Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File:                     RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier:          CksguxsmPzLra8Z/UMlDPSDF6761Mxui2DPxwwIk9XM=
Subject key identifier:   E4:7A:3B:98:73:15:67:C3:4C:53:05:AD:ED:2C:D5:3D:C2:0B:CC:B6
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer:       /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial:       01962E99572A29A570D38A35D880533E5C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number:          05D1
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
                          2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: e1w24E2snx00ENiEs2y4YWlwm+bbOxtzBTqi2gEYmw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:2a:29:a5:70:d3:8a:35:d8:80:53:3e:5c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=e47a3b98731567c34c5305aded2cd53dc20bccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:16:77:fb:35:e9:1f:a7:0e:07:b9:53:31:
                    72:b9:de:9a:6b:11:8c:f9:b2:83:83:5b:7b:81:91:
                    96:d4:2d:67:b4:ff:d2:1c:fa:85:da:15:dd:cf:c7:
                    77:d5:18:83:bf:64:37:e9:25:40:2b:c0:b7:93:5a:
                    ee:b4:e8:fd:9f:55:27:0a:2a:83:d8:e4:e3:30:fa:
                    b2:a5:1e:20:7e:98:d0:99:f4:95:88:c8:c9:dc:53:
                    da:6b:8e:53:d0:1a:d3:1e:d1:ce:b9:24:4e:e5:e6:
                    f5:d4:cb:0d:c9:4f:52:5c:82:72:93:1c:ab:fd:d9:
                    17:17:58:a5:9f:21:2e:91:30:a4:51:fe:b1:49:26:
                    62:b2:25:cb:ad:36:e5:a2:2b:57:0c:17:3c:2b:ed:
                    dc:45:63:35:ee:ec:77:27:57:f1:b4:41:5c:33:41:
                    ca:95:27:0c:ad:b0:5f:87:3c:6d:40:13:f7:42:4c:
                    e3:c1:5d:9b:41:26:24:29:de:11:d2:c0:99:e1:6b:
                    4c:5f:04:80:6d:00:e6:8f:9d:83:c1:c6:08:5f:71:
                    3c:e1:02:4b:89:c7:f0:26:b5:0f:7f:1f:7a:40:bb:
                    2a:fe:19:69:13:a8:34:6b:16:f1:e2:c0:eb:fb:b5:
                    c9:64:17:8f:fe:d0:f7:51:d8:9e:0b:ee:cd:8a:53:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:3B:98:73:15:67:C3:4C:53:05:AD:ED:2C:D5:3D:C2:0B:CC:B6
            X509v3 Authority Key Identifier:
                keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:45:dd:24:68:d5:4a:9b:e6:f6:8a:10:8d:48:22:5a:7f:94:
         7b:13:44:da:c3:8f:9c:87:a3:a4:45:43:f4:7c:f8:2b:cd:d6:
         8c:03:8d:25:02:db:fc:b3:82:70:6f:3a:5d:8e:bc:bc:af:d0:
         34:41:b0:2b:9e:26:dc:f5:75:c5:68:f0:79:07:65:a2:7c:87:
         06:f9:09:79:48:8c:30:a5:76:1b:cb:f4:db:ed:dc:18:ba:0e:
         8b:84:3a:4e:9e:52:71:e9:4a:60:ec:99:50:d2:95:7e:03:0c:
         30:1b:39:b5:70:c5:2f:c6:32:82:1f:25:82:f4:74:82:03:1d:
         ca:c7:73:7b:dd:76:4c:90:3a:73:76:bb:c3:45:ef:22:19:5e:
         ae:01:7b:fb:4a:a1:0a:43:28:30:dd:24:41:fe:63:cb:f1:d9:
         ca:95:f6:e7:32:c4:2e:88:eb:03:5b:17:95:36:aa:6c:17:aa:
         7f:37:3e:8b:14:2a:1b:e7:56:bb:c8:fe:56:2e:fb:59:bf:dc:
         e1:9d:2c:42:f4:36:18:c7:eb:26:58:88:b4:6c:c1:2a:c3:26:
         95:71:60:10:fe:ef:8a:75:74:8a:30:ac:ec:93:10:1c:21:c3:
         83:4e:83:ce:a1:e1:6b:fd:34:ae:a1:91:c9:bb:90:87:cb:e5:
         71:cf:e8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVcqKaVw04o12IBTPlxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhlNDdhM2I5ODczMTU2N2MzNGM1MzA1YWRlZDJjZDUzZGMyMGJjY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8Wd/s16R+nDge5UzFyud6aaxGM
+bKDg1t7gZGW1C1ntP/SHPqF2hXdz8d31RiDv2Q36SVAK8C3k1rutOj9n1UnCiqD
2OTjMPqypR4gfpjQmfSViMjJ3FPaa45T0BrTHtHOuSRO5eb11MsNyU9SXIJykxyr
/dkXF1ilnyEukTCkUf6xSSZisiXLrTbloitXDBc8K+3cRWM17ux3J1fxtEFcM0HK
lScMrbBfhzxtQBP3QkzjwV2bQSYkKd4R0sCZ4WtMXwSAbQDmj52DwcYIX3E84QJL
icfwJrUPfx96QLsq/hlpE6g0axbx4sDr+7XJZBeP/tD3UdieC+7NilO6GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR6O5hzFWfDTFMFre0s1T3CC8y2MB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEXdJGjV
Spvm9ooQjUgiWn+UexNE2sOPnIejpEVD9Hz4K83WjAONJQLb/LOCcG86XY68vK/Q
NEGwK54m3PV1xWjweQdlonyHBvkJeUiMMKV2G8v02+3cGLoOi4Q6Tp5ScelKYOyZ
UNKVfgMMMBs5tXDFL8Yygh8lgvR0ggMdysdze912TJA6c3a7w0XvIhlergF7+0qh
CkMoMN0kQf5jy/HZypX25zLELojrA1sXlTaqbBeqfzc+ixQqG+dWu8j+Vi77Wb/c
4Z0sQvQ2GMfrJliItGzBKsMmlXFgEP7vinV0ijCs7JMQHCHDg06DzqHha/00rqGR
ybuQh8vlcc/ofA==
-----END CERTIFICATE-----