Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          2cXuGC0PK6Kspf4rl3bSGVSXTMUpLz8tc9Rrb/vUWnM=
Subject key identifier:   AE:E7:18:69:74:F2:42:B5:75:71:7E:A9:4D:89:1E:F9:76:95:9A:F3
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       01962F3DE9F48EAA95D4A8848E5FCD8E2956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: XOj+NdV9jRzVGogpRMIO7VrSFPy1pPUvshxww4VxlTE=)
                          2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e9:f4:8e:aa:95:d4:a8:84:8e:5f:cd:8e:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=aee7186974f242b575717ea94d891ef976959af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:22:0d:8f:39:d8:87:67:d7:7e:ba:78:ce:
                    1b:28:c4:72:6e:8d:c8:90:b4:10:b7:2f:58:7d:7d:
                    40:48:1d:2f:a1:15:87:aa:6b:22:11:4c:ca:d3:7f:
                    74:67:5c:3a:31:04:20:c3:79:dd:6e:ac:87:62:95:
                    52:75:7d:06:ab:5b:c4:21:f9:04:fd:16:39:1c:b7:
                    ac:5b:a5:42:3c:72:fc:d8:4d:be:ab:1b:d4:f9:be:
                    70:5c:20:63:7c:0a:45:b2:a4:9e:ff:97:5d:2d:4f:
                    ec:69:4c:2b:6d:c1:f9:a8:16:dd:d6:f1:c4:d3:ef:
                    48:8e:55:c0:9a:cc:12:fc:b1:a9:d4:d9:7d:40:03:
                    85:f2:c1:79:ca:9b:c6:df:c5:fe:57:fd:05:45:26:
                    28:26:a6:e3:26:49:b0:48:0d:08:1d:5a:a1:10:d1:
                    7d:00:9f:32:1d:cc:4c:5e:9d:cf:54:50:34:23:4e:
                    bb:d1:16:d8:ae:bf:4a:d7:e2:92:1d:bf:22:a5:25:
                    7b:ff:13:4e:78:17:11:34:04:9c:0d:75:87:45:b1:
                    c0:87:01:85:65:4b:41:45:42:13:f3:04:eb:92:a9:
                    9c:31:e4:5c:85:98:ea:de:e6:81:82:c9:81:e7:64:
                    56:3c:17:ec:50:e5:c4:37:95:95:05:39:59:76:40:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:18:69:74:F2:42:B5:75:71:7E:A9:4D:89:1E:F9:76:95:9A:F3
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:1a:93:b4:25:6d:14:6c:41:6a:dc:46:42:86:f6:fb:cd:
         f1:51:b5:dc:3b:0e:30:cc:1e:45:1c:6c:2c:93:94:d0:87:26:
         e3:07:93:7a:3a:4f:27:8b:ef:5f:05:7b:d8:5e:ac:2e:32:a0:
         bc:63:db:ec:5b:8f:31:ab:ef:81:c8:16:79:38:72:cc:89:48:
         bd:ce:4f:9c:3f:2d:be:2f:23:32:80:b8:2b:5e:19:7a:07:ef:
         62:fc:df:a4:fe:54:2c:0c:b9:f0:22:06:e1:ba:6d:b1:cf:f8:
         19:a8:a4:df:dc:09:7d:51:e8:a5:64:cd:d3:83:7c:83:c3:2b:
         f3:9f:8a:cd:7b:3d:9e:48:db:32:af:c8:08:43:0f:52:39:82:
         82:81:3a:53:d2:67:e3:ee:e7:69:e4:44:b6:28:c9:4b:de:39:
         77:d9:9b:f7:1c:9f:b4:25:1a:81:84:81:4d:4f:0e:1a:5c:66:
         7b:df:33:a6:ae:a7:d0:97:00:3f:31:d4:3c:d4:d1:00:82:3a:
         80:c1:32:f5:c4:b5:64:c1:48:e4:eb:a4:a0:4e:6b:48:57:58:
         5b:3f:65:7c:dd:a8:85:7b:de:b6:4e:e8:d0:dd:c5:fb:21:66:
         19:30:d8:b7:7a:23:78:33:30:28:8d:95:e2:40:01:5e:da:78:
         c3:a4:cf:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPen0jqqV1KiEjl/NjilWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MjVhZGQyYmZmM2U2NjhhZTE4NTU0YmVlYmYzMWEyM2E2
OWRkYTUwHhcNMjUwNDEzMTMwMTQ4WhcNMjUwNDE0MTMwMTQ4WjAzMTEwLwYDVQQD
EyhhZWU3MTg2OTc0ZjI0MmI1NzU3MTdlYTk0ZDg5MWVmOTc2OTU5YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIYiDY852Idn1366eM4bKMRybo3I
kLQQty9YfX1ASB0voRWHqmsiEUzK0390Z1w6MQQgw3ndbqyHYpVSdX0Gq1vEIfkE
/RY5HLesW6VCPHL82E2+qxvU+b5wXCBjfApFsqSe/5ddLU/saUwrbcH5qBbd1vHE
0+9IjlXAmswS/LGp1Nl9QAOF8sF5ypvG38X+V/0FRSYoJqbjJkmwSA0IHVqhENF9
AJ8yHcxMXp3PVFA0I0670RbYrr9K1+KSHb8ipSV7/xNOeBcRNAScDXWHRbHAhwGF
ZUtBRUIT8wTrkqmcMeRchZjq3uaBgsmB52RWPBfsUOXEN5WVBTlZdkD7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7nGGl08kK1dXF+qU2JHvl2lZrzMB8GA1UdIwQY
MBaAFFclrdK/8+ZorhhVS+6/MaI6ad2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnlXdDByX3o1bWl1R0ZWTDdyOHhvanBwM2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYTk0ODktNmI4Zi00N2IwLWE2OWQt
YjY5ZTQ0MzQ5Mzk1LzEvVnlXdDByX3o1bWl1R0ZWTDdyOHhvanBwM2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYTk0ODktNmI4Zi00N2IwLWE2OWQtYjY5ZTQ0MzQ5Mzk1
LzEvVnlXdDByX3o1bWl1R0ZWTDdyOHhvanBwM2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNUak7Ql
bRRsQWrcRkKG9vvN8VG13DsOMMweRRxsLJOU0Icm4weTejpPJ4vvXwV72F6sLjKg
vGPb7FuPMavvgcgWeThyzIlIvc5PnD8tvi8jMoC4K14ZegfvYvzfpP5ULAy58CIG
4bptsc/4Gaik39wJfVHopWTN04N8g8Mr85+KzXs9nkjbMq/ICEMPUjmCgoE6U9Jn
4+7naeREtijJS945d9mb9xyftCUagYSBTU8OGlxme98zpq6n0JcAPzHUPNTRAII6
gMEy9cS1ZMFI5OukoE5rSFdYWz9lfN2ohXvetk7o0N3F+yFmGTDYt3ojeDMwKI2V
4kABXtp4w6TP8w==
-----END CERTIFICATE-----