Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          Vvir+411beCDZpu9QD4VXr2ITQMoZyQmJWQiG1Xjydg=
Subject key identifier:   D6:97:12:B1:13:85:11:7D:48:53:3D:37:98:51:AA:46:BF:B2:2C:C1
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       01962F3DE1B514E80628DD484F0265D965AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: KoWUjpZtJgAvddjty7Crjt7F6kre6FSA3+gX+NQwTAo=)
                          2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e1:b5:14:e8:06:28:dd:48:4f:02:65:d9:65:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=d69712b11385117d48533d379851aa46bfb22cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:c3:d5:77:40:cf:13:3f:2d:c4:0b:e8:0a:
                    c2:48:60:a9:a8:c8:62:e0:8d:a7:8b:32:4d:13:0f:
                    91:4c:56:a0:81:3c:c6:42:9c:05:7e:c7:77:ed:e2:
                    92:74:78:df:12:4b:40:24:f3:c2:ad:73:c4:b6:d3:
                    93:03:61:74:e5:e9:67:b6:a3:f7:92:d6:b6:ef:67:
                    e8:1c:f4:28:d3:2a:01:3f:73:84:f8:e3:cc:59:38:
                    3b:1b:9c:a3:d6:ad:3f:be:f9:05:6c:e9:56:10:56:
                    ba:8c:d3:9a:0b:4f:79:cb:73:b7:68:c0:f1:07:07:
                    81:27:85:d4:68:47:4e:f2:07:bb:09:17:33:92:12:
                    f2:8b:e9:e8:62:bb:00:63:c6:21:50:cc:a7:f3:af:
                    99:e0:7d:40:c9:da:a0:a6:16:42:6b:8f:bd:54:16:
                    88:b7:21:b9:7d:d6:a4:e9:a1:ac:d1:a6:9e:15:b9:
                    40:b3:bf:9e:9e:43:a0:e2:a1:ec:51:d7:b9:0b:8d:
                    74:1b:fc:34:97:1d:83:9d:84:63:51:88:04:bc:2e:
                    7c:9a:12:06:f2:eb:c8:24:fd:42:9d:af:aa:10:ea:
                    c1:b8:79:d7:89:bc:5d:1f:b4:3b:7a:13:64:34:7f:
                    b4:fb:d8:0c:38:f9:fe:b4:c5:ec:5b:64:86:54:46:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:12:B1:13:85:11:7D:48:53:3D:37:98:51:AA:46:BF:B2:2C:C1
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:fa:f3:40:40:74:6e:20:2c:c0:6e:e2:30:ee:53:7d:de:
         0f:3b:41:aa:77:b3:18:4d:04:1e:3a:ea:ba:4b:e7:0d:aa:b0:
         cb:db:7c:8f:c7:1b:a3:8f:cf:17:52:30:46:14:9c:22:95:96:
         3c:9f:10:b9:c7:4f:8c:64:0b:aa:1a:bd:ad:ba:96:01:ba:73:
         9d:85:d3:bc:31:6c:21:5f:f0:c0:ca:e6:f6:11:5f:a7:cf:d3:
         85:4c:58:dc:8a:9a:15:65:ba:6e:ea:3b:17:1d:a9:ae:4f:f3:
         c1:31:64:1e:93:cc:05:75:81:09:d9:0d:57:99:57:67:87:14:
         dd:f9:ac:9f:ad:68:49:d4:7c:40:ba:61:06:b3:69:ed:47:2f:
         39:d6:18:2f:cf:ad:73:b4:f2:f0:05:dc:28:ee:3f:35:16:82:
         f9:63:f9:2b:d5:76:77:87:f9:7d:2d:25:dd:96:37:9d:ef:e7:
         5b:cb:98:2f:95:ca:8a:31:5e:81:34:ad:17:87:bd:32:41:b1:
         41:d5:81:66:32:bd:7f:f0:c6:62:94:d1:2f:7c:58:f2:b1:01:
         64:c0:7a:1e:ae:31:60:39:f1:f0:a4:68:0f:41:80:b6:f4:4c:
         a6:11:b5:a9:dc:a0:59:77:62:fe:99:a1:a7:a6:03:c5:bb:e4:
         14:69:28:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeG1FOgGKN1ITwJl2WWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODgyYjE0MTMyMjFlOWI1ZDNiYzhhNzMyOWI3NjQ5Zjli
MWVjMmMwHhcNMjUwNDEzMTMwMTQ2WhcNMjUwNDE0MTMwMTQ2WjAzMTEwLwYDVQQD
EyhkNjk3MTJiMTEzODUxMTdkNDg1MzNkMzc5ODUxYWE0NmJmYjIyY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVfD1XdAzxM/LcQL6ArCSGCpqMhi
4I2nizJNEw+RTFaggTzGQpwFfsd37eKSdHjfEktAJPPCrXPEttOTA2F05elntqP3
kta272foHPQo0yoBP3OE+OPMWTg7G5yj1q0/vvkFbOlWEFa6jNOaC095y3O3aMDx
BweBJ4XUaEdO8ge7CRczkhLyi+noYrsAY8YhUMyn86+Z4H1AydqgphZCa4+9VBaI
tyG5fdak6aGs0aaeFblAs7+enkOg4qHsUde5C410G/w0lx2DnYRjUYgEvC58mhIG
8uvIJP1Cna+qEOrBuHnXibxdH7Q7ehNkNH+0+9gMOPn+tMXsW2SGVEZzbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaXErEThRF9SFM9N5hRqka/sizBMB8GA1UdIwQY
MBaAFFSIKxQTIh6bXTvIpzKbdkn5sewsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTIt
NGJkNThkYjEwZWQyLzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTItNGJkNThkYjEwZWQy
LzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA43680BA
dG4gLMBu4jDuU33eDztBqnezGE0EHjrqukvnDaqwy9t8j8cbo4/PF1IwRhScIpWW
PJ8QucdPjGQLqhq9rbqWAbpznYXTvDFsIV/wwMrm9hFfp8/ThUxY3IqaFWW6buo7
Fx2prk/zwTFkHpPMBXWBCdkNV5lXZ4cU3fmsn61oSdR8QLphBrNp7UcvOdYYL8+t
c7Ty8AXcKO4/NRaC+WP5K9V2d4f5fS0l3ZY3ne/nW8uYL5XKijFegTStF4e9MkGx
QdWBZjK9f/DGYpTRL3xY8rEBZMB6Hq4xYDnx8KRoD0GAtvRMphG1qdygWXdi/pmh
p6YDxbvkFGkoZw==
-----END CERTIFICATE-----