Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File:                     VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier:          SUYRUtQzAs+TfylNnCwzlsRxZ8Zd00JeE0a6+nT/Fg8=
Subject key identifier:   7D:42:18:06:81:76:F7:D7:A1:BB:4C:FB:4D:58:8D:0B:DE:05:9A:06
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer:       /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial:       01962FAB4696F8A7D618F5857B6A92DF7AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number:          01F1
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=)
                          2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: NA+JBnwTpXIpYZ35RWqQ0uCVoTu2KIoIdxjF/HwcOVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:46:96:f8:a7:d6:18:f5:85:7b:6a:92:df:7a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=7d4218068176f7d7a1bb4cfb4d588d0bde059a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:c8:6f:11:05:37:c0:80:6d:da:b2:dd:e0:
                    22:d2:85:de:b8:98:da:0a:e7:a5:14:ee:3d:a2:85:
                    18:a6:39:ad:49:25:3f:8f:54:1d:7d:7c:55:a8:f6:
                    fe:80:a4:a5:09:a0:c6:e2:c4:6c:a0:04:26:7a:03:
                    20:b2:52:dc:84:c4:66:90:cd:00:24:b6:83:8f:f5:
                    d2:8e:65:64:af:9a:c6:ae:a3:8f:86:67:3f:4a:e7:
                    b9:48:5d:74:b5:ce:18:28:5d:12:4c:f4:01:f0:08:
                    3e:b9:4d:b6:7d:e3:91:d5:85:b6:f4:00:e7:32:22:
                    b7:71:1c:80:18:c4:74:4d:26:98:75:75:88:6c:e0:
                    a1:b9:0e:4d:c6:7f:35:6b:7e:2a:64:f7:bd:96:2c:
                    04:52:8f:c0:fa:63:b6:12:2f:0f:60:2f:7e:b9:3e:
                    d4:ad:47:d3:b4:84:82:b6:d2:5f:ce:2d:a3:4d:bf:
                    28:35:82:5b:22:44:20:2e:a0:5c:6e:c1:24:54:a1:
                    83:2c:d7:8b:f4:e3:7e:e8:81:fa:12:a3:6d:8c:62:
                    1b:04:6c:95:02:02:75:5b:c4:c8:12:34:52:78:8c:
                    3f:f2:eb:bc:d2:1c:86:bd:c7:9f:22:3a:bb:0b:62:
                    ec:51:cd:05:58:b4:22:b3:09:ff:ce:29:61:30:bd:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:18:06:81:76:F7:D7:A1:BB:4C:FB:4D:58:8D:0B:DE:05:9A:06
            X509v3 Authority Key Identifier:
                keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:e9:fa:a8:0f:90:df:9c:1e:4a:15:1c:2e:a3:32:df:c8:
         89:01:0d:09:76:3c:c5:6e:eb:7f:ad:8d:52:f6:8c:98:55:99:
         a2:78:3b:1d:dd:48:25:e1:af:e0:f3:d9:65:8f:cb:13:6d:c9:
         d2:0b:51:12:e3:84:a9:08:82:60:88:dc:df:0f:57:04:97:58:
         6c:d2:37:fe:6e:27:79:4d:b7:c4:81:59:32:e7:82:54:8b:a0:
         f7:7a:ad:e1:50:25:f0:17:c5:1d:ac:08:1d:87:02:3d:92:d6:
         f1:61:56:24:91:7a:6f:b6:bb:22:77:d6:e0:ea:29:5e:9f:01:
         21:d7:33:c2:f9:af:cb:45:15:a7:64:2d:ba:c5:b8:4e:2a:61:
         3b:68:de:74:25:07:e8:db:f6:40:e6:1d:1a:45:4c:ae:02:2c:
         17:98:e9:9e:a2:3b:d3:a4:04:65:8a:16:01:77:bd:c7:1b:e3:
         8b:81:5c:44:80:49:dd:a9:8d:4b:64:1b:07:a7:fc:79:4a:36:
         4b:b1:2e:45:23:39:2b:91:d3:29:56:40:46:2f:e6:2f:74:2b:
         6a:e1:6e:1f:b4:4a:38:a5:b5:4c:fa:ab:9a:3d:24:e1:16:fe:
         8e:b1:e9:26:87:59:61:ae:0a:71:64:38:52:58:80:00:24:6e:
         2d:bd:ab:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0aW+KfWGPWFe2qS33qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1
ZDE0ZWMwHhcNMjUwNDEzMTUwMTE1WhcNMjUwNDE0MTUwMTE1WjAzMTEwLwYDVQQD
Eyg3ZDQyMTgwNjgxNzZmN2Q3YTFiYjRjZmI0ZDU4OGQwYmRlMDU5YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ozIbxEFN8CAbdqy3eAi0oXeuJja
CuelFO49ooUYpjmtSSU/j1QdfXxVqPb+gKSlCaDG4sRsoAQmegMgslLchMRmkM0A
JLaDj/XSjmVkr5rGrqOPhmc/Sue5SF10tc4YKF0STPQB8Ag+uU22feOR1YW29ADn
MiK3cRyAGMR0TSaYdXWIbOChuQ5Nxn81a34qZPe9liwEUo/A+mO2Ei8PYC9+uT7U
rUfTtISCttJfzi2jTb8oNYJbIkQgLqBcbsEkVKGDLNeL9ON+6IH6EqNtjGIbBGyV
AgJ1W8TIEjRSeIw/8uu80hyGvcefIjq7C2LsUc0FWLQiswn/zilhML1vKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1CGAaBdvfXobtM+01YjQveBZoGMB8GA1UdIwQY
MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt
OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk
LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVt3p+qgP
kN+cHkoVHC6jMt/IiQENCXY8xW7rf62NUvaMmFWZong7Hd1IJeGv4PPZZY/LE23J
0gtREuOEqQiCYIjc3w9XBJdYbNI3/m4neU23xIFZMueCVIug93qt4VAl8BfFHawI
HYcCPZLW8WFWJJF6b7a7InfW4OopXp8BIdczwvmvy0UVp2QtusW4TiphO2jedCUH
6Nv2QOYdGkVMrgIsF5jpnqI706QEZYoWAXe9xxvji4FcRIBJ3amNS2QbB6f8eUo2
S7EuRSM5K5HTKVZARi/mL3QrauFuH7RKOKW1TPqrmj0k4Rb+jrHpJodZYa4KcWQ4
UliAACRuLb2rGg==
-----END CERTIFICATE-----