Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File:                     vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier:          GNvNI57hl/u8HjL4ntfgQyJYk80D2W/vNg1eqUuP09w=
Subject key identifier:   27:34:5B:64:A6:92:C9:1F:89:18:EF:77:C9:19:0F:93:E3:FC:4A:7F
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer:       /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial:       01962E998E5C157195F5B51C7B266F9FA206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number:          1206
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
                          2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: 0bmtvoNpXFPrvuFcH+NqN57XL1/Cns74+1ndJLgQ/Nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8e:5c:15:71:95:f5:b5:1c:7b:26:6f:9f:a2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=27345b64a692c91f8918ef77c9190f93e3fc4a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:55:b2:f1:82:97:59:4f:30:6e:44:0d:d3:
                    2d:a5:bd:c6:d7:a6:f8:85:a0:39:5d:c5:31:d0:ae:
                    f1:14:66:84:93:75:48:bd:71:1d:39:6a:1c:0c:b7:
                    75:0a:0b:42:2f:5b:b5:4c:5b:f4:eb:93:1a:df:4e:
                    3a:01:c1:53:35:7e:6a:72:bb:ed:ce:2b:7b:c1:82:
                    c3:b9:75:a6:65:43:3a:d7:2d:b1:4d:14:db:de:95:
                    ee:3f:51:a6:29:66:81:ef:79:bd:ff:91:fa:e1:84:
                    1c:a0:e8:b5:05:6c:4b:d1:fd:3d:8d:5d:b2:8a:0d:
                    a6:17:15:7e:af:10:6a:64:37:a2:30:95:4b:86:48:
                    a5:15:fb:b9:ef:af:fb:02:df:6b:8c:5c:70:95:f2:
                    45:35:1d:77:9c:6b:66:c8:72:38:78:31:46:66:88:
                    3f:6f:dc:b7:4b:a1:b3:c4:09:2a:06:f7:2b:92:98:
                    da:15:2f:00:2e:95:d6:ca:0d:d0:19:68:22:e5:c5:
                    59:b4:ce:d1:d7:da:0b:c7:c3:e5:a0:e5:fe:9f:1a:
                    e8:95:28:22:26:26:e7:14:d4:8f:b4:d9:e8:0e:f6:
                    bf:f9:c2:ef:ea:9b:e9:ba:52:e1:b0:ee:0a:58:1c:
                    75:5a:4e:c6:3b:24:34:da:72:ea:13:1a:cb:60:e1:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:5B:64:A6:92:C9:1F:89:18:EF:77:C9:19:0F:93:E3:FC:4A:7F
            X509v3 Authority Key Identifier:
                keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:ba:90:bb:48:12:41:8e:fe:3d:b8:c7:b8:e1:60:61:73:
         37:32:cd:c1:e5:36:ee:63:0b:e3:47:d0:6f:72:ac:7a:99:fe:
         a3:97:73:f0:9b:93:69:5b:cb:73:fe:9f:4d:dd:ba:5c:44:39:
         e4:2f:2d:68:cf:e5:ba:ed:39:66:ff:99:29:bd:92:75:3f:6e:
         8b:75:b2:a1:1e:97:2d:16:c0:7d:cf:a4:42:52:a1:62:ee:9b:
         17:0f:fb:ed:61:a3:d2:cf:eb:88:10:a2:a8:2e:ff:92:29:e7:
         c8:37:ee:3c:d6:05:4d:0d:84:11:b4:fc:1d:3f:ed:95:e9:3c:
         0b:f5:2d:53:d7:a2:b8:c0:5b:fb:76:3c:d1:ca:49:9e:58:d7:
         3b:a8:68:f7:5b:70:25:6e:2c:14:66:97:77:4b:93:04:06:61:
         cd:34:a3:ae:8d:f2:c4:fb:5b:e3:0a:b5:bd:49:e7:f4:bf:13:
         74:fc:e0:70:89:b8:ac:5b:c1:f2:dc:ff:19:8c:cb:d1:59:0b:
         d5:5e:e4:d9:10:25:75:49:fe:cf:c3:5e:d8:68:63:06:6f:fc:
         34:8d:1d:7d:15:f6:95:e9:0c:b1:34:05:28:4f:1a:3c:5b:22:
         23:52:b7:ef:db:d6:1b:ed:78:0e:57:75:e2:18:4a:a9:99:bd:
         59:0e:45:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumY5cFXGV9bUceyZvn6IGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTc0ZGM4YzY0NWVkMjM1MTQ1Y2FhYTEzNTViYTg1ZjUy
NTc2MzQwHhcNMjUwNDEzMTAwMjE3WhcNMjUwNDE0MTAwMjE3WjAzMTEwLwYDVQQD
EygyNzM0NWI2NGE2OTJjOTFmODkxOGVmNzdjOTE5MGY5M2UzZmM0YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKpVsvGCl1lPMG5EDdMtpb3G16b4
haA5XcUx0K7xFGaEk3VIvXEdOWocDLd1CgtCL1u1TFv065Ma3046AcFTNX5qcrvt
zit7wYLDuXWmZUM61y2xTRTb3pXuP1GmKWaB73m9/5H64YQcoOi1BWxL0f09jV2y
ig2mFxV+rxBqZDeiMJVLhkilFfu576/7At9rjFxwlfJFNR13nGtmyHI4eDFGZog/
b9y3S6GzxAkqBvcrkpjaFS8ALpXWyg3QGWgi5cVZtM7R19oLx8PloOX+nxrolSgi
JibnFNSPtNnoDva/+cLv6pvpulLhsO4KWBx1Wk7GOyQ02nLqExrLYOFl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc0W2SmkskfiRjvd8kZD5Pj/Ep/MB8GA1UdIwQY
MBaAFL2XTcjGRe0jUUXKqhNVuoX1JXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2Et
ZTViYTRiZmExNzFhLzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2EtZTViYTRiZmExNzFh
LzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecC6kLtI
EkGO/j24x7jhYGFzNzLNweU27mML40fQb3Ksepn+o5dz8JuTaVvLc/6fTd26XEQ5
5C8taM/luu05Zv+ZKb2SdT9ui3WyoR6XLRbAfc+kQlKhYu6bFw/77WGj0s/riBCi
qC7/kinnyDfuPNYFTQ2EEbT8HT/tlek8C/UtU9eiuMBb+3Y80cpJnljXO6ho91tw
JW4sFGaXd0uTBAZhzTSjro3yxPtb4wq1vUnn9L8TdPzgcIm4rFvB8tz/GYzL0VkL
1V7k2RAldUn+z8Ne2GhjBm/8NI0dfRX2lekMsTQFKE8aPFsiI1K379vWG+14Dld1
4hhKqZm9WQ5Fcw==
-----END CERTIFICATE-----