Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File:                     VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier:          Yzr58/qAeXSjmy+EjNLu5VC83gSmLJZEMhlSTRzkyAQ=
Subject key identifier:   6F:EF:60:29:AA:3C:8B:1D:E0:47:A9:58:1E:35:6A:72:E6:BC:AE:F1
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer:       /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial:       01962FAB2C893FC773DAF01E9AB5D5A0BE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number:          0EE3
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
                          2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: xcLmnUWyDzFWC7J/EN7kRhpn4Mbd30P+24/t7N0ijLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:89:3f:c7:73:da:f0:1e:9a:b5:d5:a0:be:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=6fef6029aa3c8b1de047a9581e356a72e6bcaef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:70:03:11:7b:2d:89:2f:01:76:9a:a2:63:
                    46:57:4c:f6:af:3d:c2:c9:c4:dc:f0:31:a3:64:fb:
                    2b:d5:6b:0b:1d:40:14:1e:64:0c:b8:bb:b1:19:9c:
                    93:29:ae:28:a6:40:16:2a:9b:67:a3:b0:58:b0:7d:
                    40:c4:8d:1e:bd:94:ec:73:6e:45:c9:c6:30:52:f6:
                    86:c0:79:a2:8a:38:96:91:79:e3:46:12:bc:d5:af:
                    63:b7:cc:ba:9e:a8:84:74:8e:ec:75:24:76:0d:4f:
                    2f:21:53:d5:50:3c:65:ae:1e:5e:ff:09:da:b0:e1:
                    99:c0:44:b6:b7:86:21:f5:83:9e:ee:ab:3e:fe:b2:
                    e8:77:44:29:2b:4d:94:eb:3a:cd:ca:74:cd:86:f6:
                    c8:dc:14:82:d6:21:4b:64:0b:25:9c:d6:0b:2e:66:
                    d9:cc:a2:47:f5:f6:55:7a:21:67:2c:a9:6b:af:a0:
                    e1:37:58:db:81:39:74:e9:12:e6:14:cf:25:b3:02:
                    b3:dd:9b:72:b5:04:ff:4c:9f:5b:7e:00:7e:78:9a:
                    7e:7a:d9:b1:d0:d9:e7:41:97:90:e7:7a:52:ac:51:
                    da:e2:96:77:60:92:0b:a9:b5:5a:8c:a8:00:14:99:
                    b6:48:1f:08:05:7f:49:4b:70:05:02:a8:95:81:13:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:60:29:AA:3C:8B:1D:E0:47:A9:58:1E:35:6A:72:E6:BC:AE:F1
            X509v3 Authority Key Identifier:
                keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:20:37:99:b6:3b:cb:33:c1:d3:e8:f5:10:59:08:6d:a5:1f:
         86:60:b4:d4:aa:ce:ae:0b:3a:ed:fb:57:c1:13:d1:c0:d4:7f:
         e9:b0:ae:80:e7:bf:52:ba:c7:c6:f3:53:1e:e1:18:4c:98:7b:
         29:9e:97:19:5c:c6:8e:42:5f:a9:7d:f9:b7:9a:c1:d5:bd:fa:
         6a:3d:10:af:c3:91:8b:f9:99:af:85:1f:b1:9a:ee:df:ba:d0:
         51:5e:cd:a7:ac:8b:dd:bb:40:32:0f:f0:52:49:70:7e:74:f6:
         64:26:e2:ad:04:8c:d3:2b:8c:48:b5:43:ed:62:d8:77:7d:68:
         fd:d1:83:6e:3b:a1:ec:c3:b7:d9:d3:4b:f3:58:0a:01:2a:71:
         da:09:9d:70:8d:58:1b:e3:c3:ed:7a:a3:b8:7b:23:01:eb:98:
         c3:fc:6f:42:27:9b:45:01:4f:e8:f2:e6:51:9a:a0:9a:f4:99:
         4d:24:4c:df:f6:80:f3:f2:db:63:5c:c9:ed:aa:bf:73:f3:c8:
         b0:10:0a:36:04:cb:81:c1:72:e7:ff:45:88:e8:90:6f:fd:34:
         da:bf:0f:2f:bf:14:ee:dd:ec:8d:c7:8a:f8:49:f0:59:67:46:
         a5:2b:ed:67:2b:50:0d:43:a9:14:3f:de:c8:aa:0a:2d:d0:d9:
         7c:5d:bc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyyJP8dz2vAemrXVoL4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZDA2YWZkMjZkMjUyMjM0MjdhN2EwZDVmOWUzMTU5MDYz
ZmJjYTMwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg2ZmVmNjAyOWFhM2M4YjFkZTA0N2E5NTgxZTM1NmE3MmU2YmNhZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jZwAxF7LYkvAXaaomNGV0z2rz3C
ycTc8DGjZPsr1WsLHUAUHmQMuLuxGZyTKa4opkAWKptno7BYsH1AxI0evZTsc25F
ycYwUvaGwHmiijiWkXnjRhK81a9jt8y6nqiEdI7sdSR2DU8vIVPVUDxlrh5e/wna
sOGZwES2t4Yh9YOe7qs+/rLod0QpK02U6zrNynTNhvbI3BSC1iFLZAslnNYLLmbZ
zKJH9fZVeiFnLKlrr6DhN1jbgTl06RLmFM8lswKz3ZtytQT/TJ9bfgB+eJp+etmx
0NnnQZeQ53pSrFHa4pZ3YJILqbVajKgAFJm2SB8IBX9JS3AFAqiVgRNmBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/vYCmqPIsd4EepWB41anLmvK7xMB8GA1UdIwQY
MBaAFFXQav0m0lIjQnp6DV+eMVkGP7yjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2Mjkt
MTczZjAwOTZiZDg1LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2MjktMTczZjAwOTZiZDg1
LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2yA3mbY7
yzPB0+j1EFkIbaUfhmC01KrOrgs67ftXwRPRwNR/6bCugOe/UrrHxvNTHuEYTJh7
KZ6XGVzGjkJfqX35t5rB1b36aj0Qr8ORi/mZr4UfsZru37rQUV7Np6yL3btAMg/w
UklwfnT2ZCbirQSM0yuMSLVD7WLYd31o/dGDbjuh7MO32dNL81gKASpx2gmdcI1Y
G+PD7XqjuHsjAeuYw/xvQiebRQFP6PLmUZqgmvSZTSRM3/aA8/LbY1zJ7aq/c/PI
sBAKNgTLgcFy5/9FiOiQb/002r8PL78U7t3sjceK+EnwWWdGpSvtZytQDUOpFD/e
yKoKLdDZfF285w==
-----END CERTIFICATE-----