Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File:                     ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier:          0duuw7C1Gz2ok7nl+cfmL9sJ2q7lhFxhn6z8ZGsC/cs=
Subject key identifier:   C5:0D:24:B4:A2:B1:81:5B:79:6B:ED:09:4E:AC:43:2D:E8:65:91:71
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer:       /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial:       01962F3D7B54FBDC9609E56CAB5875B50A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number:          118B
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: N5AcDiPzSbiRFJYuRA0PGsBeV/pJYxAW2vnueyz5sTg=)
                          2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:54:fb:dc:96:09:e5:6c:ab:58:75:b5:0a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=c50d24b4a2b1815b796bed094eac432de8659171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:62:c8:46:34:96:e5:53:da:7c:50:ac:01:
                    8f:de:f9:de:ab:5d:c4:2f:b7:df:16:69:6b:9e:b9:
                    d8:7f:99:79:a2:53:65:04:66:cc:d6:b2:b8:0c:54:
                    42:11:8b:79:e3:d7:3c:fe:b8:18:a7:81:f1:4e:5e:
                    4b:89:ba:4a:b9:32:45:93:f9:2a:16:b6:e5:b2:d7:
                    9a:92:dd:16:e7:9a:4f:2a:95:06:7f:1f:f8:6f:56:
                    34:d1:c0:ff:7c:13:c7:7e:77:8d:95:16:e3:bd:81:
                    7d:ac:3d:e5:40:40:12:7f:ef:95:bf:35:aa:12:99:
                    96:1e:ab:6c:39:90:4e:76:6b:c7:63:41:fa:85:f7:
                    7c:95:b1:64:a2:08:c9:cb:ed:36:d5:39:37:f0:29:
                    5e:ff:48:a2:80:55:e0:ca:fe:47:a0:2c:9f:b9:17:
                    e7:19:f7:ea:bd:d3:82:aa:3a:5f:9d:9a:94:65:74:
                    58:60:0f:2d:5c:27:07:8e:2f:b8:cd:7c:83:0d:23:
                    f4:3c:cd:e7:a6:9f:5d:e8:b2:cc:0e:3c:79:5d:45:
                    2b:c3:8b:c5:80:50:47:fa:50:02:40:e6:63:a4:db:
                    be:5a:06:af:61:82:69:fd:68:15:bc:35:99:9a:58:
                    d2:34:30:25:ed:a7:1a:74:d5:f2:a2:f7:be:08:a0:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0D:24:B4:A2:B1:81:5B:79:6B:ED:09:4E:AC:43:2D:E8:65:91:71
            X509v3 Authority Key Identifier:
                keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:46:92:65:07:7b:e1:10:d8:0b:a6:82:0b:db:02:9f:bf:0a:
         ae:c5:a5:b2:72:d7:87:83:0a:32:ce:b4:c2:ce:d5:a6:c0:45:
         4d:0b:02:dd:fa:08:a3:23:bf:8f:f8:eb:8c:08:f0:2c:6a:3c:
         10:71:89:21:3d:76:4f:9a:a4:51:a5:69:3a:72:7a:cc:9b:7f:
         42:da:2c:5e:6f:fb:76:38:44:b9:8a:d3:97:8a:92:22:44:2e:
         be:b8:ce:d4:a7:f6:4c:6d:ce:b5:58:44:85:de:21:fc:89:09:
         82:7e:88:ec:00:fe:1d:dc:d4:7c:93:cf:57:d5:79:1a:90:32:
         09:0b:55:76:6f:4d:1a:bf:13:ac:45:91:25:7e:cb:bd:4b:87:
         54:8c:83:f1:5f:db:3f:ee:5c:82:be:88:25:e9:6a:40:a0:32:
         dd:82:39:39:cb:d2:a1:37:b9:13:95:62:92:71:dc:96:3c:54:
         32:96:88:3d:59:0a:4b:22:b1:46:53:a2:c3:5d:53:a2:d6:72:
         78:0d:89:8a:d5:54:c5:35:c6:e2:6f:84:77:ee:88:6e:ae:7c:
         67:df:43:71:90:ef:d4:d2:85:3f:72:73:3e:02:27:c7:3e:3a:
         28:42:4f:52:f1:35:f1:98:e9:e1:19:08:7f:b8:46:e6:c7:ff:
         05:55:72:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXtU+9yWCeVsq1h1tQoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj
ZTBhNzkwHhcNMjUwNDEzMTMwMTIwWhcNMjUwNDE0MTMwMTIwWjAzMTEwLwYDVQQD
EyhjNTBkMjRiNGEyYjE4MTViNzk2YmVkMDk0ZWFjNDMyZGU4NjU5MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkBiyEY0luVT2nxQrAGP3vneq13E
L7ffFmlrnrnYf5l5olNlBGbM1rK4DFRCEYt549c8/rgYp4HxTl5LibpKuTJFk/kq
Frblsteakt0W55pPKpUGfx/4b1Y00cD/fBPHfneNlRbjvYF9rD3lQEASf++VvzWq
EpmWHqtsOZBOdmvHY0H6hfd8lbFkogjJy+021Tk38Cle/0iigFXgyv5HoCyfuRfn
GffqvdOCqjpfnZqUZXRYYA8tXCcHji+4zXyDDSP0PM3npp9d6LLMDjx5XUUrw4vF
gFBH+lACQOZjpNu+WgavYYJp/WgVvDWZmljSNDAl7acadNXyove+CKA5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUNJLSisYFbeWvtCU6sQy3oZZFxMB8GA1UdIwQY
MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt
NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5
LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEaSZQd7
4RDYC6aCC9sCn78KrsWlsnLXh4MKMs60ws7VpsBFTQsC3foIoyO/j/jrjAjwLGo8
EHGJIT12T5qkUaVpOnJ6zJt/QtosXm/7djhEuYrTl4qSIkQuvrjO1Kf2TG3OtVhE
hd4h/IkJgn6I7AD+HdzUfJPPV9V5GpAyCQtVdm9NGr8TrEWRJX7LvUuHVIyD8V/b
P+5cgr6IJelqQKAy3YI5OcvSoTe5E5ViknHcljxUMpaIPVkKSyKxRlOiw11TotZy
eA2JitVUxTXG4m+Ed+6Ibq58Z99DcZDv1NKFP3JzPgInxz46KEJPUvE18Zjp4RkI
f7hG5sf/BVVyBQ==
-----END CERTIFICATE-----