Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File:                     vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier:          +S+2oFOlb7oT6C8BlUH+Z5kqH3x8JivNGXeb1lOWUNU=
Subject key identifier:   61:A0:E6:E1:67:EE:04:2C:3E:38:EE:A2:DE:BC:C6:3A:A3:A1:4F:C7
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer:       /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial:       01962E98B0C30982A1E56363408DD10EAE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number:          01AB
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: 9FSlYxqsDOXxeLlRo8AuyIXgPvNbRKQzKjmIlZKBo+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b0:c3:09:82:a1:e5:63:63:40:8d:d1:0e:ae:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=61a0e6e167ee042c3e38eea2debcc63aa3a14fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:a2:c0:4d:99:aa:ac:df:47:1f:53:74:bb:
                    2d:1b:e8:de:24:e6:67:6b:66:5a:bc:89:f6:62:93:
                    d0:59:87:d8:cc:36:67:7a:8c:0d:02:43:d7:a1:d8:
                    83:a2:c9:45:66:f8:58:e5:a6:19:1d:89:ad:34:7b:
                    66:8e:e1:e9:65:07:55:a8:6f:2b:20:64:6e:85:40:
                    65:0a:02:ec:4e:a2:5e:1f:f0:6a:d0:56:6f:72:f5:
                    7d:2d:89:c0:73:c5:0c:a4:f9:56:47:d7:44:5e:ae:
                    39:40:69:42:2f:00:16:21:df:a0:9c:01:c7:cd:13:
                    e2:40:5b:cf:8c:bc:a1:72:ad:24:40:55:4a:47:2e:
                    72:2f:bd:2b:13:15:b7:79:a1:3d:32:b3:11:55:ec:
                    3e:1c:e0:91:76:46:3c:f1:62:ff:90:1b:7d:42:9b:
                    19:ef:0c:d2:c1:45:c2:b8:f3:8a:13:cb:48:a7:4c:
                    68:72:60:95:14:6a:9f:90:dc:e3:54:9b:7a:36:a0:
                    bc:fa:88:00:7d:42:16:27:3b:ee:31:d1:6a:30:a7:
                    95:dd:0a:26:e0:63:62:a6:3c:fd:9b:9b:d2:b8:5d:
                    48:f8:5a:62:6b:77:68:a8:76:66:74:70:2f:0d:6b:
                    16:ec:61:45:67:31:b5:ce:7f:f1:d2:be:7a:82:48:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:E6:E1:67:EE:04:2C:3E:38:EE:A2:DE:BC:C6:3A:A3:A1:4F:C7
            X509v3 Authority Key Identifier:
                keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:67:f4:8b:16:97:2b:ba:6b:d6:1a:01:ba:93:85:a0:76:
         b5:17:99:99:23:15:b5:ad:5b:c8:6c:d7:02:58:0c:2d:dd:f5:
         c5:31:9b:07:6f:c9:7b:06:c6:66:b2:b2:4a:ac:50:e2:3c:f5:
         3d:e1:0d:c5:8b:be:86:51:d9:93:49:f6:f5:ca:9e:63:16:1d:
         1d:5d:1c:41:ed:ee:ac:c3:78:b5:1b:c4:38:8c:01:e0:3d:9a:
         4a:45:34:d2:00:be:9c:3e:19:1e:6d:57:50:a7:5a:cc:3f:8d:
         ed:b9:bf:fc:83:7b:a9:f7:a1:1d:da:1f:16:11:07:c1:80:99:
         7e:53:ba:bf:21:6e:1f:44:3e:5d:d3:cf:29:69:d4:7b:b5:c8:
         16:41:98:ad:e7:ed:1b:89:0d:ca:82:de:53:d1:ac:8a:30:41:
         6d:c1:32:4c:21:86:6e:d0:2d:ba:72:ab:59:f1:6e:04:f6:fe:
         85:fa:e8:1f:95:4d:a6:d2:9d:72:47:e5:74:d5:6d:e3:27:fc:
         2e:2e:b5:1a:a8:9d:23:ee:89:d8:e1:ef:84:93:ce:0c:45:23:
         6f:b6:9c:d1:a2:b1:d7:9e:c8:96:4c:73:6d:eb:bd:e1:46:78:
         66:ba:27:ab:79:19:9b:29:c7:b2:73:b7:4a:7d:ef:71:90:35:
         f2:60:43:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLDDCYKh5WNjQI3RDq4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm
NWY0MDcwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
Eyg2MWEwZTZlMTY3ZWUwNDJjM2UzOGVlYTJkZWJjYzYzYWEzYTE0ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv2iwE2ZqqzfRx9TdLstG+jeJOZn
a2ZavIn2YpPQWYfYzDZneowNAkPXodiDoslFZvhY5aYZHYmtNHtmjuHpZQdVqG8r
IGRuhUBlCgLsTqJeH/Bq0FZvcvV9LYnAc8UMpPlWR9dEXq45QGlCLwAWId+gnAHH
zRPiQFvPjLyhcq0kQFVKRy5yL70rExW3eaE9MrMRVew+HOCRdkY88WL/kBt9QpsZ
7wzSwUXCuPOKE8tIp0xocmCVFGqfkNzjVJt6NqC8+ogAfUIWJzvuMdFqMKeV3Qom
4GNipjz9m5vSuF1I+Fpia3doqHZmdHAvDWsW7GFFZzG1zn/x0r56gkjcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGg5uFn7gQsPjjuot68xjqjoU/HMB8GA1UdIwQY
MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct
N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm
LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA5n9IsW
lyu6a9YaAbqThaB2tReZmSMVta1byGzXAlgMLd31xTGbB2/JewbGZrKySqxQ4jz1
PeENxYu+hlHZk0n29cqeYxYdHV0cQe3urMN4tRvEOIwB4D2aSkU00gC+nD4ZHm1X
UKdazD+N7bm//IN7qfehHdofFhEHwYCZflO6vyFuH0Q+XdPPKWnUe7XIFkGYreft
G4kNyoLeU9GsijBBbcEyTCGGbtAtunKrWfFuBPb+hfroH5VNptKdckfldNVt4yf8
Li61GqidI+6J2OHvhJPODEUjb7ac0aKx157Ilkxzbeu94UZ4Zronq3kZmynHsnO3
Sn3vcZA18mBDPw==
-----END CERTIFICATE-----