Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File:                     VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier:          YUnsJ4N/ZKVY2rHDg6kD2VaBXiSAJvV9u/9NSYhA9WA=
Subject key identifier:   1B:80:A9:53:16:D2:03:55:D4:52:8C:12:99:9E:17:C0:0D:9D:C8:95
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer:       /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial:       01962F065562ACD87C243BA2E01C40B49CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number:          0FC0
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
                          2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: 0rOo3aPQnCT+9QaXMWSkj7D3eqkIMA6rzT671KCGwHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:62:ac:d8:7c:24:3b:a2:e0:1c:40:b4:9c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=1b80a95316d20355d4528c12999e17c00d9dc895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:48:0f:01:14:ea:c5:be:b4:fd:2c:e8:8d:
                    16:a1:61:02:0c:93:9a:9b:43:18:6e:60:cc:c4:67:
                    03:d3:e2:01:19:d2:33:be:3b:22:28:1e:7a:41:76:
                    d5:c2:c5:ee:88:42:80:dc:27:10:59:17:3a:5d:3d:
                    90:52:a2:89:32:e7:75:ca:49:c2:e6:3d:e1:48:38:
                    62:47:36:2f:fe:7a:cb:5c:cc:79:b9:e0:52:54:d2:
                    c1:40:f8:16:9c:83:c8:c1:10:31:6e:f7:05:c9:44:
                    b4:d7:01:97:33:a6:ff:de:e7:0f:7a:eb:3c:3f:63:
                    26:42:bc:fc:e0:6d:01:7f:09:f8:1e:af:e9:c8:90:
                    f6:4c:95:48:8f:e7:d1:41:3a:6b:33:75:52:51:fa:
                    da:1d:9a:c8:42:bc:cc:40:3a:76:e8:25:ab:2c:1c:
                    df:87:bd:8e:8c:72:41:c8:48:22:ad:02:2e:82:b5:
                    29:aa:c0:cd:a9:a9:ce:ad:f1:e5:28:d4:ca:da:00:
                    47:5e:71:5a:c8:63:be:d9:f6:ca:b5:b9:60:a1:ce:
                    d8:67:4d:ae:bc:b8:e2:40:d4:93:05:ca:28:8b:61:
                    be:fa:5d:04:25:7b:85:74:e3:9e:ad:30:02:11:15:
                    a5:78:6b:e4:08:32:27:93:88:29:a0:6b:d3:1f:0a:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:A9:53:16:D2:03:55:D4:52:8C:12:99:9E:17:C0:0D:9D:C8:95
            X509v3 Authority Key Identifier:
                keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:d3:91:e4:71:42:0a:ba:7e:74:e4:ba:51:ae:14:f8:95:
         f6:b7:2b:96:df:5b:28:0a:c6:32:a8:09:70:62:21:e6:a6:46:
         56:59:be:36:d0:81:8e:78:70:6a:1c:fb:5a:95:45:02:75:53:
         cf:b4:a2:c9:7e:e7:e5:ea:15:43:13:3a:db:c1:91:6d:c3:ad:
         90:40:8b:ab:fa:f7:2b:ea:1a:09:af:84:82:ac:93:d6:56:4b:
         84:d3:ad:87:dc:68:bb:f4:06:27:31:65:fd:56:ea:04:5c:97:
         d9:4a:43:ed:00:70:8a:c2:b9:35:11:47:6f:44:87:cf:ea:9c:
         54:73:09:6e:c9:c5:11:91:1a:2c:9d:31:7e:e2:7d:46:40:05:
         14:cc:0f:83:39:74:4d:07:e4:d1:13:da:ba:a1:d6:2f:76:c6:
         e9:ad:98:d6:52:8d:2b:b4:6c:a9:72:3c:1a:f2:f7:39:65:8f:
         a4:27:9b:72:1e:be:b0:77:3c:bd:ca:47:90:2b:2c:a5:67:57:
         37:7c:6b:0a:97:0a:a2:dc:26:8b:5f:4f:41:c0:7c:3b:55:e6:
         06:c7:df:12:25:97:f8:55:7c:c0:37:76:cf:02:73:6b:5d:01:
         97:63:b8:8e:12:c7:89:d7:ee:c3:0d:9f:e1:9e:0e:60:6c:fa:
         2f:c1:ac:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlVirNh8JDui4BxAtJzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw
OTllNzkwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EygxYjgwYTk1MzE2ZDIwMzU1ZDQ1MjhjMTI5OTllMTdjMDBkOWRjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFIDwEU6sW+tP0s6I0WoWECDJOa
m0MYbmDMxGcD0+IBGdIzvjsiKB56QXbVwsXuiEKA3CcQWRc6XT2QUqKJMud1yknC
5j3hSDhiRzYv/nrLXMx5ueBSVNLBQPgWnIPIwRAxbvcFyUS01wGXM6b/3ucPeus8
P2MmQrz84G0Bfwn4Hq/pyJD2TJVIj+fRQTprM3VSUfraHZrIQrzMQDp26CWrLBzf
h72OjHJByEgirQIugrUpqsDNqanOrfHlKNTK2gBHXnFayGO+2fbKtblgoc7YZ02u
vLjiQNSTBcooi2G++l0EJXuFdOOerTACERWleGvkCDInk4gpoGvTHwpAAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuAqVMW0gNV1FKMEpmeF8ANnciVMB8GA1UdIwQY
MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt
Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh
LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9PTkeRx
Qgq6fnTkulGuFPiV9rcrlt9bKArGMqgJcGIh5qZGVlm+NtCBjnhwahz7WpVFAnVT
z7SiyX7n5eoVQxM628GRbcOtkECLq/r3K+oaCa+EgqyT1lZLhNOth9xou/QGJzFl
/VbqBFyX2UpD7QBwisK5NRFHb0SHz+qcVHMJbsnFEZEaLJ0xfuJ9RkAFFMwPgzl0
TQfk0RPauqHWL3bG6a2Y1lKNK7RsqXI8GvL3OWWPpCebch6+sHc8vcpHkCsspWdX
N3xrCpcKotwmi19PQcB8O1XmBsffEiWX+FV8wDd2zwJza10Bl2O4jhLHidfuww2f
4Z4OYGz6L8GsFg==
-----END CERTIFICATE-----