Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File:                     vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier:          QiN9M88oo6UEN/zdtoS561809E+AT/FiZEboI0qjGAE=
Subject key identifier:   7F:31:2A:D9:42:88:FF:52:38:BD:C4:B4:CC:8D:7B:D7:BA:81:51:46
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer:       /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial:       01962F072B95EDA2B3CF756C866F0661D4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
                          2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: Cbg1CTp1JtoFixyw+cfMBfew3hC5OjYDZ6vOEeny5wU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:95:ed:a2:b3:cf:75:6c:86:6f:06:61:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=7f312ad94288ff5238bdc4b4cc8d7bd7ba815146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:25:9b:23:43:0a:0c:70:51:2e:8a:32:f1:
                    de:61:7d:32:d6:d5:f1:bc:ac:40:f3:84:49:3a:11:
                    02:70:c2:54:58:5e:e5:94:7c:27:e3:b5:c4:f0:bc:
                    76:01:82:47:42:79:0f:cf:70:e2:65:b7:4e:93:e8:
                    d8:00:92:e5:6c:ee:3e:cc:87:1e:6c:e4:d2:6a:f9:
                    e7:75:ba:4e:cc:3d:cf:9a:6c:87:96:ce:a9:87:70:
                    d9:11:1b:40:fd:1b:d8:d9:ce:c9:fa:bf:a1:2d:b0:
                    a3:c6:b9:9e:b1:43:9c:36:4d:b7:82:73:dd:d7:06:
                    d0:07:38:54:1d:23:30:ae:85:59:8d:a5:ad:06:45:
                    f8:95:69:8a:e9:3f:e2:b7:cc:b1:32:cf:45:21:a2:
                    a5:dc:1c:68:b6:4a:d7:79:9a:eb:83:30:0e:ff:0e:
                    5c:0c:c7:af:78:ba:f9:4e:58:77:55:9b:44:c3:32:
                    21:e9:b2:14:9d:26:9d:45:6d:15:fb:e9:02:86:61:
                    79:6e:cd:43:0e:82:30:a1:4c:af:5c:aa:0b:08:50:
                    a6:55:4e:b0:4d:6c:1e:72:7d:47:ce:7d:98:d4:d5:
                    11:a8:94:2a:00:35:38:e9:04:74:8b:5d:3b:9b:06:
                    32:1c:b3:87:62:b6:b6:61:02:9c:0a:72:ae:23:95:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:31:2A:D9:42:88:FF:52:38:BD:C4:B4:CC:8D:7B:D7:BA:81:51:46
            X509v3 Authority Key Identifier:
                keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:de:d1:a0:35:62:8d:0b:59:7b:c1:fc:e1:77:6f:97:41:
         ab:89:b1:b0:ef:85:f5:3e:80:24:a0:0c:fd:9d:b4:92:85:23:
         2a:3d:f4:df:d5:6c:70:a5:76:10:13:54:87:b5:cf:09:e4:87:
         f5:db:99:5d:d2:ec:27:b5:12:ca:70:ac:e0:40:3d:ab:9d:2a:
         c7:10:06:93:9f:d5:b1:a9:d3:43:fd:83:29:e2:99:c9:73:c3:
         da:31:9d:50:f3:a8:84:7b:28:2b:70:c3:02:5b:a6:47:fd:53:
         47:d1:c7:2f:0d:7d:ef:9c:6d:80:c4:6d:d0:27:3c:5a:3c:8d:
         13:2b:7f:dc:61:2e:98:76:1b:e2:40:bd:e4:f6:7b:e5:69:fc:
         05:93:45:be:28:02:35:40:46:05:9b:69:f6:95:29:60:31:61:
         45:1a:1b:8b:1d:b0:67:a8:97:72:ee:eb:4d:8f:7d:71:4c:88:
         ff:ef:23:ef:b3:c3:25:5d:90:76:1a:2a:c6:29:a2:9b:56:d4:
         02:a3:45:f7:44:14:93:de:42:0b:30:20:cb:b1:b8:19:55:a1:
         c9:8b:a9:28:fb:c7:e8:e6:64:b7:a6:ab:4d:10:56:87:b2:65:
         05:c2:58:3d:a9:ea:ae:65:38:34:ea:95:6a:4a:bc:4a:4a:84:
         98:c6:83:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByuV7aKzz3Vshm8GYdSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
Eyg3ZjMxMmFkOTQyODhmZjUyMzhiZGM0YjRjYzhkN2JkN2JhODE1MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXUlmyNDCgxwUS6KMvHeYX0y1tXx
vKxA84RJOhECcMJUWF7llHwn47XE8Lx2AYJHQnkPz3DiZbdOk+jYAJLlbO4+zIce
bOTSavnndbpOzD3PmmyHls6ph3DZERtA/RvY2c7J+r+hLbCjxrmesUOcNk23gnPd
1wbQBzhUHSMwroVZjaWtBkX4lWmK6T/it8yxMs9FIaKl3BxotkrXeZrrgzAO/w5c
DMeveLr5Tlh3VZtEwzIh6bIUnSadRW0V++kChmF5bs1DDoIwoUyvXKoLCFCmVU6w
TWwecn1Hzn2Y1NURqJQqADU46QR0i107mwYyHLOHYra2YQKcCnKuI5U+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8xKtlCiP9SOL3EtMyNe9e6gVFGMB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxLe0aA1
Yo0LWXvB/OF3b5dBq4mxsO+F9T6AJKAM/Z20koUjKj3039VscKV2EBNUh7XPCeSH
9duZXdLsJ7USynCs4EA9q50qxxAGk5/VsanTQ/2DKeKZyXPD2jGdUPOohHsoK3DD
AlumR/1TR9HHLw1975xtgMRt0Cc8WjyNEyt/3GEumHYb4kC95PZ75Wn8BZNFvigC
NUBGBZtp9pUpYDFhRRobix2wZ6iXcu7rTY99cUyI/+8j77PDJV2Qdhoqximim1bU
AqNF90QUk95CCzAgy7G4GVWhyYupKPvH6OZkt6arTRBWh7JlBcJYPanqrmU4NOqV
akq8SkqEmMaDjg==
-----END CERTIFICATE-----