Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File:                     vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier:          +8QYsEPeYJ/IoO/B4hVsLowaKdQFJoQgc7dbp091p5g=
Subject key identifier:   8B:64:16:75:31:F7:A0:C0:A1:E3:33:A5:65:24:E0:9F:DC:C8:DB:9D
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer:       /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial:       01962E988DABAEEF0FC89A65220AD3650E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number:          09D0
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
                          2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: J/9rY4Shw1+8mPspUYBcUTa7fydu62yg5qT+atBzDfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:ab:ae:ef:0f:c8:9a:65:22:0a:d3:65:0e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=8b64167531f7a0c0a1e333a56524e09fdcc8db9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:29:0f:62:29:30:26:c7:0f:8f:42:6a:53:
                    f5:70:cd:ec:1a:74:47:11:38:d2:a0:dd:fc:a7:9e:
                    a6:15:1d:c3:43:b4:e8:c1:71:d7:0c:17:0c:74:0a:
                    d2:36:dc:9d:26:9f:ab:04:88:53:b9:40:58:5a:7b:
                    7f:34:46:34:97:c3:ba:96:b2:9e:99:12:b2:00:54:
                    9f:b9:34:ff:06:fe:67:4b:9c:56:b4:ca:be:32:8d:
                    90:4a:21:18:4b:cb:2b:61:1c:c4:42:b6:4d:0c:3e:
                    49:87:9d:7f:cd:b2:d9:ce:59:06:90:f7:33:9f:d4:
                    e8:a0:ee:f4:5c:93:b8:37:36:88:5a:9a:4b:03:9e:
                    5c:88:fd:1e:49:e1:c2:6a:cf:21:2c:8a:17:31:3b:
                    43:6e:e5:50:a7:c5:4e:4b:e0:d0:8a:74:e0:e0:7a:
                    64:c4:70:4b:4e:aa:56:c0:d5:de:f2:9d:77:2f:8a:
                    8a:d8:c9:da:c8:dd:e3:10:f6:de:90:80:73:d5:04:
                    35:89:bd:cd:95:2d:81:24:4e:a1:56:c5:40:51:ee:
                    b2:c5:ff:0c:c4:c4:5e:70:cf:dd:bb:2e:b8:68:e4:
                    27:8b:63:49:e9:15:f1:13:97:62:fa:a1:30:c7:55:
                    ec:26:54:a2:79:c4:a2:d8:70:9b:c9:16:46:bb:de:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:16:75:31:F7:A0:C0:A1:E3:33:A5:65:24:E0:9F:DC:C8:DB:9D
            X509v3 Authority Key Identifier:
                keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:7b:d0:01:a6:41:41:86:81:7c:4f:8c:27:3d:67:a9:eb:f2:
         31:e5:b7:db:5a:f1:8a:d0:3e:dc:b5:de:e7:4e:0d:64:38:b0:
         26:ca:d8:26:c9:b8:59:66:cd:d8:ac:52:ed:1b:04:de:6b:e9:
         bb:80:ac:42:ef:bc:95:87:c5:c5:7c:5f:c8:d2:00:4a:ba:76:
         80:c6:4f:6b:8d:3b:1b:43:3d:72:dc:16:df:ef:fa:53:bd:56:
         d0:58:e6:40:19:5a:bc:69:bf:b7:f2:78:10:d3:87:f4:06:c3:
         e5:51:ee:4f:ff:32:0d:56:ea:e7:0b:90:61:c7:aa:04:17:f5:
         35:30:60:0b:5b:2b:43:50:86:51:37:e5:5d:b4:8d:ba:a9:4f:
         2d:56:d9:34:70:cf:1d:df:d2:77:c3:7e:28:cb:11:81:f8:7a:
         ee:47:15:24:7f:1a:17:dd:ab:58:35:fc:ee:1a:35:ab:19:f4:
         83:de:cf:fb:05:d6:ba:1e:f6:32:16:7a:6d:d4:bb:86:a2:7f:
         1c:39:41:ed:92:ea:59:70:c1:db:c2:1a:e9:e6:bd:c0:f5:81:
         bb:67:12:82:db:37:9c:85:89:28:f2:86:4f:cd:f5:d5:17:62:
         7c:60:4b:3a:38:6f:0e:3a:e2:09:e3:74:83:0a:8b:ed:1e:23:
         57:32:9b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumI2rru8PyJplIgrTZQ4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy
ZDQyMzkwHhcNMjUwNDEzMTAwMTExWhcNMjUwNDE0MTAwMTExWjAzMTEwLwYDVQQD
Eyg4YjY0MTY3NTMxZjdhMGMwYTFlMzMzYTU2NTI0ZTA5ZmRjYzhkYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7cpD2IpMCbHD49CalP1cM3sGnRH
ETjSoN38p56mFR3DQ7TowXHXDBcMdArSNtydJp+rBIhTuUBYWnt/NEY0l8O6lrKe
mRKyAFSfuTT/Bv5nS5xWtMq+Mo2QSiEYS8srYRzEQrZNDD5Jh51/zbLZzlkGkPcz
n9TooO70XJO4NzaIWppLA55ciP0eSeHCas8hLIoXMTtDbuVQp8VOS+DQinTg4Hpk
xHBLTqpWwNXe8p13L4qK2MnayN3jEPbekIBz1QQ1ib3NlS2BJE6hVsVAUe6yxf8M
xMRecM/duy64aOQni2NJ6RXxE5di+qEwx1XsJlSiecSi2HCbyRZGu96bkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItkFnUx96DAoeMzpWUk4J/cyNudMB8GA1UdIwQY
MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt
ZDBiOWRjM2FjYTIzLzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz
LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHvQAaZB
QYaBfE+MJz1nqevyMeW321rxitA+3LXe504NZDiwJsrYJsm4WWbN2KxS7RsE3mvp
u4CsQu+8lYfFxXxfyNIASrp2gMZPa407G0M9ctwW3+/6U71W0FjmQBlavGm/t/J4
ENOH9AbD5VHuT/8yDVbq5wuQYceqBBf1NTBgC1srQ1CGUTflXbSNuqlPLVbZNHDP
Hd/Sd8N+KMsRgfh67kcVJH8aF92rWDX87ho1qxn0g97P+wXWuh72MhZ6bdS7hqJ/
HDlB7ZLqWXDB28Ia6ea9wPWBu2cSgts3nIWJKPKGT8311RdifGBLOjhvDjriCeN0
gwqL7R4jVzKbrg==
-----END CERTIFICATE-----