Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File:                     Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier:          C806pPeixSB8983386baZumzI1OsTQvCatQ6XVb/zq8=
Subject key identifier:   96:FD:C3:61:BB:38:8C:B9:6D:68:CB:EF:93:69:F4:9A:FA:32:84:30
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer:       /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial:       01962F3DD246382A277D6DB410181BC738AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number:          0853
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: /iGPS40rCaMqZpCzH0ieWYAwLg+mNSYbwxOMlr5WVLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:46:38:2a:27:7d:6d:b4:10:18:1b:c7:38:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=96fdc361bb388cb96d68cbef9369f49afa328430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:a9:04:23:41:64:03:0d:7d:c0:2d:8f:68:
                    09:c2:77:b7:e1:1a:2b:ad:e8:40:15:47:e9:ef:51:
                    c9:18:a8:cb:cd:c3:61:f2:7c:a3:4b:c5:f5:a1:bf:
                    98:dd:7e:af:81:31:54:d6:c2:f9:b6:0f:28:0b:38:
                    0c:d4:02:e0:da:85:6a:bf:7e:69:21:8f:f4:c7:33:
                    a5:c4:ca:13:7d:83:c3:da:93:bf:e3:b6:17:76:38:
                    f5:81:a4:1d:8e:4b:ca:8e:03:dd:27:9c:c9:ea:40:
                    70:f9:81:8d:a8:91:9e:61:a3:a8:46:c3:7f:f1:88:
                    c7:91:22:28:19:e2:cb:bd:96:88:f8:54:b2:97:13:
                    33:c1:1e:29:61:c8:de:66:9d:06:39:79:53:07:f1:
                    83:56:fb:64:be:5c:2d:fa:ed:8d:73:b4:6c:d9:be:
                    f1:e4:58:83:3e:f5:04:cf:bb:ea:1f:31:e9:3c:ad:
                    97:07:a5:3a:9d:0a:9e:3e:8b:c9:52:df:9e:79:88:
                    d4:a6:d3:b3:06:3e:85:ae:b4:a0:52:54:2d:a9:34:
                    cb:82:cf:68:0f:ef:e7:62:1f:c4:f5:54:b7:43:33:
                    bc:f5:4e:15:69:a8:58:e5:e0:57:07:5d:0b:26:64:
                    a0:b6:97:b6:d6:0c:be:10:97:d8:4f:7c:5a:0d:0d:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FD:C3:61:BB:38:8C:B9:6D:68:CB:EF:93:69:F4:9A:FA:32:84:30
            X509v3 Authority Key Identifier:
                keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:02:8e:ea:01:63:23:70:4a:e2:55:27:50:d9:de:0f:bc:
         89:78:41:e7:46:bd:51:4b:43:df:6d:c5:c1:38:ff:24:52:4d:
         a8:3a:0d:2d:e5:7a:49:1f:45:de:e4:e5:30:fd:ef:64:89:be:
         e4:ec:d5:f2:e9:dc:e8:de:91:ec:1d:3e:dd:eb:62:89:67:57:
         43:f8:f0:cd:34:78:0c:d1:5a:d0:2b:26:04:d1:95:fc:64:e8:
         04:bc:07:d9:39:87:d2:d3:a1:c2:74:57:41:92:b9:f7:93:37:
         ea:fd:00:9f:c9:71:cd:8b:11:5e:8e:e9:86:8b:12:20:d2:bc:
         4a:7b:51:cc:2d:fd:9f:39:5c:ac:d6:b2:46:04:0c:bb:e0:9c:
         3e:11:b8:17:70:6f:4d:ce:a2:ab:c4:c5:bd:02:d6:87:d3:5d:
         ea:91:3d:dd:2e:2b:c2:b8:72:e9:3f:70:71:7f:8e:55:b8:00:
         b5:60:b7:3d:e2:5a:0b:0a:92:d6:24:8f:49:00:66:8d:44:76:
         0d:af:9e:66:c5:5e:ba:d6:ab:4d:01:d2:81:76:df:8e:65:57:
         14:60:1a:b6:23:3a:b1:3a:b7:00:1d:f4:4d:cd:35:10:e4:f9:
         b2:cb:21:46:39:0b:87:1a:e1:cc:bf:cf:69:da:2f:43:6f:7d:
         d6:96:ac:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdJGOConfW20EBgbxzitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzlhMTgzZWUzZmMwYTM1NzZjMWYwY2EzY2M5OTc3MzA5
ZTQ1ODMwHhcNMjUwNDEzMTMwMTQyWhcNMjUwNDE0MTMwMTQyWjAzMTEwLwYDVQQD
Eyg5NmZkYzM2MWJiMzg4Y2I5NmQ2OGNiZWY5MzY5ZjQ5YWZhMzI4NDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9upBCNBZAMNfcAtj2gJwne34Ror
rehAFUfp71HJGKjLzcNh8nyjS8X1ob+Y3X6vgTFU1sL5tg8oCzgM1ALg2oVqv35p
IY/0xzOlxMoTfYPD2pO/47YXdjj1gaQdjkvKjgPdJ5zJ6kBw+YGNqJGeYaOoRsN/
8YjHkSIoGeLLvZaI+FSylxMzwR4pYcjeZp0GOXlTB/GDVvtkvlwt+u2Nc7Rs2b7x
5FiDPvUEz7vqHzHpPK2XB6U6nQqePovJUt+eeYjUptOzBj6FrrSgUlQtqTTLgs9o
D+/nYh/E9VS3QzO89U4VaahY5eBXB10LJmSgtpe21gy+EJfYT3xaDQ19FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb9w2G7OIy5bWjL75Np9Jr6MoQwMB8GA1UdIwQY
MBaAFFXJoYPuP8CjV2wfDKPMmXcwnkWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82OGMwNmEtNjkzYy00OTM4LTg3Njct
ZDI2ODdkNGM5ZWZhLzEvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82OGMwNmEtNjkzYy00OTM4LTg3NjctZDI2ODdkNGM5ZWZh
LzEvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ACjuoB
YyNwSuJVJ1DZ3g+8iXhB50a9UUtD323FwTj/JFJNqDoNLeV6SR9F3uTlMP3vZIm+
5OzV8unc6N6R7B0+3etiiWdXQ/jwzTR4DNFa0CsmBNGV/GToBLwH2TmH0tOhwnRX
QZK595M36v0An8lxzYsRXo7phosSINK8SntRzC39nzlcrNayRgQMu+CcPhG4F3Bv
Tc6iq8TFvQLWh9Nd6pE93S4rwrhy6T9wcX+OVbgAtWC3PeJaCwqS1iSPSQBmjUR2
Da+eZsVeutarTQHSgXbfjmVXFGAatiM6sTq3AB30Tc01EOT5ssshRjkLhxrhzL/P
adovQ2991pasow==
-----END CERTIFICATE-----