Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File:                     1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier:          XkV6qP/h4U2ozmO3tD7RZs4mKMXQOBce97azwSCoRyg=
Subject key identifier:   9E:8D:FB:38:95:9B:74:34:2D:44:06:F3:77:5F:F8:91:46:F7:53:6A
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer:       /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial:       01962E987547BE6C7C084C25D86FFD84F137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
                          2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: aYX0ZIbl2KqFO9jYSibrXGEMOYIWqdexwEkruSbOXqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:75:47:be:6c:7c:08:4c:25:d8:6f:fd:84:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=9e8dfb38959b74342d4406f3775ff89146f7536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:05:36:be:f7:07:9e:b8:68:86:6a:8b:34:
                    31:ef:5b:fb:20:b0:cd:44:ac:90:6f:4b:9a:f2:a5:
                    26:4d:5c:f0:5b:a8:a3:68:e9:ae:3a:49:18:9f:2e:
                    b8:d0:0e:8f:de:cf:45:04:ec:e5:2b:73:99:6c:ad:
                    27:f9:04:ca:49:09:ed:de:ec:06:76:81:91:fc:f9:
                    8a:f1:cc:6b:07:9e:e9:63:ae:5a:6c:e2:cd:5e:b7:
                    16:b6:3c:d2:e3:2c:e2:58:5d:09:d5:e0:36:e3:e4:
                    5d:2a:63:9c:35:6d:a5:df:a4:c8:ec:78:0e:2b:b9:
                    77:d4:3b:c9:50:88:41:29:de:c4:a9:4f:bf:19:8b:
                    e8:ef:98:e4:29:f2:83:26:ed:0a:3c:b7:28:da:17:
                    41:47:b1:f8:3e:59:45:2e:cd:4c:dc:dc:6e:ea:0c:
                    1f:d1:42:ca:82:4e:55:0f:54:c7:82:6a:08:bf:08:
                    5e:07:67:6f:c9:b9:a3:36:31:fe:03:3c:8c:42:0d:
                    4c:e7:51:9d:2d:1e:b3:2e:c1:e8:e7:d9:96:bb:67:
                    48:ca:b4:54:7c:c9:9c:f8:dc:0a:03:c4:bb:20:72:
                    1f:f9:3c:92:ae:10:23:33:1f:c6:ad:7e:45:2d:33:
                    2d:a8:09:ab:ee:05:a2:1a:7a:b1:22:0f:1b:dd:e4:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8D:FB:38:95:9B:74:34:2D:44:06:F3:77:5F:F8:91:46:F7:53:6A
            X509v3 Authority Key Identifier:
                keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:67:da:bf:32:92:47:4c:6f:2c:64:73:2a:00:cf:fd:f2:3c:
         20:b1:d4:a2:6f:06:3c:90:b9:67:dc:7e:3b:9e:f3:d0:e5:e5:
         d0:8d:19:3c:d1:6c:38:ed:89:ff:7b:9d:f2:84:14:f0:9d:f8:
         5d:4b:0c:83:37:90:04:54:1f:ae:51:b8:b0:96:ba:c3:2e:28:
         ae:87:f4:f1:da:39:07:f3:20:de:6d:b1:ed:9f:0b:71:1d:ac:
         b4:2f:9d:c2:a3:e8:4c:a1:ad:a8:1a:e4:d0:24:5b:4e:49:4a:
         29:8b:91:df:48:4b:7f:c1:28:ac:e6:9f:14:1f:1f:f4:9b:f5:
         25:cd:b2:b7:bb:1c:6d:38:3e:75:f7:51:ce:50:3f:84:ab:7c:
         0c:ef:15:b3:f2:98:e7:43:07:26:f1:94:a5:7b:b0:b8:ac:3d:
         84:d6:01:4d:2d:a4:ca:1f:e7:15:4f:11:86:52:a8:70:df:41:
         ef:40:4c:51:22:a4:84:ca:b2:c8:c2:9f:96:55:ab:2e:2e:1b:
         74:a5:6f:e5:8a:1c:bd:62:af:a1:5e:e2:66:b7:fe:fe:e7:5c:
         bb:e5:02:bc:db:d0:cc:ad:61:6d:34:bd:37:5d:91:dd:4e:cd:
         4b:4b:fb:2c:11:73:03:88:53:e5:82:b2:d8:ac:b3:ce:1e:5f:
         b2:0f:b9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHVHvmx8CEwl2G/9hPE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjUwNDEzMTAwMTA1WhcNMjUwNDE0MTAwMTA1WjAzMTEwLwYDVQQD
Eyg5ZThkZmIzODk1OWI3NDM0MmQ0NDA2ZjM3NzVmZjg5MTQ2Zjc1MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLMFNr73B564aIZqizQx71v7ILDN
RKyQb0ua8qUmTVzwW6ijaOmuOkkYny640A6P3s9FBOzlK3OZbK0n+QTKSQnt3uwG
doGR/PmK8cxrB57pY65abOLNXrcWtjzS4yziWF0J1eA24+RdKmOcNW2l36TI7HgO
K7l31DvJUIhBKd7EqU+/GYvo75jkKfKDJu0KPLco2hdBR7H4PllFLs1M3Nxu6gwf
0ULKgk5VD1THgmoIvwheB2dvybmjNjH+AzyMQg1M51GdLR6zLsHo59mWu2dIyrRU
fMmc+NwKA8S7IHIf+TySrhAjMx/GrX5FLTMtqAmr7gWiGnqxIg8b3eR6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6N+ziVm3Q0LUQG83df+JFG91NqMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWfavzKS
R0xvLGRzKgDP/fI8ILHUom8GPJC5Z9x+O57z0OXl0I0ZPNFsOO2J/3ud8oQU8J34
XUsMgzeQBFQfrlG4sJa6wy4orof08do5B/Mg3m2x7Z8LcR2stC+dwqPoTKGtqBrk
0CRbTklKKYuR30hLf8EorOafFB8f9Jv1Jc2yt7scbTg+dfdRzlA/hKt8DO8Vs/KY
50MHJvGUpXuwuKw9hNYBTS2kyh/nFU8RhlKocN9B70BMUSKkhMqyyMKfllWrLi4b
dKVv5YocvWKvoV7iZrf+/udcu+UCvNvQzK1hbTS9N12R3U7NS0v7LBFzA4hT5YKy
2Kyzzh5fsg+5RA==
-----END CERTIFICATE-----