Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File:                     N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier:          VhANNFAyXFiVtbk9vr2WxG75TPoOY0YPdZU2m4ymnjM=
Subject key identifier:   E6:43:66:C7:5A:4E:36:9F:36:70:06:29:BD:89:02:32:7A:E8:03:86
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer:       /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial:       01962F0663F2C51AE01B1D0461C847C00DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: bVLhfCj+R5W7BslEcF1ZtGGu+ra3SJuYmy+62qgRavw=)
                          2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
                          3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:f2:c5:1a:e0:1b:1d:04:61:c8:47:c0:0d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=e64366c75a4e369f36700629bd8902327ae80386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:da:5a:fd:8f:7b:95:47:8d:fc:e2:bb:c4:
                    bb:2a:b9:98:c7:09:e7:91:b0:c2:c6:ce:e8:af:f3:
                    5b:03:3d:eb:fd:fb:2f:f6:5b:a9:12:63:c1:be:07:
                    65:4b:bc:a7:b7:a7:2c:f8:29:d7:74:48:ec:5b:2a:
                    3c:63:53:42:e2:00:5c:76:ba:92:f3:0a:d0:9c:a8:
                    96:cd:26:e0:cf:21:a9:58:30:fc:c8:a6:f3:77:d4:
                    a3:dd:c4:78:53:29:91:a7:91:2e:0a:16:73:3a:b3:
                    ff:e9:46:22:a2:1b:fa:09:ad:e6:89:c9:81:fe:e7:
                    fc:f7:6e:93:1b:ee:5d:84:b2:3d:1f:bc:3c:a8:96:
                    46:12:c7:65:03:16:1a:bc:64:15:76:89:6f:71:4c:
                    bf:6a:59:a2:27:f0:2c:74:8a:55:04:aa:a7:13:54:
                    61:2c:8c:e7:e7:05:31:f9:78:b5:ee:4d:9d:40:b9:
                    68:8b:64:15:38:1b:fc:19:53:ef:eb:d7:c4:52:b1:
                    32:bf:ab:48:05:c6:e6:d7:13:1e:e8:13:a3:1c:4b:
                    7e:e0:8e:46:72:70:9a:7d:52:c6:16:05:41:b9:f7:
                    57:7f:5f:80:ee:e4:e4:3b:aa:1d:85:d6:69:92:39:
                    b2:2b:8a:75:b9:de:46:73:7b:d1:d9:5a:05:2b:48:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:66:C7:5A:4E:36:9F:36:70:06:29:BD:89:02:32:7A:E8:03:86
            X509v3 Authority Key Identifier:
                keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:48:57:b5:06:82:3c:4b:62:4b:5f:d8:98:1d:f7:90:c1:
         e5:ca:00:7f:66:61:aa:c8:46:ef:a1:17:df:20:cf:ad:cc:9b:
         69:c2:84:36:89:e5:42:02:dc:b4:d1:45:66:36:37:c0:4f:b5:
         5e:3b:16:0e:08:b3:65:ad:e1:f4:c9:89:77:75:9d:7c:af:4f:
         b8:ca:b8:7f:9c:66:09:ee:cf:0c:94:24:0f:11:bd:a9:4b:6a:
         68:1d:09:1e:c3:74:aa:f2:5d:1a:c3:2a:af:00:48:4c:ca:98:
         06:9f:57:f8:08:d8:d6:0c:75:e7:15:bf:83:bd:56:f0:8f:21:
         2a:5d:a6:45:6b:ca:74:09:cc:be:5d:dc:f1:64:89:e1:5a:9c:
         e6:5e:e1:c1:80:c7:7f:08:89:5a:a5:62:e2:a7:cf:24:64:a8:
         a9:63:a9:fa:35:80:8c:ff:44:89:0c:0d:10:84:f6:ab:b9:29:
         d7:68:a6:9d:f0:f0:20:b8:ba:00:94:62:6c:42:a5:91:f4:d7:
         7a:ba:24:2a:15:14:ca:ff:d2:46:4d:76:d3:db:c5:2b:0f:bd:
         af:cd:a2:d0:9e:b2:ed:1e:f3:48:57:15:da:dc:62:c2:07:f5:
         14:50:6e:2a:66:82:ea:6a:b6:7f:52:5e:88:34:90:63:07:ca:
         75:3f:d8:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmPyxRrgGx0EYchHwA3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjUwNDEzMTIwMTA5WhcNMjUwNDE0MTIwMTA5WjAzMTEwLwYDVQQD
EyhlNjQzNjZjNzVhNGUzNjlmMzY3MDA2MjliZDg5MDIzMjdhZTgwMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TraWv2Pe5VHjfziu8S7KrmYxwnn
kbDCxs7or/NbAz3r/fsv9lupEmPBvgdlS7ynt6cs+CnXdEjsWyo8Y1NC4gBcdrqS
8wrQnKiWzSbgzyGpWDD8yKbzd9Sj3cR4UymRp5EuChZzOrP/6UYiohv6Ca3micmB
/uf8926TG+5dhLI9H7w8qJZGEsdlAxYavGQVdolvcUy/almiJ/AsdIpVBKqnE1Rh
LIzn5wUx+Xi17k2dQLloi2QVOBv8GVPv69fEUrEyv6tIBcbm1xMe6BOjHEt+4I5G
cnCafVLGFgVBufdXf1+A7uTkO6odhdZpkjmyK4p1ud5Gc3vR2VoFK0iGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZDZsdaTjafNnAGKb2JAjJ66AOGMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACRIV7UG
gjxLYktf2Jgd95DB5coAf2ZhqshG76EX3yDPrcybacKENonlQgLctNFFZjY3wE+1
XjsWDgizZa3h9MmJd3WdfK9PuMq4f5xmCe7PDJQkDxG9qUtqaB0JHsN0qvJdGsMq
rwBITMqYBp9X+AjY1gx15xW/g71W8I8hKl2mRWvKdAnMvl3c8WSJ4Vqc5l7hwYDH
fwiJWqVi4qfPJGSoqWOp+jWAjP9EiQwNEIT2q7kp12imnfDwILi6AJRibEKlkfTX
erokKhUUyv/SRk1209vFKw+9r82i0J6y7R7zSFcV2txiwgf1FFBuKmaC6mq2f1Je
iDSQYwfKdT/Yfg==
-----END CERTIFICATE-----