY6XlKxcFCDfPXPSjvJyyLdSEUTvQ=
Subject key identifier:   EE:FA:90:5C:85:35:1F:17:4F:02:37:F7:D6:DE:5A:0F:F0:BE:0F:DC
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer:       /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial:       01962F3D8C56212E3536F8690035D2D29E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number:          02D4
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: hIEolNFYJuKN1qWojFAcGNztG5rKUjWrjHDVFyYiltQ=)
                          2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:56:21:2e:35:36:f8:69:00:35:d2:d2:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=eefa905c85351f174f0237f7d6de5a0ff0be0fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:77:0e:d9:ff:63:3b:7d:5c:23:10:42:74:
                    b1:5d:77:f3:6c:d0:02:4b:eb:4c:c7:ce:58:ad:a4:
                    f1:12:0e:bc:df:17:82:20:f4:60:d7:1e:d8:60:9c:
                    92:5f:d7:66:7c:9b:40:41:ed:55:4c:6e:ef:37:9a:
                    e4:ef:5f:f8:18:1a:ce:39:e9:ca:10:bb:7b:90:e1:
                    db:cb:a1:32:84:27:35:8d:0f:2e:f0:27:4d:d6:e6:
                    14:1b:21:14:94:3f:c3:d9:b2:59:20:79:1e:b6:a0:
                    f2:20:a5:68:c0:e2:8a:34:11:0c:50:5c:fe:23:d3:
                    b8:51:2a:7f:65:d3:0c:a6:c6:4d:85:35:d0:df:e0:
                    72:ab:09:14:cb:fa:02:ac:50:1a:f1:db:7e:bd:86:
                    74:7f:53:86:a6:2f:05:9c:43:33:3b:d9:ce:fb:84:
                    78:5e:3f:0e:22:4e:aa:13:65:7f:9b:09:76:f2:29:
                    ca:94:bd:3e:04:56:59:49:d0:13:20:3a:40:2f:4a:
                    c3:70:34:8e:b0:aa:06:bc:ae:c3:db:7a:6a:55:63:
                    87:14:93:6a:8d:06:70:9b:57:8f:57:77:e7:57:cd:
                    b5:75:e7:ed:fa:31:73:a4:60:5f:e1:17:73:b0:89:
                    1c:3a:a7:b1:2b:70:ba:ad:63:04:e1:06:2b:0d:76:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:90:5C:85:35:1F:17:4F:02:37:F7:D6:DE:5A:0F:F0:BE:0F:DC
            X509v3 Authority Key Identifier:
                keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:7a:ae:98:2b:f2:a2:ea:38:e7:78:27:da:73:91:ce:3b:
         b7:24:2a:fd:a2:6c:1f:83:2b:02:11:9b:9d:c0:9d:8f:74:b5:
         56:6e:d1:a8:e7:8e:6c:07:fb:02:3e:d7:1f:33:59:2f:ad:78:
         81:2f:1f:84:2b:79:2d:4a:c2:50:e5:d9:e9:d6:47:c9:bf:c1:
         1f:64:18:b9:da:29:63:ea:83:18:d0:10:88:4f:f3:80:b6:98:
         2d:39:6c:fe:06:85:00:76:8a:ce:4c:4f:b9:3d:5c:94:20:04:
         89:ee:0a:8c:16:9a:8d:8b:7c:83:84:92:cd:c9:8b:5a:3c:5f:
         48:33:12:bc:60:14:04:67:52:db:82:d6:14:01:e4:a9:74:a4:
         c4:29:fb:fc:96:65:06:c7:09:fa:08:d1:02:1b:13:be:16:29:
         64:5f:83:83:b9:77:24:0f:df:55:d2:46:44:09:c1:e7:38:8f:
         c4:5d:56:c3:12:84:de:10:96:cc:10:ba:b8:f6:9c:14:14:9e:
         b0:67:3d:21:4a:81:9b:98:27:4c:7a:25:c4:4e:db:d1:9f:04:
         67:c8:37:e8:21:21:cd:d2:a2:ed:f1:43:ca:a5:d4:d1:9f:8a:
         2f:e0:09:3a:c5:8f:8b:8a:d3:38:d9:c6:87:9e:4b:8e:5e:b9:
         15:5f:50:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYxWIS41NvhpADXS0p5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2FjNzIwYTExN2I3NGQ0ZDEzYzI2M2Y3OTQ3NzkyOWVk
YmI0YmMwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
EyhlZWZhOTA1Yzg1MzUxZjE3NGYwMjM3ZjdkNmRlNWEwZmYwYmUwZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpR3Dtn/Yzt9XCMQQnSxXXfzbNAC
S+tMx85YraTxEg683xeCIPRg1x7YYJySX9dmfJtAQe1VTG7vN5rk71/4GBrOOenK
ELt7kOHby6EyhCc1jQ8u8CdN1uYUGyEUlD/D2bJZIHketqDyIKVowOKKNBEMUFz+
I9O4USp/ZdMMpsZNhTXQ3+ByqwkUy/oCrFAa8dt+vYZ0f1OGpi8FnEMzO9nO+4R4
Xj8OIk6qE2V/mwl28inKlL0+BFZZSdATIDpAL0rDcDSOsKoGvK7D23pqVWOHFJNq
jQZwm1ePV3fnV821deft+jFzpGBf4RdzsIkcOqexK3C6rWME4QYrDXbqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO76kFyFNR8XTwI399beWg/wvg/cMB8GA1UdIwQY
MBaAFL86xyChF7dNTRPCY/eUd5Ke27S8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjVmNWUtN2I3ZC00YjI4LWE5YjMt
MGFjMWJiZDQzNGQwLzEvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjVmNWUtN2I3ZC00YjI4LWE5YjMtMGFjMWJiZDQzNGQw
LzEvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4p6rpgr
8qLqOOd4J9pzkc47tyQq/aJsH4MrAhGbncCdj3S1Vm7RqOeObAf7Aj7XHzNZL614
gS8fhCt5LUrCUOXZ6dZHyb/BH2QYudopY+qDGNAQiE/zgLaYLTls/gaFAHaKzkxP
uT1clCAEie4KjBaajYt8g4SSzcmLWjxfSDMSvGAUBGdS24LWFAHkqXSkxCn7/JZl
BscJ+gjRAhsTvhYpZF+Dg7l3JA/fVdJGRAnB5ziPxF1WwxKE3hCWzBC6uPacFBSe
sGc9IUqBm5gnTHolxE7b0Z8EZ8g36CEhzdKi7fFDyqXU0Z+KL+AJOsWPi4rTONnG
h55Ljl65FV9Q7A==
-----END CERTIFICATE-----