Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File:                     VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier:          vnKbfLY/OnMJUBlR85umm+S81MgQSno9tSbC0KarIRI=
Subject key identifier:   F1:AC:7A:6B:43:96:6F:E3:39:1B:CB:F7:82:F8:B3:70:8B:AD:B9:FE
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer:       /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial:       01962F3DF1AD747B5EB05E6DA8B84EC58499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number:          12E3
Signing time:             Sun 13 Apr 2025 13:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:50 +0000
Files and hashes:         1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: 7UNa1RqlmXbi82DxdfNx+/Y9qP/dUf0t+6LFwcJhgN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f1:ad:74:7b:5e:b0:5e:6d:a8:b8:4e:c5:84:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
        Validity
            Not Before: Apr 13 13:01:50 2025 GMT
            Not After : Apr 14 13:01:50 2025 GMT
        Subject: CN=f1ac7a6b43966fe3391bcbf782f8b3708badb9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:50:5d:7b:a8:f0:a1:e3:e1:c8:95:d7:02:
                    b2:c6:5e:cd:b4:5c:40:de:f5:10:0e:52:28:3d:7c:
                    95:f5:83:46:8a:b2:0d:4e:ca:61:e2:94:27:54:d2:
                    75:05:6e:d5:16:8b:b2:91:44:e6:d3:98:15:c5:1d:
                    ba:2a:6e:60:52:a4:ae:5a:b1:15:cd:d9:6c:da:9f:
                    a9:29:9a:da:55:61:51:bd:3e:f4:fb:d2:1d:55:5c:
                    64:8e:d5:66:e7:3f:99:50:7d:f0:71:ab:df:90:dd:
                    7f:45:77:b7:56:7a:a5:c3:3a:ae:be:cd:d3:02:27:
                    d7:a5:8b:d2:c3:3a:9a:e1:c0:28:0d:19:86:b9:d7:
                    f4:36:3e:df:8f:d2:01:9b:8c:a6:b5:96:b2:6d:74:
                    d2:11:88:2f:87:65:4e:68:30:0f:82:95:aa:5b:18:
                    7d:66:ae:21:e2:a0:16:23:e8:57:02:43:f3:e3:58:
                    39:65:fb:e9:bd:5c:f1:49:bb:1c:9e:9f:1c:87:83:
                    17:0a:28:d0:77:35:a8:f3:85:cc:ea:11:1e:56:63:
                    52:9a:be:49:5a:cd:25:dd:bd:9d:4f:b9:fc:59:36:
                    75:41:1e:9f:81:61:ee:bc:47:10:77:74:9e:d5:89:
                    bc:20:8e:0d:8f:97:fb:31:b5:ca:58:f1:aa:53:d4:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:7A:6B:43:96:6F:E3:39:1B:CB:F7:82:F8:B3:70:8B:AD:B9:FE
            X509v3 Authority Key Identifier:
                keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:b7:c4:76:dc:84:6c:2f:2d:83:c6:9c:a1:a5:f8:3a:e0:
         14:aa:a7:da:06:ca:3b:60:21:ba:13:24:0a:ea:9c:47:63:52:
         a1:01:ba:89:2a:d0:b2:9f:88:c4:7f:29:ae:cb:41:95:7a:7b:
         d5:92:8f:8c:d1:7a:89:1d:5e:a6:d4:56:28:a6:23:b7:94:09:
         4e:16:bb:23:67:45:e0:d5:ed:82:57:28:1e:fa:cb:d6:3a:13:
         b5:80:52:9f:e6:26:e7:9e:91:45:18:75:e9:cb:67:da:97:13:
         47:c1:82:c5:7e:e6:df:a8:51:43:b0:91:94:8f:b0:d8:c6:f1:
         38:08:04:78:3b:99:02:8e:67:92:96:4f:23:aa:42:06:9a:b3:
         7b:f1:84:68:a7:9e:73:a3:f0:93:5d:ba:ac:5e:50:31:42:cf:
         5d:67:81:6f:7d:5c:65:6f:f8:e1:bf:7f:3a:38:c0:39:e5:a4:
         b9:fc:a2:22:00:2d:e1:fb:3b:d7:50:c6:45:77:e7:ac:37:c1:
         0d:f5:5c:e6:e2:f2:89:42:45:05:48:10:dc:6f:f2:da:0c:e2:
         7f:2c:f0:91:c0:00:fd:bb:77:b3:70:4f:42:43:8a:37:3b:bd:
         42:9a:12:3a:ad:23:50:3b:f9:38:4d:8b:2f:f2:a8:2d:97:df:
         5f:cc:f7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPfGtdHtesF5tqLhOxYSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx
ZDdkOGUwHhcNMjUwNDEzMTMwMTUwWhcNMjUwNDE0MTMwMTUwWjAzMTEwLwYDVQQD
EyhmMWFjN2E2YjQzOTY2ZmUzMzkxYmNiZjc4MmY4YjM3MDhiYWRiOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SRQXXuo8KHj4ciV1wKyxl7NtFxA
3vUQDlIoPXyV9YNGirINTsph4pQnVNJ1BW7VFouykUTm05gVxR26Km5gUqSuWrEV
zdls2p+pKZraVWFRvT70+9IdVVxkjtVm5z+ZUH3wcavfkN1/RXe3Vnqlwzquvs3T
AifXpYvSwzqa4cAoDRmGudf0Nj7fj9IBm4ymtZaybXTSEYgvh2VOaDAPgpWqWxh9
Zq4h4qAWI+hXAkPz41g5ZfvpvVzxSbscnp8ch4MXCijQdzWo84XM6hEeVmNSmr5J
Ws0l3b2dT7n8WTZ1QR6fgWHuvEcQd3Se1Ym8II4Nj5f7MbXKWPGqU9R4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGsemtDlm/jORvL94L4s3CLrbn+MB8GA1UdIwQY
MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt
ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw
LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4G3xHbc
hGwvLYPGnKGl+DrgFKqn2gbKO2AhuhMkCuqcR2NSoQG6iSrQsp+IxH8prstBlXp7
1ZKPjNF6iR1eptRWKKYjt5QJTha7I2dF4NXtglcoHvrL1joTtYBSn+Ym556RRRh1
6ctn2pcTR8GCxX7m36hRQ7CRlI+w2MbxOAgEeDuZAo5nkpZPI6pCBpqze/GEaKee
c6Pwk126rF5QMULPXWeBb31cZW/44b9/OjjAOeWkufyiIgAt4fs711DGRXfnrDfB
DfVc5uLyiUJFBUgQ3G/y2gzifyzwkcAA/bt3s3BPQkOKNzu9QpoSOq0jUDv5OE2L
L/KoLZffX8z3/g==
-----END CERTIFICATE-----