Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          nT/MQR6Dhsc791rD6+StLfGGAYDVZERyDggSXZTI1uk=
Subject key identifier:   47:15:63:C2:82:67:4E:31:65:83:00:C5:00:BA:9F:0B:AF:24:9E:40
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       01962FAB938D672DC04BF8841A188939F779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          09FA
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=)
                          2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: JMmgqa7NtbGT+W3FRpQWlYaJzzqJ9XJE1BZDJSjJ8Ss=)
                          4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=)
                          5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=)
                          6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=)
                          7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:8d:67:2d:c0:4b:f8:84:1a:18:89:39:f7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=471563c282674e31658300c500ba9f0baf249e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:a4:a0:4b:85:fd:88:57:5d:03:69:16:3f:
                    b1:29:71:27:16:e8:c3:eb:ce:f4:64:07:09:e5:28:
                    87:fc:7f:68:b9:9e:9d:82:36:0e:37:15:97:4c:b7:
                    6e:2e:fe:ea:3c:50:b0:3c:d2:af:ba:3c:5e:50:c1:
                    79:9c:e0:b9:f9:4e:05:4f:27:dc:96:28:21:35:53:
                    32:6a:5d:47:91:9d:9e:55:77:d2:b6:29:d1:29:28:
                    e4:ca:03:2e:21:ae:ae:44:f5:64:40:20:f0:fc:63:
                    b0:8f:97:54:66:a6:0a:67:4f:35:9a:2a:26:ea:fa:
                    90:bc:25:f2:ce:ab:48:7c:a0:2d:f8:16:52:61:37:
                    6c:18:64:a5:ce:71:9e:49:fa:05:ad:7f:c6:a1:ee:
                    68:bf:39:87:25:3c:21:80:37:b4:4b:a9:e6:e2:e2:
                    7a:da:a0:5b:b1:8f:5a:56:ba:6d:d8:ff:1b:e0:08:
                    95:f0:c0:94:99:7d:55:a8:23:db:03:d1:c7:d7:36:
                    95:91:9a:fb:9c:f5:11:d1:c6:88:ba:e5:c6:22:d3:
                    17:bd:4c:87:23:05:cc:14:86:bd:45:1d:d7:53:8e:
                    9d:28:00:25:58:aa:b3:20:8d:d3:45:bf:23:3a:ae:
                    98:25:d7:55:d9:bc:96:5b:8b:5e:b8:76:1b:fa:78:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:63:C2:82:67:4E:31:65:83:00:C5:00:BA:9F:0B:AF:24:9E:40
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:da:05:f3:df:27:b9:ff:81:5a:b2:e7:9d:d2:7d:82:1c:
         87:8b:a3:00:43:c5:c3:cb:63:2a:0e:98:fa:78:0f:e5:62:cd:
         05:fe:01:81:d1:8f:81:4b:a8:65:cd:c1:d4:a6:82:f1:40:3c:
         7c:7e:e0:4b:df:c6:75:dd:b9:fc:5f:14:39:f8:33:4b:d9:b2:
         f8:5e:5c:56:6c:f4:eb:f1:eb:9d:51:48:bb:5f:53:51:a7:e7:
         19:de:fe:ef:8c:c5:0b:ef:de:bf:c5:53:f1:69:05:ac:a7:6f:
         69:fb:b8:05:6f:a0:4d:02:03:85:e4:cb:77:bf:9a:97:00:57:
         9c:59:24:62:77:4f:c0:29:a5:69:d5:39:6f:05:3a:c1:2a:84:
         0c:e7:1e:90:16:e0:8a:dd:39:04:99:43:5a:39:f2:58:72:41:
         7f:77:c7:48:42:b4:0c:95:ef:53:12:5f:de:0a:e8:88:05:75:
         f8:77:0b:25:e8:4d:8f:98:8f:2b:5e:1d:ea:28:ca:6c:53:90:
         91:a1:42:91:1b:69:ab:2a:6e:35:c0:75:44:32:90:63:0b:f1:
         94:eb:4c:3b:eb:b7:a1:66:8c:5a:ac:dc:3a:79:8e:be:bc:bb:
         29:34:b1:d7:f8:a4:46:6c:3a:20:3c:f1:b8:9d:c2:d1:aa:c8:
         d4:c7:72:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5ONZy3AS/iEGhiJOfd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
Eyg0NzE1NjNjMjgyNjc0ZTMxNjU4MzAwYzUwMGJhOWYwYmFmMjQ5ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wikoEuF/YhXXQNpFj+xKXEnFujD
6870ZAcJ5SiH/H9ouZ6dgjYONxWXTLduLv7qPFCwPNKvujxeUMF5nOC5+U4FTyfc
lighNVMyal1HkZ2eVXfStinRKSjkygMuIa6uRPVkQCDw/GOwj5dUZqYKZ081miom
6vqQvCXyzqtIfKAt+BZSYTdsGGSlznGeSfoFrX/Goe5ovzmHJTwhgDe0S6nm4uJ6
2qBbsY9aVrpt2P8b4AiV8MCUmX1VqCPbA9HH1zaVkZr7nPUR0caIuuXGItMXvUyH
IwXMFIa9RR3XU46dKAAlWKqzII3TRb8jOq6YJddV2byWW4teuHYb+ngL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcVY8KCZ04xZYMAxQC6nwuvJJ5AMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS27aBfPf
J7n/gVqy553SfYIch4ujAEPFw8tjKg6Y+ngP5WLNBf4BgdGPgUuoZc3B1KaC8UA8
fH7gS9/Gdd25/F8UOfgzS9my+F5cVmz06/HrnVFIu19TUafnGd7+74zFC+/ev8VT
8WkFrKdvafu4BW+gTQIDheTLd7+alwBXnFkkYndPwCmladU5bwU6wSqEDOcekBbg
it05BJlDWjnyWHJBf3fHSEK0DJXvUxJf3groiAV1+HcLJehNj5iPK14d6ijKbFOQ
kaFCkRtpqypuNcB1RDKQYwvxlOtMO+u3oWaMWqzcOnmOvry7KTSx1/ikRmw6IDzx
uJ3C0arI1MdyrQ==
-----END CERTIFICATE-----