Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
File:                     VmhcNSHqj-av5l1TOjsZno92UFs.mft (raw, json)
Hash identifier:          iNRJRCyd/9ZJvAGS4zo0HEMjnKglTL9NfDitta5JbPQ=
Subject key identifier:   86:E7:8F:4E:3E:05:BF:2E:0B:D9:5C:41:BD:DB:F2:BB:4D:B2:5A:79
Authority key identifier: 56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B
Certificate issuer:       /CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
Certificate serial:       01962E6192C2BC013580DB4D06E8DA912B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft
Manifest number:          13EF
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: VmhcNSHqj-av5l1TOjsZno92UFs.crl (hash: 0BgD7upZcfZ0aSO8uZRQXCfq1jcctpyUHf+8TizccHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:92:c2:bc:01:35:80:db:4d:06:e8:da:91:2b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56685c3521ea8fe6afe65d533a3b199e8f76505b
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=86e78f4e3e05bf2e0bd95c41bddbf2bb4db25a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:0c:7c:22:a8:f5:52:2c:c8:f2:d0:56:9d:
                    0c:04:a3:50:da:f3:4d:15:b7:d5:c8:2b:6c:92:5e:
                    55:57:86:2c:07:4f:86:c2:84:d8:b7:2a:e6:5d:95:
                    8f:8d:d3:52:76:7f:b0:93:51:c3:12:24:2c:23:4d:
                    e6:6e:3d:ec:96:fe:ca:c4:d8:f9:64:7a:a5:db:6e:
                    15:c1:34:bd:14:39:9f:f4:26:8d:8e:0a:0c:ab:16:
                    d7:11:10:0f:3c:7b:bb:97:7c:5f:c4:91:94:1b:2d:
                    7f:7d:18:f7:7f:d9:00:14:09:09:78:d0:5a:6f:30:
                    b8:71:bd:ae:e7:3e:24:29:21:b4:4f:94:df:a5:b9:
                    c7:40:b6:7d:26:c1:df:2d:a0:14:67:bb:fc:09:04:
                    0c:a5:74:6c:99:02:a9:26:14:17:a5:79:b3:1f:a7:
                    f2:8a:6f:e3:68:f9:28:0e:d3:31:53:4b:29:9c:fe:
                    2b:02:df:c8:0f:d8:b5:40:57:7d:b7:b1:e7:f1:53:
                    11:ee:60:a6:08:26:52:18:3b:ca:43:b9:8b:d2:f2:
                    ac:66:10:78:33:43:25:72:49:46:b4:a0:a4:66:77:
                    0d:7b:e9:a1:d2:de:71:7a:d2:5f:87:3c:87:b7:38:
                    5e:f8:c2:59:a8:42:90:49:aa:7f:a5:4c:06:b6:4f:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E7:8F:4E:3E:05:BF:2E:0B:D9:5C:41:BD:DB:F2:BB:4D:B2:5A:79
            X509v3 Authority Key Identifier:
                keyid:56:68:5C:35:21:EA:8F:E6:AF:E6:5D:53:3A:3B:19:9E:8F:76:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmhcNSHqj-av5l1TOjsZno92UFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16fcd2-5de3-4216-a75c-58c32895dcde/1/VmhcNSHqj-av5l1TOjsZno92UFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:77:20:d4:3f:17:5e:f0:97:5c:9d:77:87:c8:59:76:eb:
         50:dd:02:01:89:ba:64:4b:86:be:20:f5:17:e7:83:ae:4b:fa:
         0a:08:08:d5:8e:de:01:ff:02:a6:18:29:ad:c2:4e:15:7e:92:
         5b:34:bb:cd:08:0a:b5:f2:ec:84:38:5d:32:f6:6a:f7:20:33:
         d4:13:3a:0f:80:8f:d0:0f:62:9d:0c:87:63:da:26:04:ca:de:
         2f:92:d2:6c:b5:41:11:d3:87:d4:fb:bb:34:64:7a:68:17:e1:
         40:89:f9:42:bf:ea:c3:d4:d1:01:28:1a:9f:b1:7d:af:c8:84:
         2c:14:1c:7d:75:13:76:9f:f1:ce:17:c2:97:3c:f7:46:34:f3:
         4e:19:52:4a:cd:c3:a7:a4:e3:ac:cc:17:c6:41:28:0c:e4:a0:
         41:99:9c:c4:7f:b3:1f:e2:95:94:9f:f9:a6:2e:e8:b3:ae:e8:
         47:c0:b4:02:f2:b5:a2:0f:89:7a:7c:c0:43:ab:dd:5c:84:ed:
         de:b2:f0:e6:23:99:b6:2c:ad:3d:42:d6:a1:06:20:5d:bf:16:
         66:c8:ea:80:b5:c8:3e:45:31:1c:02:77:49:ed:81:c5:fa:5a:
         a3:21:2b:72:56:4e:b4:a1:b2:c5:80:e1:32:5b:ca:d8:ea:70:
         02:df:8e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZLCvAE1gNtNBujakSuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Njg1YzM1MjFlYThmZTZhZmU2NWQ1MzNhM2IxOTllOGY3
NjUwNWIwHhcNMjUwNDEzMDkwMTA4WhcNMjUwNDE0MDkwMTA4WjAzMTEwLwYDVQQD
Eyg4NmU3OGY0ZTNlMDViZjJlMGJkOTVjNDFiZGRiZjJiYjRkYjI1YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMkMfCKo9VIsyPLQVp0MBKNQ2vNN
FbfVyCtskl5VV4YsB0+GwoTYtyrmXZWPjdNSdn+wk1HDEiQsI03mbj3slv7KxNj5
ZHql224VwTS9FDmf9CaNjgoMqxbXERAPPHu7l3xfxJGUGy1/fRj3f9kAFAkJeNBa
bzC4cb2u5z4kKSG0T5TfpbnHQLZ9JsHfLaAUZ7v8CQQMpXRsmQKpJhQXpXmzH6fy
im/jaPkoDtMxU0spnP4rAt/ID9i1QFd9t7Hn8VMR7mCmCCZSGDvKQ7mL0vKsZhB4
M0MlcklGtKCkZncNe+mh0t5xetJfhzyHtzhe+MJZqEKQSap/pUwGtk9N/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbnj04+Bb8uC9lcQb3b8rtNslp5MB8GA1UdIwQY
MBaAFFZoXDUh6o/mr+ZdUzo7GZ6PdlBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmZjZDItNWRlMy00MjE2LWE3NWMt
NThjMzI4OTVkY2RlLzEvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNmZjZDItNWRlMy00MjE2LWE3NWMtNThjMzI4OTVkY2Rl
LzEvVm1oY05TSHFqLWF2NWwxVE9qc1pubzkyVUZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUJ3INQ/
F17wl1ydd4fIWXbrUN0CAYm6ZEuGviD1F+eDrkv6CggI1Y7eAf8CphgprcJOFX6S
WzS7zQgKtfLshDhdMvZq9yAz1BM6D4CP0A9inQyHY9omBMreL5LSbLVBEdOH1Pu7
NGR6aBfhQIn5Qr/qw9TRASgan7F9r8iELBQcfXUTdp/xzhfClzz3RjTzThlSSs3D
p6TjrMwXxkEoDOSgQZmcxH+zH+KVlJ/5pi7os67oR8C0AvK1og+JenzAQ6vdXITt
3rLw5iOZtiytPULWoQYgXb8WZsjqgLXIPkUxHAJ3Se2BxfpaoyErclZOtKGyxYDh
MlvK2OpwAt+OMA==
-----END CERTIFICATE-----