Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File:                     CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier:          QjeIkyK9LMvMDdOv0sqLK/14c+tBU9FqSY1AvzKy4mA=
Subject key identifier:   30:FE:5E:44:FB:07:DA:2A:45:F6:A3:06:09:47:A5:71:C2:7F:53:EC
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer:       /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial:       01962F3DB4EBE48C1764F07C68024A51326B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number:          0BFE
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: J+XOxQaowg8wh68mo+VfEm5JKiccfGUhE6KCVHwZ8zk=)
                          2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:eb:e4:8c:17:64:f0:7c:68:02:4a:51:32:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=30fe5e44fb07da2a45f6a3060947a571c27f53ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:47:c4:aa:37:db:b0:cf:76:c6:c4:b9:fd:
                    63:18:51:b7:ec:87:56:fe:8d:20:64:4f:c3:b5:21:
                    f0:03:2b:8e:27:1c:84:43:37:a8:fa:85:8c:19:1b:
                    33:e2:af:9c:89:30:8e:4c:b0:b1:7e:97:9b:a8:7a:
                    da:23:35:74:b3:89:48:c9:2e:22:10:3b:d7:4b:46:
                    ed:6b:21:95:a1:b9:ce:1d:e7:1f:9f:4f:80:44:1d:
                    8c:0a:9c:9d:1a:ef:b3:f9:c0:7e:52:1b:b9:43:2e:
                    ee:54:03:31:78:c5:31:9d:d0:32:f5:47:17:b5:95:
                    b9:ff:12:0e:ac:92:77:05:e1:b8:53:80:48:4f:b7:
                    e0:55:9c:84:50:e4:b4:fd:15:d7:89:f0:b5:1c:21:
                    b4:6f:7c:68:bf:be:c4:6b:f9:fd:89:26:7f:ec:b7:
                    49:6c:0c:db:49:12:5e:bc:10:c3:c2:92:77:98:43:
                    70:3b:5d:51:85:17:bb:47:bc:e6:0d:04:1e:2c:ca:
                    f1:37:00:4f:f9:11:90:09:4d:1d:f6:a7:42:54:ff:
                    88:f0:eb:5a:af:e4:cf:bf:ab:73:b1:51:28:09:5f:
                    d0:7e:8e:95:48:55:b5:25:cd:35:05:3f:cb:e7:ab:
                    25:ac:c0:e9:62:42:fc:0f:f4:24:7d:2b:63:7d:26:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:5E:44:FB:07:DA:2A:45:F6:A3:06:09:47:A5:71:C2:7F:53:EC
            X509v3 Authority Key Identifier:
                keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:87:17:0f:1b:36:2a:36:9d:c2:73:9d:76:51:0d:c9:27:
         4e:a5:14:9d:47:8f:42:53:7f:13:b0:a5:de:21:b7:54:f0:15:
         82:f5:3f:1e:04:f1:d8:7d:ba:79:68:fd:e6:97:14:5f:2c:40:
         e4:44:e5:61:3f:59:a0:ca:c8:fe:d5:8d:02:53:a4:77:24:30:
         e5:90:82:69:43:e0:cc:9c:bc:98:0f:93:3f:22:be:6d:05:e3:
         95:f4:be:26:e9:23:1f:b6:08:9b:bc:a7:9f:e5:db:ac:12:ce:
         06:00:7c:a7:12:44:30:5a:4e:af:98:3b:3c:f2:bf:04:d6:63:
         fa:cd:8e:a3:14:ce:3a:57:36:46:79:47:52:b8:e6:45:70:17:
         f4:45:40:58:86:87:31:11:11:ac:64:cc:11:91:67:d6:67:7a:
         68:85:d4:d5:85:6d:8c:d0:a1:a9:c5:72:f3:2f:d9:db:18:12:
         1f:45:97:12:d7:f4:1a:77:e1:a2:90:88:05:f8:79:f9:88:06:
         2b:53:cf:f2:42:3a:b8:1e:b8:32:1c:d2:a6:86:d2:e1:d2:54:
         32:14:bf:ae:0e:85:8d:31:13:0f:d5:b5:0f:e8:41:2b:4a:dc:
         93:5f:84:3e:e0:f4:b2:93:bc:5f:95:f5:52:d2:c9:3a:f3:b6:
         ac:fa:7e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbTr5IwXZPB8aAJKUTJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4
NGQyZTkwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EygzMGZlNWU0NGZiMDdkYTJhNDVmNmEzMDYwOTQ3YTU3MWMyN2Y1M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ZHxKo327DPdsbEuf1jGFG37IdW
/o0gZE/DtSHwAyuOJxyEQzeo+oWMGRsz4q+ciTCOTLCxfpebqHraIzV0s4lIyS4i
EDvXS0btayGVobnOHecfn0+ARB2MCpydGu+z+cB+Uhu5Qy7uVAMxeMUxndAy9UcX
tZW5/xIOrJJ3BeG4U4BIT7fgVZyEUOS0/RXXifC1HCG0b3xov77Ea/n9iSZ/7LdJ
bAzbSRJevBDDwpJ3mENwO11RhRe7R7zmDQQeLMrxNwBP+RGQCU0d9qdCVP+I8Ota
r+TPv6tzsVEoCV/Qfo6VSFW1Jc01BT/L56slrMDpYkL8D/QkfStjfSZiaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD+XkT7B9oqRfajBglHpXHCf1PsMB8GA1UdIwQY
MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt
NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm
LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlSHFw8b
Nio2ncJznXZRDcknTqUUnUePQlN/E7Cl3iG3VPAVgvU/HgTx2H26eWj95pcUXyxA
5ETlYT9ZoMrI/tWNAlOkdyQw5ZCCaUPgzJy8mA+TPyK+bQXjlfS+JukjH7YIm7yn
n+XbrBLOBgB8pxJEMFpOr5g7PPK/BNZj+s2OoxTOOlc2RnlHUrjmRXAX9EVAWIaH
MRERrGTMEZFn1md6aIXU1YVtjNChqcVy8y/Z2xgSH0WXEtf0GnfhopCIBfh5+YgG
K1PP8kI6uB64MhzSpobS4dJUMhS/rg6FjTETD9W1D+hBK0rck1+EPuD0spO8X5X1
UtLJOvO2rPp+QA==
-----END CERTIFICATE-----