Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File:                     vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier:          1lMJoAhjVzoPVZKcns2nCszRagDveyEyI/tRscprLjY=
Subject key identifier:   03:9A:2D:D8:8D:CE:36:7D:C9:89:BF:49:D5:17:68:CE:CD:D5:57:84
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer:       /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial:       01962E6189B15DA1079B5D271DC477FCDCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: XCDQzXQNuXPAuxivqMtHiuRM5gBfkyj4TIqUNOk6k6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:b1:5d:a1:07:9b:5d:27:1d:c4:77:fc:dc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=039a2dd88dce367dc989bf49d51768cecdd55784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:4b:9f:f4:c9:29:4e:04:ef:50:ea:d7:98:
                    5d:29:54:49:b0:19:4b:91:b9:61:90:d6:d2:84:8e:
                    9a:9f:04:c8:a0:c1:18:76:1a:79:c4:3c:9e:21:01:
                    0f:07:cf:7c:4d:c2:81:80:a6:cc:29:81:01:15:c7:
                    1c:85:57:21:d9:67:2e:2c:55:7b:7a:5a:a0:84:6d:
                    94:5e:cd:2c:31:b6:cb:b5:6a:39:0b:f1:54:ff:8b:
                    05:92:41:ab:23:f9:2d:30:8c:79:8d:fd:fd:63:0a:
                    35:ed:58:88:4b:c0:ea:1d:f5:bd:f4:0a:bb:4d:01:
                    dd:6d:53:4a:7b:0e:41:e7:a4:c5:e4:68:20:72:9e:
                    a3:be:56:4e:9f:81:de:ab:79:02:41:fa:cf:ac:b1:
                    14:7e:32:df:f1:68:9b:09:36:ec:1a:7e:78:5e:68:
                    61:c7:70:b4:ea:51:b0:6c:03:5b:48:ee:c6:12:08:
                    53:0e:2a:e3:7a:8f:e1:f6:a9:d7:e1:4f:87:84:99:
                    48:3e:60:c2:cc:fc:20:2e:2c:7c:a7:49:68:de:af:
                    ea:cf:61:35:ca:6d:69:dd:e3:f3:df:dc:fe:4b:74:
                    31:6a:ba:f2:7e:b7:3c:a9:7b:84:4e:c4:ac:82:52:
                    fd:95:b4:94:c6:e9:b9:e0:9a:7d:41:36:52:50:c2:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:2D:D8:8D:CE:36:7D:C9:89:BF:49:D5:17:68:CE:CD:D5:57:84
            X509v3 Authority Key Identifier:
                keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bf:a7:06:d8:9c:29:0e:2f:1b:08:a0:40:57:10:f7:73:72:
         a6:9e:39:f8:44:19:f6:98:3b:01:92:eb:15:18:78:6d:45:1d:
         f0:28:c1:9d:ac:cf:c9:7d:88:04:6c:8a:34:f9:a4:57:b7:36:
         7f:61:18:85:f6:de:c6:b2:d0:c5:e1:d8:6d:bc:85:a8:3a:da:
         0c:a4:72:73:1a:cc:5d:d3:a0:32:ee:8c:1b:ee:76:f2:b7:0d:
         bd:b6:0f:e8:97:16:87:ce:54:58:bd:84:34:fa:95:74:69:b9:
         88:fe:30:44:b1:bb:1e:69:d4:81:d2:d9:8c:04:ad:9d:e7:b3:
         f0:60:0a:1c:2f:a5:84:28:08:b3:1b:28:9f:f1:ef:3e:9a:00:
         b2:a3:2d:0f:4b:ed:46:2c:54:c0:46:80:33:9d:6f:2a:8c:36:
         23:ca:77:a2:02:0a:35:7a:33:4e:ed:95:d2:41:db:f9:d7:29:
         51:ca:58:69:76:2c:f7:42:28:7d:5e:11:2d:a2:b5:e6:07:60:
         d8:6c:cd:18:98:7d:b6:68:ca:98:b9:86:a9:79:95:71:b4:4e:
         e2:bb:9c:1b:0a:fc:f6:16:05:d1:1c:13:a0:00:17:0a:d8:fa:
         b0:d1:fd:54:92:8f:f9:4a:1f:f7:fc:da:66:2c:8a:98:dd:61:
         d6:19:59:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYmxXaEHm10nHcR3/Ny+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNTg0NTU2MjI5MjhmNDRkZTljMTU1ZDcwNjhlMWQxMWI0
NDU0ZjEwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
EygwMzlhMmRkODhkY2UzNjdkYzk4OWJmNDlkNTE3NjhjZWNkZDU1Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumlLn/TJKU4E71Dq15hdKVRJsBlL
kblhkNbShI6anwTIoMEYdhp5xDyeIQEPB898TcKBgKbMKYEBFccchVch2WcuLFV7
elqghG2UXs0sMbbLtWo5C/FU/4sFkkGrI/ktMIx5jf39Ywo17ViIS8DqHfW99Aq7
TQHdbVNKew5B56TF5Gggcp6jvlZOn4Heq3kCQfrPrLEUfjLf8WibCTbsGn54Xmhh
x3C06lGwbANbSO7GEghTDirjeo/h9qnX4U+HhJlIPmDCzPwgLix8p0lo3q/qz2E1
ym1p3ePz39z+S3Qxarryfrc8qXuETsSsglL9lbSUxum54Jp9QTZSUMLfrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOaLdiNzjZ9yYm/SdUXaM7N1VeEMB8GA1UdIwQY
MBaAFL1YRVYiko9E3pwVXXBo4dEbRFTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xZGM5N2MtZWU2Ny00YzJiLTgwYmEt
MjkwODlkYTQwYzk5LzEvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xZGM5N2MtZWU2Ny00YzJiLTgwYmEtMjkwODlkYTQwYzk5
LzEvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr+nBtic
KQ4vGwigQFcQ93Nypp45+EQZ9pg7AZLrFRh4bUUd8CjBnazPyX2IBGyKNPmkV7c2
f2EYhfbexrLQxeHYbbyFqDraDKRycxrMXdOgMu6MG+528rcNvbYP6JcWh85UWL2E
NPqVdGm5iP4wRLG7HmnUgdLZjAStneez8GAKHC+lhCgIsxson/HvPpoAsqMtD0vt
RixUwEaAM51vKow2I8p3ogIKNXozTu2V0kHb+dcpUcpYaXYs90IofV4RLaK15gdg
2GzNGJh9tmjKmLmGqXmVcbRO4rucGwr89hYF0RwToAAXCtj6sNH9VJKP+Uof9/za
ZiyKmN1h1hlZ4g==
-----END CERTIFICATE-----