Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          XVVBw/kXhpr8qp4pd+itnp9SwEMRuv2Sz3WustNMUHE=
Subject key identifier:   CF:34:2F:7A:19:8C:E8:61:AA:73:76:FA:9E:46:BF:14:E1:AF:36:90
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       01962ECF61D4DBE59C62E33234CDB2B0BB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          02DA
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
                          2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: hd/zJY35qfUZ7DxlIBoH3m7x3qcoP/k6hv6CNDxg1o4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:d4:db:e5:9c:62:e3:32:34:cd:b2:b0:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=cf342f7a198ce861aa7376fa9e46bf14e1af3690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:37:70:fb:78:49:69:52:6f:d3:51:42:00:
                    5d:c8:27:b8:fd:6a:9c:7b:87:12:c6:33:bc:17:44:
                    04:21:23:9c:b1:07:5e:d6:7a:b4:1f:03:aa:95:c1:
                    fe:5a:43:a8:fc:cd:ce:f5:c2:37:81:19:77:d3:13:
                    c0:86:1a:47:f9:b5:f8:af:98:48:e6:b2:e1:70:e8:
                    75:ab:b5:d2:4a:c9:b5:2f:59:a0:bc:c2:0e:9d:aa:
                    6a:03:0a:b6:14:fa:dc:73:14:8b:62:13:2b:bc:4b:
                    3d:04:dc:af:74:f3:33:92:b0:09:c6:c9:e1:66:99:
                    c5:4b:7e:9c:be:3d:9e:bd:c1:db:2c:b5:f1:91:5e:
                    15:41:c3:0b:8e:c4:55:ad:fc:8f:5a:51:b9:33:9d:
                    3b:92:e1:8f:7e:13:fa:58:09:72:ea:e6:12:12:75:
                    f0:57:e1:52:72:f1:1d:5a:22:41:27:ea:63:ce:79:
                    1d:bc:28:4f:a1:ab:0f:cd:3b:1e:16:4c:53:fe:62:
                    3b:31:cf:cb:1e:cc:58:c0:3f:99:74:45:62:49:27:
                    97:06:ca:1c:72:ce:9e:12:b2:63:a9:dc:e6:e9:c4:
                    b5:f5:63:88:65:e1:09:d4:80:73:4e:7c:fb:34:c7:
                    26:23:11:51:f0:e9:ba:db:72:2c:8f:1d:78:43:aa:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:2F:7A:19:8C:E8:61:AA:73:76:FA:9E:46:BF:14:E1:AF:36:90
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:64:4a:9f:99:b9:86:19:cd:8b:26:cb:27:37:bf:6a:00:
         db:76:70:eb:78:47:95:4e:02:36:8f:d1:7d:3f:52:84:fe:ce:
         2a:97:da:d9:16:46:09:ff:bc:d9:9f:3f:ed:b6:0e:50:53:80:
         42:d1:91:ca:42:8e:c2:84:88:b2:5e:5f:ce:04:8d:08:f6:5a:
         52:24:ba:c4:ea:56:56:ec:7b:0c:62:03:9b:3b:24:13:c0:27:
         9a:0d:a0:97:4f:80:da:fd:f7:b5:fe:cf:aa:df:bf:e0:19:86:
         2e:39:2d:45:95:ba:5f:c6:aa:bd:23:02:4e:86:e7:cf:02:6f:
         08:47:f5:8e:31:aa:57:d4:78:3d:6f:a2:fb:a2:7b:4b:80:37:
         6a:4e:d5:0d:75:90:04:23:7b:07:37:c4:ac:9d:1b:77:9e:e0:
         6a:3b:01:81:f3:0d:d6:77:64:4c:a4:4b:75:6b:aa:5a:94:92:
         2b:e6:e7:47:fd:c2:a7:59:f0:7d:de:b3:7f:a0:c0:6a:5b:b8:
         7b:d2:6b:d0:f6:bd:54:9b:44:96:59:c3:18:de:98:87:91:2a:
         7f:87:cc:13:97:48:ea:14:e5:a2:4f:f0:07:01:30:e7:0b:88:
         0a:f2:bd:f9:fc:2f:94:4e:ff:4a:a6:79:a9:d7:44:b6:29:e4:
         10:38:34:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2HU2+WcYuMyNM2ysLtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmU1MGNjZmNlZjBlODdjYzE5ZjgyY2MwOTJiYjliNzlh
M2UzYWYwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
EyhjZjM0MmY3YTE5OGNlODYxYWE3Mzc2ZmE5ZTQ2YmYxNGUxYWYzNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9A3cPt4SWlSb9NRQgBdyCe4/Wqc
e4cSxjO8F0QEISOcsQde1nq0HwOqlcH+WkOo/M3O9cI3gRl30xPAhhpH+bX4r5hI
5rLhcOh1q7XSSsm1L1mgvMIOnapqAwq2FPrccxSLYhMrvEs9BNyvdPMzkrAJxsnh
ZpnFS36cvj2evcHbLLXxkV4VQcMLjsRVrfyPWlG5M507kuGPfhP6WAly6uYSEnXw
V+FScvEdWiJBJ+pjznkdvChPoasPzTseFkxT/mI7Mc/LHsxYwD+ZdEViSSeXBsoc
cs6eErJjqdzm6cS19WOIZeEJ1IBzTnz7NMcmIxFR8Om623Isjx14Q6qO2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM80L3oZjOhhqnN2+p5GvxThrzaQMB8GA1UdIwQY
MBaAFFX+UMz87w6HzBn4LMCSu5t5o+OvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMt
YzA3ZTcxNWM4MWM5LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMtYzA3ZTcxNWM4MWM5
LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYpkSp+Z
uYYZzYsmyyc3v2oA23Zw63hHlU4CNo/RfT9ShP7OKpfa2RZGCf+82Z8/7bYOUFOA
QtGRykKOwoSIsl5fzgSNCPZaUiS6xOpWVux7DGIDmzskE8Anmg2gl0+A2v33tf7P
qt+/4BmGLjktRZW6X8aqvSMCTobnzwJvCEf1jjGqV9R4PW+i+6J7S4A3ak7VDXWQ
BCN7BzfErJ0bd57gajsBgfMN1ndkTKRLdWuqWpSSK+bnR/3Cp1nwfd6zf6DAalu4
e9Jr0Pa9VJtEllnDGN6Yh5Eqf4fME5dI6hTlok/wBwEw5wuICvK9+fwvlE7/SqZ5
qddEtinkEDg0MQ==
-----END CERTIFICATE-----