Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File:                     vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier:          374NSUo31Plg/iVot0yfzmDw6/SvpneUg8GnK3gXvRo=
Subject key identifier:   E8:1B:68:E4:26:D7:80:8F:7B:E2:AF:B7:9A:5C:45:9E:13:FD:B4:DE
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer:       /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial:       01962F06F25E61893405A45E8C1557268F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number:          01B8
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
                          2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: XouuIjJxlxidl68n41DA0e+Fwu6sYydXr9U2jdkGDpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:5e:61:89:34:05:a4:5e:8c:15:57:26:8f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=e81b68e426d7808f7be2afb79a5c459e13fdb4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:b1:61:eb:f5:5e:b7:dc:8e:9f:92:f2:e4:
                    b4:74:94:8a:01:5a:6d:ef:fa:a6:8f:0b:94:c1:c1:
                    20:d4:1d:7b:75:72:58:bc:97:1e:74:e8:b7:87:fe:
                    c5:a3:31:ae:78:68:1a:8c:69:a9:80:38:29:7c:2e:
                    fe:3a:6f:8d:7d:54:2c:80:19:b7:85:91:21:aa:1d:
                    c7:de:13:64:19:0c:87:9f:0c:03:cc:70:34:85:e0:
                    af:a4:68:47:c2:ad:f4:a3:2e:06:8a:64:fe:dd:80:
                    f1:9b:26:7d:09:17:10:d8:56:5d:6b:22:28:e9:08:
                    2f:44:bf:a0:4d:bd:7f:9e:5d:6d:d9:62:1f:4c:96:
                    08:72:c0:3f:1a:e1:5b:1b:22:25:93:88:a3:6e:55:
                    72:e6:cc:97:d3:b3:11:58:ea:00:30:cb:b4:95:79:
                    db:0a:a8:3f:0c:15:31:5b:91:9a:59:55:77:e0:ad:
                    2f:25:d9:ce:00:85:10:96:a4:b2:76:ae:66:f6:df:
                    97:fc:4b:07:f5:80:28:8c:14:ee:a2:f5:f6:4c:74:
                    d9:63:b2:da:b2:1a:1c:da:48:f0:b4:d8:5a:54:95:
                    65:ab:c3:53:7b:e0:69:94:62:5e:8e:b3:f0:61:f9:
                    08:ca:49:37:27:c3:c5:d1:29:d7:f6:31:d9:c7:77:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:68:E4:26:D7:80:8F:7B:E2:AF:B7:9A:5C:45:9E:13:FD:B4:DE
            X509v3 Authority Key Identifier:
                keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ff:c1:14:10:1e:77:b7:6c:17:93:71:59:d3:62:d4:6f:eb:
         b4:57:b4:7f:92:be:28:7e:08:d6:ee:ce:e1:40:5b:8b:48:b4:
         aa:3d:00:c7:3b:7a:17:f5:f3:cb:29:2b:1f:41:05:87:5b:45:
         82:9e:bd:54:8c:70:ed:1c:10:43:70:d2:dd:91:a7:70:7a:2b:
         e2:09:34:00:93:d3:48:05:07:91:20:bc:cd:f3:71:43:00:7b:
         2e:22:0a:e8:d1:51:bb:bf:42:1e:c8:5d:79:73:a5:7c:5d:43:
         d8:d4:8f:fa:49:c9:7d:a9:95:30:ee:37:5c:81:1a:71:f5:2b:
         0d:6b:75:bf:00:40:39:80:d7:bd:18:93:01:f8:96:f4:bb:7c:
         d1:0e:4c:81:0a:75:0f:f6:74:d5:d2:b8:33:2c:69:ad:f4:eb:
         d4:6e:7e:7a:1d:71:9a:f5:44:6f:44:9f:7b:61:19:0b:88:89:
         bf:e2:92:9f:3a:cf:a7:9c:0a:68:21:cb:a6:fb:71:76:1c:ae:
         06:ef:6e:f5:99:65:bb:db:b2:d8:b2:7c:7e:50:d5:cb:9b:1a:
         90:ea:38:2a:83:84:ce:16:b3:b3:c6:f8:a2:c3:32:eb:37:a5:
         18:3a:8c:c7:80:fd:86:57:9a:23:78:b6:6f:9b:12:ea:1f:83:
         dd:81:7b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvJeYYk0BaRejBVXJo9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi
NTFiZDkwHhcNMjUwNDEzMTIwMTQ2WhcNMjUwNDE0MTIwMTQ2WjAzMTEwLwYDVQQD
EyhlODFiNjhlNDI2ZDc4MDhmN2JlMmFmYjc5YTVjNDU5ZTEzZmRiNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXixYev1Xrfcjp+S8uS0dJSKAVpt
7/qmjwuUwcEg1B17dXJYvJcedOi3h/7FozGueGgajGmpgDgpfC7+Om+NfVQsgBm3
hZEhqh3H3hNkGQyHnwwDzHA0heCvpGhHwq30oy4GimT+3YDxmyZ9CRcQ2FZdayIo
6QgvRL+gTb1/nl1t2WIfTJYIcsA/GuFbGyIlk4ijblVy5syX07MRWOoAMMu0lXnb
Cqg/DBUxW5GaWVV34K0vJdnOAIUQlqSydq5m9t+X/EsH9YAojBTuovX2THTZY7La
shoc2kjwtNhaVJVlq8NTe+BplGJejrPwYfkIykk3J8PF0SnX9jHZx3etdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgbaOQm14CPe+Kvt5pcRZ4T/bTeMB8GA1UdIwQY
MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt
ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh
LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf/BFBAe
d7dsF5NxWdNi1G/rtFe0f5K+KH4I1u7O4UBbi0i0qj0Axzt6F/XzyykrH0EFh1tF
gp69VIxw7RwQQ3DS3ZGncHor4gk0AJPTSAUHkSC8zfNxQwB7LiIK6NFRu79CHshd
eXOlfF1D2NSP+knJfamVMO43XIEacfUrDWt1vwBAOYDXvRiTAfiW9Lt80Q5MgQp1
D/Z01dK4MyxprfTr1G5+eh1xmvVEb0Sfe2EZC4iJv+KSnzrPp5wKaCHLpvtxdhyu
Bu9u9Zllu9uy2LJ8flDVy5sakOo4KoOEzhazs8b4osMy6zelGDqMx4D9hleaI3i2
b5sS6h+D3YF7Mw==
-----END CERTIFICATE-----