Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File:                     VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier:          5p3H5h99aHqINzxKtmz83LvjWT2i4rydFVwjI27FiRQ=
Subject key identifier:   04:30:A8:C0:5B:81:F6:1A:1C:E5:01:27:A2:5E:00:F7:2B:87:7A:CE
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer:       /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial:       01962ECFEEDD218964FF2622DA1C7AE17193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number:          0BE3
Signing time:             Sun 13 Apr 2025 11:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:41 +0000
Files and hashes:         1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: ChtYIS+BuWZof5X/FGdY4/YNhu6lOaqp9FF2FZR4gAc=)
                          2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ee:dd:21:89:64:ff:26:22:da:1c:7a:e1:71:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
        Validity
            Not Before: Apr 13 11:01:41 2025 GMT
            Not After : Apr 14 11:01:41 2025 GMT
        Subject: CN=0430a8c05b81f61a1ce50127a25e00f72b877ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:fa:65:a7:e7:5c:80:0a:97:6f:8d:cb:8f:
                    5b:a4:76:aa:03:e1:f2:62:39:73:0c:d9:cd:dd:dc:
                    17:c6:21:cb:60:1c:06:e6:63:2b:c7:03:84:9b:59:
                    a1:f0:62:c3:d5:7a:f5:49:c1:7b:41:b1:4c:57:47:
                    09:62:dc:56:26:7f:ed:c7:d2:19:5f:4a:3a:91:85:
                    58:53:90:4d:a5:8a:e7:b7:e7:fb:0e:09:17:35:3f:
                    78:48:6b:6a:3d:0f:71:5e:a6:b0:20:4f:6f:d3:02:
                    3a:d9:f1:9b:08:f1:22:cf:80:68:78:fd:d4:16:b4:
                    db:49:97:89:42:6d:ed:41:36:54:8a:05:d0:b9:16:
                    0e:33:8f:a0:bd:3a:99:2c:58:ea:02:6f:20:85:34:
                    cf:fd:27:3f:2b:8b:74:ac:86:45:97:13:9e:c9:52:
                    0e:85:08:8e:46:fc:d5:50:d5:a3:46:c9:34:c6:63:
                    69:63:00:2e:6c:8d:91:74:5f:61:98:2e:18:ea:6e:
                    ed:4e:b6:c9:8a:31:70:63:dd:b1:c3:6a:6c:12:df:
                    3c:fe:2f:f3:a3:90:de:13:bb:38:4b:23:95:74:e8:
                    7e:f6:9e:23:1c:72:34:cd:a7:0b:21:e3:3a:d7:6a:
                    fa:5f:71:7b:79:c9:b1:8a:1f:17:1c:fb:af:70:ac:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:30:A8:C0:5B:81:F6:1A:1C:E5:01:27:A2:5E:00:F7:2B:87:7A:CE
            X509v3 Authority Key Identifier:
                keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:03:55:8d:1c:1d:d9:f0:d0:5a:a8:bc:5a:80:c9:03:c6:
         02:6a:e2:18:66:61:ee:83:01:61:7a:47:ad:0a:cd:21:f1:c3:
         3c:82:06:b2:25:34:df:62:0e:af:5c:11:d0:d3:01:7b:e4:3e:
         e3:f0:f2:7d:e9:ec:42:48:9f:51:f5:ed:bf:a3:7e:b6:0c:7f:
         19:7e:61:0f:20:d3:94:7d:a4:37:16:56:41:c0:91:c7:40:34:
         43:b0:75:bf:1a:cc:ec:fa:06:13:c3:d8:8f:6f:c4:a5:81:d8:
         8d:0b:94:21:3e:ce:ff:95:b9:b4:17:32:bd:b3:ef:aa:2e:2c:
         56:4b:51:a1:74:2e:cb:88:73:69:c8:ae:90:18:e4:2d:52:99:
         46:f0:70:65:7f:a3:74:a4:f9:26:8a:13:14:71:e6:d0:37:31:
         c2:26:b9:d5:05:44:b0:a3:b3:27:ba:34:b4:49:bb:c0:aa:44:
         68:94:55:a3:5c:95:e1:4b:e7:52:ec:d2:64:9c:fc:6c:5b:52:
         11:44:96:16:10:d6:30:e1:6e:5e:9c:95:25:a6:a3:dc:1d:20:
         83:47:32:fe:83:30:51:35:74:96:0c:1d:9f:46:0a:57:fc:4e:
         51:27:7b:bc:46:a7:ca:99:4c:35:83:86:18:9a:3b:c4:78:53:
         b9:88:71:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+7dIYlk/yYi2hx64XGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTE0YmU2MTk3NTVlZWVlYjkxZmUyZjYyYTFkNGVlMDc4
NjE0OTYwHhcNMjUwNDEzMTEwMTQxWhcNMjUwNDE0MTEwMTQxWjAzMTEwLwYDVQQD
EygwNDMwYThjMDViODFmNjFhMWNlNTAxMjdhMjVlMDBmNzJiODc3YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnH6ZafnXIAKl2+Ny49bpHaqA+Hy
YjlzDNnN3dwXxiHLYBwG5mMrxwOEm1mh8GLD1Xr1ScF7QbFMV0cJYtxWJn/tx9IZ
X0o6kYVYU5BNpYrnt+f7DgkXNT94SGtqPQ9xXqawIE9v0wI62fGbCPEiz4BoeP3U
FrTbSZeJQm3tQTZUigXQuRYOM4+gvTqZLFjqAm8ghTTP/Sc/K4t0rIZFlxOeyVIO
hQiORvzVUNWjRsk0xmNpYwAubI2RdF9hmC4Y6m7tTrbJijFwY92xw2psEt88/i/z
o5DeE7s4SyOVdOh+9p4jHHI0zacLIeM612r6X3F7ecmxih8XHPuvcKx1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQwqMBbgfYaHOUBJ6JeAPcrh3rOMB8GA1UdIwQY
MBaAFFShS+YZdV7u65H+L2Kh1O4HhhSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAt
OGU5MDQ2NmJhZDM4LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAtOGU5MDQ2NmJhZDM4
LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0QDVY0c
Hdnw0FqovFqAyQPGAmriGGZh7oMBYXpHrQrNIfHDPIIGsiU032IOr1wR0NMBe+Q+
4/DyfensQkifUfXtv6N+tgx/GX5hDyDTlH2kNxZWQcCRx0A0Q7B1vxrM7PoGE8PY
j2/EpYHYjQuUIT7O/5W5tBcyvbPvqi4sVktRoXQuy4hzaciukBjkLVKZRvBwZX+j
dKT5JooTFHHm0Dcxwia51QVEsKOzJ7o0tEm7wKpEaJRVo1yV4UvnUuzSZJz8bFtS
EUSWFhDWMOFuXpyVJaaj3B0gg0cy/oMwUTV0lgwdn0YKV/xOUSd7vEanyplMNYOG
GJo7xHhTuYhxSg==
-----END CERTIFICATE-----