Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
File:                     VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft (raw, json)
Hash identifier:          B4licwfEL9ApLbCmWdlYXa9WgrAhA/ayU/TLYCiytxk=
Subject key identifier:   E5:E1:11:BD:B1:2E:01:65:1A:57:CD:8F:10:72:FC:AA:2E:6E:A9:1C
Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
Certificate issuer:       /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Certificate serial:       01962F3D3FE3625FCE78765B324B7DFDF47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
Manifest number:          135B
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl (hash: +y073r749SFGzX5w/Juhodr816fgdQgV61D853H0HpA=)
                          2: rja0swvI9FWxE8KMSBLX04uSXw0.roa (hash: Z2Ufwd9m2IoyJqT+av4hl2D/R56gkSmO/5BjIjrBUGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3f:e3:62:5f:ce:78:76:5b:32:4b:7d:fd:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=e5e111bdb12e01651a57cd8f1072fcaa2e6ea91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:e2:7a:2f:6e:3a:44:4b:92:4d:af:7e:cd:
                    7a:5c:f7:98:51:a7:4c:ad:88:b0:de:24:b2:7c:fe:
                    2d:ec:ba:9f:72:e8:a3:18:a6:d0:28:c4:67:e8:7e:
                    dc:e9:21:2f:81:75:12:71:8f:dc:89:ef:5a:c8:ec:
                    9e:72:1e:84:cc:7c:81:e8:ae:fe:6c:5f:36:d1:82:
                    26:eb:31:b8:7d:ed:fc:76:13:73:6d:68:1b:94:af:
                    06:a5:2b:ea:b4:97:30:cc:14:4f:b1:12:aa:25:83:
                    37:05:22:a1:09:e3:e7:d3:ca:ef:04:e5:b6:16:1a:
                    bd:9a:89:99:38:38:49:9f:16:45:76:3e:7d:37:86:
                    ff:5c:99:dc:71:83:96:7d:26:33:82:59:40:a7:67:
                    a5:4b:fa:2f:82:41:c8:98:35:f8:3f:2d:2e:be:fe:
                    b3:f3:c1:b3:52:df:a8:32:2c:dc:ec:2e:38:55:dc:
                    33:ef:2f:41:0f:e1:96:bf:f0:fd:13:f5:2e:7f:b6:
                    d6:0e:16:7d:a9:bd:26:79:b6:c9:98:70:63:88:e2:
                    aa:c8:c8:0b:0f:d5:87:3a:0c:84:01:08:dd:08:8c:
                    4b:09:e0:ae:5a:b5:62:64:a5:86:be:d2:ce:65:a3:
                    0c:b2:b5:ee:62:fd:0a:2e:13:28:1b:e0:df:ff:db:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:11:BD:B1:2E:01:65:1A:57:CD:8F:10:72:FC:AA:2E:6E:A9:1C
            X509v3 Authority Key Identifier:
                keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c6:be:51:4b:2c:ab:3e:a3:f8:6c:b0:67:5e:b5:08:42:c6:
         ad:84:76:75:37:dc:c5:f9:bd:55:58:04:a9:85:11:c8:99:a6:
         57:db:b3:cc:f0:69:81:66:b5:3c:04:4d:b5:ae:f0:2e:6d:71:
         cc:75:1d:db:eb:95:c0:8c:ac:e5:8d:3e:88:2f:15:d7:8c:2a:
         80:3d:b9:da:ca:91:f0:48:34:38:44:08:96:e6:96:51:3e:f7:
         48:03:23:cc:e6:d3:00:7b:f2:cf:45:38:3e:8a:5c:91:39:5a:
         e4:a6:21:dc:91:83:f6:c2:2d:30:82:9a:01:23:54:47:ef:b1:
         4f:fc:f6:16:38:41:a0:13:9f:80:2e:22:80:15:98:ea:2d:be:
         27:c5:d7:88:d0:d7:db:26:b9:a6:fd:02:7c:01:e3:7f:54:46:
         ff:a0:12:ab:5a:4d:9d:c8:aa:da:ec:47:bb:5d:7b:cf:ee:c2:
         a8:9c:ad:85:9c:71:60:3b:58:aa:bc:b8:05:38:af:d6:ce:67:
         ab:94:8a:24:72:02:9a:e0:03:da:3a:4b:42:b9:de:e3:3a:c5:
         3e:f7:d5:87:8b:e7:9d:b2:dd:2d:ee:4e:45:56:0b:8e:a8:e5:
         7e:78:87:bd:c1:b7:3e:8e:84:f2:e5:79:8c:d6:26:2f:28:5c:
         2a:a0:68:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPT/jYl/OeHZbMkt9/fR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTMwYmEwZWNjNmU2OTE4OTQ2MzU2MWQ0ZWE1NGMyM2Qx
MzhmM2MwHhcNMjUwNDEzMTMwMTA1WhcNMjUwNDE0MTMwMTA1WjAzMTEwLwYDVQQD
EyhlNWUxMTFiZGIxMmUwMTY1MWE1N2NkOGYxMDcyZmNhYTJlNmVhOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Tiei9uOkRLkk2vfs16XPeYUadM
rYiw3iSyfP4t7LqfcuijGKbQKMRn6H7c6SEvgXUScY/cie9ayOyech6EzHyB6K7+
bF820YIm6zG4fe38dhNzbWgblK8GpSvqtJcwzBRPsRKqJYM3BSKhCePn08rvBOW2
Fhq9momZODhJnxZFdj59N4b/XJnccYOWfSYzgllAp2elS/ovgkHImDX4Py0uvv6z
88GzUt+oMizc7C44Vdwz7y9BD+GWv/D9E/Uuf7bWDhZ9qb0mebbJmHBjiOKqyMgL
D9WHOgyEAQjdCIxLCeCuWrViZKWGvtLOZaMMsrXuYv0KLhMoG+Df/9vtbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXhEb2xLgFlGlfNjxBy/KoubqkcMB8GA1UdIwQY
MBaAFFXjC6DsxuaRiUY1YdTqVMI9E488MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgt
ZjgxYWM1NmNjM2RjLzEvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgtZjgxYWM1NmNjM2Rj
LzEvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMa+UUss
qz6j+GywZ161CELGrYR2dTfcxfm9VVgEqYURyJmmV9uzzPBpgWa1PARNta7wLm1x
zHUd2+uVwIys5Y0+iC8V14wqgD252sqR8Eg0OEQIluaWUT73SAMjzObTAHvyz0U4
PopckTla5KYh3JGD9sItMIKaASNUR++xT/z2FjhBoBOfgC4igBWY6i2+J8XXiNDX
2ya5pv0CfAHjf1RG/6ASq1pNnciq2uxHu117z+7CqJythZxxYDtYqry4BTiv1s5n
q5SKJHICmuAD2jpLQrne4zrFPvfVh4vnnbLdLe5ORVYLjqjlfniHvcG3Po6E8uV5
jNYmLyhcKqBogQ==
-----END CERTIFICATE-----