Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          jch634X1AzliZ0hzb2hvX1q8vrr8BoeE5k8l4/zTkx8=
Subject key identifier:   E2:9B:C5:73:75:F8:0E:46:91:EA:FE:3C:70:B2:FB:FF:62:42:4C:64
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       01962E61CA3C8CF58FFCA2BB030841394C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: 4sXMh4QMlQK2/ynydVPiRZUycDQgPs7YFF45+IZNsbE=)
                          3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
                          4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:3c:8c:f5:8f:fc:a2:bb:03:08:41:39:4c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=e29bc57375f80e4691eafe3c70b2fbff62424c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:f8:08:d6:65:75:a8:7c:01:12:14:6f:f7:
                    99:36:23:9a:12:5f:3a:d3:9b:22:98:3f:b1:fb:75:
                    41:e9:55:c8:06:7c:ff:12:f4:6a:2d:c9:d1:55:24:
                    8d:a3:5f:81:9a:e8:4f:c0:00:ad:5c:7b:0e:4f:12:
                    9a:87:7c:3b:e7:c8:a3:c5:44:64:eb:b6:e4:fe:28:
                    24:4f:23:41:2b:ea:9a:20:89:79:12:5a:65:73:e8:
                    76:48:3b:04:02:cd:69:12:49:aa:05:b4:91:e4:04:
                    2d:5a:73:c7:cb:1a:11:ff:0c:4a:db:00:51:9d:0d:
                    fe:92:6d:bd:53:5f:46:e5:5c:72:d9:89:51:13:7a:
                    db:d2:55:28:c3:6d:a4:6d:05:44:32:7e:15:e4:99:
                    d1:b8:c8:98:92:db:a4:2f:56:5e:f5:e6:06:4a:33:
                    6a:f5:ec:e0:09:3b:41:ce:56:45:07:c9:a2:ec:2f:
                    17:51:21:4b:19:6b:24:b2:01:0f:ca:11:5a:16:49:
                    c1:09:25:02:de:8e:5c:70:4f:d5:51:d3:b7:df:dc:
                    10:c0:f6:39:b6:f2:f6:f4:59:a9:fc:3d:cd:7b:6d:
                    09:40:bb:ce:12:13:33:26:1c:a0:ea:b5:6d:f4:ae:
                    55:78:c0:d1:96:d7:23:0b:fe:c2:27:f6:b2:ef:8e:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:C5:73:75:F8:0E:46:91:EA:FE:3C:70:B2:FB:FF:62:42:4C:64
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:12:31:6f:5d:86:ad:ad:08:a1:ef:6f:0b:e6:47:4c:75:
         dd:f6:79:1d:e6:9b:c6:bd:b9:76:b6:05:49:4c:b9:06:9a:8e:
         12:7a:9d:86:fa:7e:20:a8:85:f6:2b:1e:84:da:a4:de:a3:89:
         d6:b4:1a:64:5b:37:77:11:3b:13:28:f1:bb:3e:08:a3:48:39:
         3c:94:12:52:22:cc:b2:4b:74:fb:88:4d:30:6c:ca:4f:55:15:
         cf:56:3e:05:f1:e1:e4:98:27:39:d0:15:65:3c:2a:ab:ff:12:
         e3:7c:9a:32:6b:96:26:7d:a8:21:f9:f4:a7:d6:fc:18:43:67:
         15:9d:0b:03:9d:ad:0c:c4:8b:77:71:42:46:2f:08:0a:3a:23:
         3d:9a:a6:8d:74:f8:25:24:b6:8e:26:4b:5e:57:b8:76:e1:f5:
         2d:bb:89:b7:d9:f1:b6:47:06:21:49:86:fc:c1:cc:90:89:65:
         55:3c:ec:32:f1:7e:9a:ea:52:34:3f:83:ac:7a:98:ff:37:d5:
         f1:66:1e:9b:93:55:cd:54:cf:f9:5e:42:68:e0:fa:e5:6f:0b:
         04:97:77:04:fd:a2:6d:41:66:c4:d2:f0:d7:3a:88:2d:0d:a7:
         90:86:06:1a:57:e8:4d:22:88:34:ad:af:ac:8e:da:66:8f:f8:
         37:86:22:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYco8jPWP/KK7AwhBOUwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh
YWZjZWQwHhcNMjUwNDEzMDkwMTIyWhcNMjUwNDE0MDkwMTIyWjAzMTEwLwYDVQQD
EyhlMjliYzU3Mzc1ZjgwZTQ2OTFlYWZlM2M3MGIyZmJmZjYyNDI0YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAn4CNZldah8ARIUb/eZNiOaEl86
05simD+x+3VB6VXIBnz/EvRqLcnRVSSNo1+BmuhPwACtXHsOTxKah3w758ijxURk
67bk/igkTyNBK+qaIIl5Elplc+h2SDsEAs1pEkmqBbSR5AQtWnPHyxoR/wxK2wBR
nQ3+km29U19G5Vxy2YlRE3rb0lUow22kbQVEMn4V5JnRuMiYktukL1Ze9eYGSjNq
9ezgCTtBzlZFB8mi7C8XUSFLGWsksgEPyhFaFknBCSUC3o5ccE/VUdO339wQwPY5
tvL29Fmp/D3Ne20JQLvOEhMzJhyg6rVt9K5VeMDRltcjC/7CJ/ay744OLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKbxXN1+A5Gker+PHCy+/9iQkxkMB8GA1UdIwQY
MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt
MWIyNDQ4NGU1NWVjLzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj
LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsMSMW9d
hq2tCKHvbwvmR0x13fZ5Heabxr25drYFSUy5BpqOEnqdhvp+IKiF9isehNqk3qOJ
1rQaZFs3dxE7Eyjxuz4Io0g5PJQSUiLMskt0+4hNMGzKT1UVz1Y+BfHh5JgnOdAV
ZTwqq/8S43yaMmuWJn2oIfn0p9b8GENnFZ0LA52tDMSLd3FCRi8ICjojPZqmjXT4
JSS2jiZLXle4duH1LbuJt9nxtkcGIUmG/MHMkIllVTzsMvF+mupSND+DrHqY/zfV
8WYem5NVzVTP+V5CaOD65W8LBJd3BP2ibUFmxNLw1zqILQ2nkIYGGlfoTSKINK2v
rI7aZo/4N4YiNQ==
-----END CERTIFICATE-----