Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File:                     vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier:          Ro6s01g775Un7kxeqTwkKwhEtvLGrlj31KSEgvGQUSk=
Subject key identifier:   93:05:B5:18:2A:EB:C1:9B:53:C8:53:2F:6D:78:F6:95:BA:31:06:6D
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer:       /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial:       01962E98EA0F387D6F3E00F9889DCBC30698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number:          054D
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: ikI/JpEEyMJoPM/GwmT7C0gAXnDQec0XfiOIwdYfFOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ea:0f:38:7d:6f:3e:00:f9:88:9d:cb:c3:06:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=9305b5182aebc19b53c8532f6d78f695ba31066d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:cd:d7:7c:45:9d:ec:dc:d0:b8:8c:38:2d:
                    c6:59:79:99:2a:c5:11:fa:36:87:01:73:cd:6a:9c:
                    b2:5f:f6:13:29:49:8e:1a:f0:82:c8:2d:03:23:05:
                    d3:4f:03:e6:f9:ea:cf:25:81:c9:7d:be:89:77:5b:
                    dc:70:12:c0:19:3d:44:db:1d:30:fb:e7:d6:f1:69:
                    f2:f1:2f:29:dd:f5:84:58:16:05:ca:51:80:dd:cc:
                    d0:f7:f1:f5:8e:1e:44:05:8e:c2:99:54:9f:cf:19:
                    e9:ae:f5:7b:27:47:9a:e8:13:ad:9f:c4:e3:42:fc:
                    40:1e:ef:bc:22:a4:4b:95:73:5f:3e:51:fb:74:6c:
                    1d:2d:dc:f9:b3:1d:c3:35:72:b7:95:94:7e:53:dc:
                    6d:4d:77:34:1e:6c:0f:22:d2:8e:ec:e6:af:1d:fb:
                    8c:35:72:7a:5a:b0:85:8e:f7:81:5d:b5:88:1b:38:
                    29:48:14:e8:5e:d7:b0:41:ee:c9:db:75:4c:4d:5d:
                    ad:91:53:a4:59:df:cf:2d:c8:c9:30:9b:47:e5:5f:
                    f8:95:2f:c7:1d:81:a5:1d:e1:ff:cc:36:55:b3:e9:
                    52:2e:3a:70:f4:11:c7:2f:d7:ec:20:aa:71:a6:0c:
                    1c:c5:e9:39:34:6e:d0:96:59:17:4c:74:85:cd:5f:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:B5:18:2A:EB:C1:9B:53:C8:53:2F:6D:78:F6:95:BA:31:06:6D
            X509v3 Authority Key Identifier:
                keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:ce:fb:57:ab:1e:25:69:65:42:09:9b:22:5a:b6:cf:10:
         2f:72:73:a2:d7:7c:36:66:7c:a9:8a:8e:33:79:6c:43:28:34:
         bd:26:c1:9d:a2:db:0e:ae:e5:cf:90:71:8e:3e:2a:df:b1:7c:
         23:f8:4c:94:aa:71:c6:c8:49:d9:22:66:2c:30:6e:cb:92:fd:
         f7:0a:de:b2:fa:11:97:ea:e7:83:c8:ac:57:35:e7:df:95:cd:
         4a:95:13:2d:a5:cb:0e:1f:a8:b4:08:ba:75:a7:52:21:72:bb:
         cc:89:7e:90:ea:b2:85:f5:6d:05:46:c6:e0:d9:43:e5:c9:a7:
         96:83:47:3f:6b:98:98:db:5a:0c:e4:f1:1b:08:00:00:02:2a:
         08:4d:b8:88:9c:3a:a5:b2:f8:75:ff:12:cc:67:49:76:4e:8b:
         63:e2:d9:a6:70:27:ba:6f:6d:39:0a:ba:8b:fc:4a:c0:05:6c:
         75:35:a0:bf:63:32:1f:8e:ba:b4:b4:78:4a:6c:e0:90:13:ff:
         cd:89:4f:07:8d:70:97:47:45:53:a5:cf:77:0b:3d:d2:5b:e0:
         29:69:53:4c:2e:24:59:9d:7b:43:d0:11:7f:32:37:a5:7a:53:
         31:b7:b5:de:63:11:a9:54:4b:00:ff:82:94:95:70:1f:e8:7b:
         43:4b:2d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOoPOH1vPgD5iJ3LwwaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzIyNjMxZTJlYjdlYWJmYjVlZGI0ZmNiMGFiOGM5OTY4
MjNjNDgwHhcNMjUwNDEzMTAwMTM1WhcNMjUwNDE0MTAwMTM1WjAzMTEwLwYDVQQD
Eyg5MzA1YjUxODJhZWJjMTliNTNjODUzMmY2ZDc4ZjY5NWJhMzEwNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiDN13xFnezc0LiMOC3GWXmZKsUR
+jaHAXPNapyyX/YTKUmOGvCCyC0DIwXTTwPm+erPJYHJfb6Jd1vccBLAGT1E2x0w
++fW8Wny8S8p3fWEWBYFylGA3czQ9/H1jh5EBY7CmVSfzxnprvV7J0ea6BOtn8Tj
QvxAHu+8IqRLlXNfPlH7dGwdLdz5sx3DNXK3lZR+U9xtTXc0HmwPItKO7OavHfuM
NXJ6WrCFjveBXbWIGzgpSBToXtewQe7J23VMTV2tkVOkWd/PLcjJMJtH5V/4lS/H
HYGlHeH/zDZVs+lSLjpw9BHHL9fsIKpxpgwcxek5NG7QllkXTHSFzV/YbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMFtRgq68GbU8hTL2149pW6MQZtMB8GA1UdIwQY
MBaAFLwyJjHi636r+17bT8sKuMmWgjxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEt
MjllZGZhYjM5ZjQ5LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEtMjllZGZhYjM5ZjQ5
LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrfO+1er
HiVpZUIJmyJats8QL3Jzotd8NmZ8qYqOM3lsQyg0vSbBnaLbDq7lz5Bxjj4q37F8
I/hMlKpxxshJ2SJmLDBuy5L99wresvoRl+rng8isVzXn35XNSpUTLaXLDh+otAi6
dadSIXK7zIl+kOqyhfVtBUbG4NlD5cmnloNHP2uYmNtaDOTxGwgAAAIqCE24iJw6
pbL4df8SzGdJdk6LY+LZpnAnum9tOQq6i/xKwAVsdTWgv2MyH466tLR4SmzgkBP/
zYlPB41wl0dFU6XPdws90lvgKWlTTC4kWZ17Q9ARfzI3pXpTMbe13mMRqVRLAP+C
lJVwH+h7Q0stTw==
-----END CERTIFICATE-----