Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File:                     VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier:          HJOaM9iQVrQlcStiWYNNtQbsrURfedOZhTa1gUXCyv8=
Subject key identifier:   66:48:F2:96:DE:5B:F5:39:24:09:43:DE:8C:29:2A:F5:4A:D1:47:F6
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer:       /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial:       01962E995E80B23B727865A502E09C39DFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number:          0E97
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: JWuSb3eXhPlvFwd3UMNdjl7IzCV55eSZ3yqhHw0jxHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5e:80:b2:3b:72:78:65:a5:02:e0:9c:39:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=6648f296de5bf539240943de8c292af54ad147f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:ca:61:5b:ec:15:84:22:07:43:e6:d4:69:
                    98:31:57:f9:17:ae:9e:b6:1f:db:0d:fe:d6:5f:42:
                    87:b0:87:dd:13:32:4b:67:82:29:d8:fa:fb:40:e0:
                    95:e2:95:4e:9a:6f:b0:0a:6e:dd:c9:c7:50:8f:32:
                    00:0c:50:da:d5:b2:75:f0:f1:46:49:33:21:40:29:
                    1d:55:40:eb:98:6a:74:fb:e2:00:bc:32:b8:92:de:
                    b8:de:ea:9d:e4:79:ee:6c:2e:89:e5:8b:82:34:37:
                    bb:95:46:ca:a9:02:dd:90:c4:62:cd:84:45:3b:a3:
                    af:ce:bc:9f:0a:2a:cf:f1:a9:07:1d:c0:bd:f3:56:
                    6f:87:e6:21:8f:72:fc:1e:4b:b1:ba:f6:c5:6b:3e:
                    38:cf:cf:cf:c3:5e:94:8d:30:8a:a4:00:98:38:47:
                    37:8d:c8:58:40:15:30:fd:d6:5a:86:a7:7c:68:c6:
                    fa:4f:c5:a0:f3:cb:c0:90:0e:a6:88:6a:db:c7:96:
                    2f:ee:34:e7:93:5b:4b:cf:32:1f:00:07:12:45:f6:
                    80:21:5c:fb:b8:f9:50:e2:b0:bd:37:5b:4a:5f:7e:
                    d9:d7:ac:a9:60:10:58:d6:5d:ca:c8:58:09:30:ac:
                    e6:8e:d4:43:98:ff:b9:f9:ab:47:eb:8b:be:6e:ea:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:48:F2:96:DE:5B:F5:39:24:09:43:DE:8C:29:2A:F5:4A:D1:47:F6
            X509v3 Authority Key Identifier:
                keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:94:13:60:7e:dd:db:04:02:1d:87:70:1a:17:a9:9d:35:
         84:29:60:fc:7b:15:dd:1f:34:7d:99:26:e9:b5:9e:75:0d:14:
         91:d8:ba:8c:46:1c:74:d5:a1:c0:d8:f9:bf:e2:b7:11:f5:44:
         01:c9:a5:09:52:d8:1b:08:4e:19:57:d5:4c:f7:a6:82:2e:16:
         64:0c:32:54:c2:52:a9:67:e8:a0:29:d1:2d:bc:bc:3f:70:fa:
         db:5a:06:c1:06:cc:1f:70:4e:72:b6:b4:ec:24:e3:8c:78:39:
         a7:27:97:0c:93:e7:60:bc:9d:8e:88:bd:2a:a4:98:b6:99:58:
         49:94:13:e2:7e:11:9a:eb:31:0d:b7:64:46:95:54:80:27:8d:
         08:40:c3:c6:d9:16:3d:b2:69:c4:06:e2:ec:0c:cf:4b:0b:b6:
         ac:5b:53:ef:cb:ff:b1:76:bc:5e:d7:df:7f:34:69:74:8b:ea:
         54:51:7a:a4:bc:8f:91:4e:23:8e:85:1e:d6:f1:4b:51:9f:1d:
         00:e8:3e:ed:9e:fa:90:fd:3c:d4:94:f8:98:23:b1:27:c5:6f:
         f2:10:ab:62:ef:46:7b:c7:e0:ed:82:48:14:5b:c2:5b:85:35:
         c8:a2:e9:56:17:b6:c8:69:51:03:32:b5:64:6e:c4:47:53:88:
         39:3d:8b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumV6AsjtyeGWlAuCcOd+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWM1ZTQ0ZDQ2YWNiOTU1MzQ1ZWJhNmUzNmU5MDYxZjhm
MTZkZTEwHhcNMjUwNDEzMTAwMjA1WhcNMjUwNDE0MTAwMjA1WjAzMTEwLwYDVQQD
Eyg2NjQ4ZjI5NmRlNWJmNTM5MjQwOTQzZGU4YzI5MmFmNTRhZDE0N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcvKYVvsFYQiB0Pm1GmYMVf5F66e
th/bDf7WX0KHsIfdEzJLZ4Ip2Pr7QOCV4pVOmm+wCm7dycdQjzIADFDa1bJ18PFG
STMhQCkdVUDrmGp0++IAvDK4kt643uqd5HnubC6J5YuCNDe7lUbKqQLdkMRizYRF
O6OvzryfCirP8akHHcC981Zvh+Yhj3L8HkuxuvbFaz44z8/Pw16UjTCKpACYOEc3
jchYQBUw/dZahqd8aMb6T8Wg88vAkA6miGrbx5Yv7jTnk1tLzzIfAAcSRfaAIVz7
uPlQ4rC9N1tKX37Z16ypYBBY1l3KyFgJMKzmjtRDmP+5+atH64u+burlIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZI8pbeW/U5JAlD3owpKvVK0Uf2MB8GA1UdIwQY
MBaAFFSsXkTUasuVU0XrpuNukGH48W3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEt
YzM0NDE1YmZjZGExLzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEtYzM0NDE1YmZjZGEx
LzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw2UE2B+
3dsEAh2HcBoXqZ01hClg/HsV3R80fZkm6bWedQ0Ukdi6jEYcdNWhwNj5v+K3EfVE
AcmlCVLYGwhOGVfVTPemgi4WZAwyVMJSqWfooCnRLby8P3D621oGwQbMH3BOcra0
7CTjjHg5pyeXDJPnYLydjoi9KqSYtplYSZQT4n4RmusxDbdkRpVUgCeNCEDDxtkW
PbJpxAbi7AzPSwu2rFtT78v/sXa8XtfffzRpdIvqVFF6pLyPkU4jjoUe1vFLUZ8d
AOg+7Z76kP081JT4mCOxJ8Vv8hCrYu9Ge8fg7YJIFFvCW4U1yKLpVhe2yGlRAzK1
ZG7ER1OIOT2LFw==
-----END CERTIFICATE-----