Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          pilSwJV347vXcwMlRuSjad00GVW+hj8dklxO7ZWKvew=
Subject key identifier:   6D:3D:26:24:D8:6C:15:23:D5:93:84:1F:78:97:BA:39:C9:2F:79:57
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       01962F0706D56DD82E9A53B2A54558D324AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=)
                          2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: rjzVtOrQZm/U69U/dg0Yr0PaYcW1JTZhkS5+/7qBlWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:d5:6d:d8:2e:9a:53:b2:a5:45:58:d3:24:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=6d3d2624d86c1523d593841f7897ba39c92f7957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:ab:a7:8b:c6:92:14:8a:58:23:50:85:88:
                    c2:dd:78:8b:5b:7a:5c:06:87:60:00:30:ea:60:76:
                    d0:b4:78:34:52:2f:70:75:15:8f:a7:85:c6:c4:e8:
                    ad:e9:e0:b2:61:47:01:2f:63:d3:8d:22:78:79:6b:
                    dc:1d:94:b9:7d:94:2f:a2:e2:64:a2:8b:b4:91:e9:
                    54:3e:d1:b5:cb:95:84:24:7a:8b:11:e6:51:8b:b8:
                    f3:2a:24:d1:c9:02:42:6d:5a:54:6b:1d:96:50:68:
                    0d:13:2b:a0:e5:42:01:92:e1:42:e0:2f:ee:5f:82:
                    94:97:86:7a:96:13:ea:25:80:06:0e:47:d3:be:a9:
                    39:bc:37:82:31:a9:71:80:53:38:2c:16:32:8f:a7:
                    38:7b:ab:9b:cb:19:c9:2d:48:c4:d1:16:80:32:04:
                    df:59:61:0c:bd:47:5f:92:a7:ad:dd:e0:1e:9a:90:
                    ea:6a:53:c3:74:70:ca:1a:28:8a:3b:3e:ca:2e:0f:
                    93:9a:cc:1e:ee:b3:7f:9f:a8:7b:8e:fd:83:87:f6:
                    12:19:c2:64:ad:1a:60:c0:bb:50:fc:54:eb:80:c4:
                    4b:a1:81:51:0b:79:98:33:9c:86:c9:89:f6:61:4f:
                    8b:a3:7a:1b:dc:0e:70:c1:2a:d5:39:7e:45:dd:6c:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:26:24:D8:6C:15:23:D5:93:84:1F:78:97:BA:39:C9:2F:79:57
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:46:dd:67:e2:c0:60:cc:ee:2e:98:bc:72:d3:83:39:68:e2:
         0a:92:8b:d6:f4:ed:82:70:83:e7:12:7e:c5:01:2e:49:aa:1e:
         60:b0:d0:04:03:17:a7:89:e8:2b:89:be:d5:3e:a8:aa:4d:9c:
         58:03:47:b7:c7:16:e2:e5:a2:b2:71:8c:f3:2c:1b:af:70:ce:
         b0:08:d7:eb:ef:37:12:f3:6f:77:c5:08:79:d7:85:3c:64:23:
         7c:96:10:98:80:5a:1a:d5:ad:ab:b7:86:3a:3d:d0:0a:6f:2c:
         ba:1b:54:62:19:dd:64:14:cf:01:66:1e:17:0b:4e:e3:cd:54:
         ba:be:86:fb:84:97:84:da:fc:a7:a5:c6:b2:90:fc:d8:54:f9:
         f2:c4:08:32:8d:51:d9:d7:d1:59:93:b6:48:e3:cb:d7:9f:c0:
         b7:84:04:ed:1c:6b:28:67:32:ec:8c:1c:b6:0f:2f:71:b2:d1:
         21:28:2e:b0:86:61:a7:18:3d:ef:e1:81:30:e5:dc:f3:6f:1c:
         d1:03:93:df:25:88:5d:df:2c:03:6a:1e:bd:e0:fb:52:11:1a:
         e9:4d:e4:d4:1d:ce:41:ce:d0:f4:e8:9e:b1:25:e1:bf:b4:b1:
         61:06:2a:42:d8:5b:31:59:60:69:cd:66:e6:02:7a:af:f4:5f:
         11:6b:fa:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwbVbdgumlOypUVY0yStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTFiMDJkNTVkMzUwNWZiOWY5NzE5ZmJkMGI1MjMxNmZm
NmMxMDMwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg2ZDNkMjYyNGQ4NmMxNTIzZDU5Mzg0MWY3ODk3YmEzOWM5MmY3OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqCrp4vGkhSKWCNQhYjC3XiLW3pc
BodgADDqYHbQtHg0Ui9wdRWPp4XGxOit6eCyYUcBL2PTjSJ4eWvcHZS5fZQvouJk
oou0kelUPtG1y5WEJHqLEeZRi7jzKiTRyQJCbVpUax2WUGgNEyug5UIBkuFC4C/u
X4KUl4Z6lhPqJYAGDkfTvqk5vDeCMalxgFM4LBYyj6c4e6ubyxnJLUjE0RaAMgTf
WWEMvUdfkqet3eAempDqalPDdHDKGiiKOz7KLg+Tmswe7rN/n6h7jv2Dh/YSGcJk
rRpgwLtQ/FTrgMRLoYFRC3mYM5yGyYn2YU+Lo3ob3A5wwSrVOX5F3WxQYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG09JiTYbBUj1ZOEH3iXujnJL3lXMB8GA1UdIwQY
MBaAFHVRsC1V01Bfuflxn70LUjFv9sEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYt
ODRiN2Y2ODhiYTMwLzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYtODRiN2Y2ODhiYTMw
LzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkbdZ+LA
YMzuLpi8ctODOWjiCpKL1vTtgnCD5xJ+xQEuSaoeYLDQBAMXp4noK4m+1T6oqk2c
WANHt8cW4uWisnGM8ywbr3DOsAjX6+83EvNvd8UIedeFPGQjfJYQmIBaGtWtq7eG
Oj3QCm8suhtUYhndZBTPAWYeFwtO481Uur6G+4SXhNr8p6XGspD82FT58sQIMo1R
2dfRWZO2SOPL15/At4QE7RxrKGcy7Iwctg8vcbLRISgusIZhpxg97+GBMOXc828c
0QOT3yWIXd8sA2oeveD7UhEa6U3k1B3OQc7Q9OiesSXhv7SxYQYqQthbMVlgac1m
5gJ6r/RfEWv6ww==
-----END CERTIFICATE-----