Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          sxCgtMHuzaoPLrrgn9oJxKLbDN5s14trMvPr5gKrX0c=
Subject key identifier:   2D:5E:DD:4E:17:1E:52:53:62:41:F4:C6:88:D5:2C:64:C5:3F:03:B4
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       01962E999ABEB98031E2DF75B865AF118A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          1044
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: YTG7X9Khrd8ibxta8KBzCR2BtCZIVujVCVdMYOTV69g=)
                          2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
                          3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:be:b9:80:31:e2:df:75:b8:65:af:11:8a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=2d5edd4e171e52536241f4c688d52c64c53f03b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:9c:7b:11:14:b1:1c:18:b7:bd:b8:08:a8:
                    6c:bf:6b:31:d7:7e:8a:97:18:07:81:b6:6b:4d:20:
                    5a:3f:7d:94:5f:60:8f:0c:cb:aa:3e:b7:a6:4c:f3:
                    ae:c1:2d:7e:2c:40:f1:b6:a4:91:73:3f:93:0d:d3:
                    fe:cd:9f:8e:7b:25:59:ce:7d:37:4b:82:42:9b:2d:
                    07:79:f1:f6:1d:7d:fc:1f:ae:52:03:8c:9d:2a:6a:
                    b0:6d:52:ed:c9:b3:45:d6:be:d1:64:12:6b:70:81:
                    81:8e:09:9b:f1:3f:c4:c6:ff:9a:df:dd:15:4c:3f:
                    24:2c:c1:a5:28:93:0b:50:34:d2:b3:b1:ed:ab:da:
                    bc:71:d8:99:50:70:3a:d0:72:b9:ec:be:df:27:41:
                    9b:af:4d:14:a3:09:0a:31:14:89:8a:4a:d0:10:ea:
                    fb:d6:e3:bf:e9:13:27:e7:b7:2a:49:cd:5a:5f:97:
                    60:ba:a4:e9:2e:9a:1d:38:ec:37:cc:27:b8:5c:70:
                    9d:eb:90:40:a0:24:11:f8:24:e2:6f:e1:a4:05:13:
                    98:5f:36:04:a3:7c:61:47:34:6f:ad:4c:09:52:22:
                    da:b5:69:93:1c:13:24:07:c6:ed:df:d7:08:a0:2d:
                    39:fb:65:6f:c0:ff:5d:ef:79:2f:a0:45:ed:ab:4d:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:DD:4E:17:1E:52:53:62:41:F4:C6:88:D5:2C:64:C5:3F:03:B4
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:c5:1b:1d:46:f5:af:95:22:89:e6:cb:4c:4c:85:bf:59:
         4e:11:16:18:42:6a:d8:cd:92:6f:33:33:d3:18:63:fc:2a:b3:
         54:ee:56:99:da:bd:06:a9:5d:12:ef:6b:51:8f:9a:a1:54:d9:
         9a:29:80:20:33:4c:32:e4:f7:39:67:43:3a:41:78:69:e2:da:
         25:50:33:13:1c:d1:33:83:32:f1:2f:32:7a:97:7f:ea:d3:b6:
         4a:aa:fd:7d:ee:4a:62:3c:5e:c9:23:98:46:13:59:b4:54:c4:
         26:4f:a9:9e:dd:aa:85:36:95:a0:dc:26:da:53:1b:02:2b:18:
         00:dc:77:d0:31:3d:32:89:f1:78:27:4d:34:56:5b:57:34:85:
         a5:29:92:02:49:15:4c:85:a5:bd:fe:d4:12:ae:ec:1d:49:31:
         73:de:74:72:52:e0:de:e0:31:81:b2:b0:32:5c:3e:88:59:12:
         ac:2d:3f:c9:29:cc:80:39:a5:e6:94:1a:fe:ae:d1:da:a6:83:
         74:70:82:35:14:1a:63:65:52:9f:12:c3:0e:a7:c6:f6:8e:e4:
         55:6e:03:b1:f1:d9:58:fe:07:bc:0b:9c:67:38:c0:cf:56:06:
         2a:1d:20:ca:78:d4:ab:ba:89:5e:67:d7:c8:87:f0:38:89:81:
         c0:83:6e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZq+uYAx4t91uGWvEYp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3
NDY5NDIwHhcNMjUwNDEzMTAwMjIwWhcNMjUwNDE0MTAwMjIwWjAzMTEwLwYDVQQD
EygyZDVlZGQ0ZTE3MWU1MjUzNjI0MWY0YzY4OGQ1MmM2NGM1M2YwM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdOcexEUsRwYt724CKhsv2sx136K
lxgHgbZrTSBaP32UX2CPDMuqPremTPOuwS1+LEDxtqSRcz+TDdP+zZ+OeyVZzn03
S4JCmy0HefH2HX38H65SA4ydKmqwbVLtybNF1r7RZBJrcIGBjgmb8T/Exv+a390V
TD8kLMGlKJMLUDTSs7Htq9q8cdiZUHA60HK57L7fJ0Gbr00UowkKMRSJikrQEOr7
1uO/6RMn57cqSc1aX5dguqTpLpodOOw3zCe4XHCd65BAoCQR+CTib+GkBROYXzYE
o3xhRzRvrUwJUiLatWmTHBMkB8bt39cIoC05+2VvwP9d73kvoEXtq03jYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1e3U4XHlJTYkH0xojVLGTFPwO0MB8GA1UdIwQY
MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt
YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh
LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgDFGx1G
9a+VIonmy0xMhb9ZThEWGEJq2M2SbzMz0xhj/CqzVO5Wmdq9BqldEu9rUY+aoVTZ
mimAIDNMMuT3OWdDOkF4aeLaJVAzExzRM4My8S8yepd/6tO2Sqr9fe5KYjxeySOY
RhNZtFTEJk+pnt2qhTaVoNwm2lMbAisYANx30DE9MonxeCdNNFZbVzSFpSmSAkkV
TIWlvf7UEq7sHUkxc950clLg3uAxgbKwMlw+iFkSrC0/ySnMgDml5pQa/q7R2qaD
dHCCNRQaY2VSnxLDDqfG9o7kVW4DsfHZWP4HvAucZzjAz1YGKh0gynjUq7qJXmfX
yIfwOImBwINuEQ==
-----END CERTIFICATE-----