Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          Mz1Cnu5ReuqDpVv4qlw8vk/uf8wrLpdaioU4Oo6X4xw=
Subject key identifier:   84:CD:AC:41:57:A3:A1:74:C5:67:80:EF:EB:69:A1:A6:4F:C7:A0:70
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       01962E619B4551BCDDEF8E75ED7F26CF5B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          0D14
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: rIq6IVgsC2JZrgslKAcXn2ce4PCrVXmG68cEPoKBtn0=)
                          2: hLQXaatH7tOfK30W86b9zuTHKXk.roa (hash: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9b:45:51:bc:dd:ef:8e:75:ed:7f:26:cf:5b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=84cdac4157a3a174c56780efeb69a1a64fc7a070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:f7:14:c9:8b:90:7a:3e:10:cd:cd:b1:00:
                    9e:73:17:0f:56:9a:1d:bd:80:40:71:a5:e0:2f:da:
                    b1:af:e9:c2:1e:16:d5:64:c1:7b:c4:e0:85:82:9d:
                    7a:69:7c:bf:fd:38:2d:55:82:fa:bf:26:e2:d1:80:
                    66:1d:a0:f2:c2:eb:aa:ff:b3:79:03:8f:d2:31:e3:
                    9c:c5:13:3b:ef:0a:f2:7f:87:ed:4d:ab:c1:5d:b7:
                    4f:e4:0b:d2:5c:cd:dc:83:53:a2:8e:d2:cd:66:8f:
                    ac:05:c8:80:87:09:13:fb:0e:18:3e:93:67:27:49:
                    47:37:7d:c9:30:b2:e4:d8:86:a7:60:22:b5:1e:4e:
                    7d:92:86:9f:8a:ea:84:44:e3:1d:54:01:5c:f7:01:
                    91:c6:78:2b:01:8c:15:ab:27:03:b7:b8:51:8e:93:
                    36:e2:78:ae:bd:d0:17:5c:27:a3:1d:90:6f:58:b9:
                    0f:b3:30:68:91:68:cd:b6:39:a4:5d:ba:28:68:f5:
                    d9:49:1c:db:bb:82:31:f4:fa:89:4c:7b:6e:35:f6:
                    3e:86:a4:41:f2:46:09:be:da:f0:85:b0:9d:4a:31:
                    88:27:32:ec:f2:48:d8:09:5c:ae:fa:be:6c:f5:9e:
                    e2:52:46:48:ca:35:94:6f:d6:06:60:db:d6:cb:1a:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:AC:41:57:A3:A1:74:C5:67:80:EF:EB:69:A1:A6:4F:C7:A0:70
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:90:0e:aa:6a:42:20:cd:4f:9c:57:3c:8b:0f:40:23:98:c9:
         4c:2b:6a:1b:4a:14:db:bc:6e:f6:b8:73:73:90:61:3f:df:ee:
         48:96:75:97:21:85:0b:3e:40:6e:70:14:8f:81:46:78:7e:0b:
         2e:2a:c7:91:06:7a:3f:77:b3:e8:3e:d6:b2:3c:31:8d:dc:38:
         91:34:b5:68:d9:b1:69:33:19:cb:c8:f8:18:d3:a4:be:45:91:
         78:30:b4:f6:0e:29:ef:96:65:60:39:2d:86:d7:f5:4d:90:fb:
         8f:1f:af:df:f4:50:66:7a:39:dc:1d:18:cc:73:45:8b:ee:38:
         5a:73:af:7d:14:9d:cb:b8:7f:32:e8:a5:df:81:67:08:a3:cb:
         0c:38:36:ba:c6:f1:89:5b:e7:c9:a4:bc:44:0d:74:89:50:e9:
         a8:73:86:c5:ec:b4:ed:e4:4f:ea:de:a0:7b:3d:3a:df:1e:90:
         14:ea:46:5c:26:38:33:40:ad:b1:67:ac:ab:5a:4f:26:20:04:
         51:20:a9:f6:95:c1:b0:6b:7d:45:85:83:0a:d6:aa:1a:21:b0:
         40:c8:9a:49:b7:79:69:52:66:ac:85:8b:9e:b1:e7:d8:92:f5:
         dd:da:10:92:fe:76:8b:36:a0:84:93:88:2a:27:b2:8f:f8:a2:
         5b:db:ae:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZtFUbzd74517X8mz1uDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0
NGExOWYwHhcNMjUwNDEzMDkwMTEwWhcNMjUwNDE0MDkwMTEwWjAzMTEwLwYDVQQD
Eyg4NGNkYWM0MTU3YTNhMTc0YzU2NzgwZWZlYjY5YTFhNjRmYzdhMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcT3FMmLkHo+EM3NsQCecxcPVpod
vYBAcaXgL9qxr+nCHhbVZMF7xOCFgp16aXy//TgtVYL6vybi0YBmHaDywuuq/7N5
A4/SMeOcxRM77wryf4ftTavBXbdP5AvSXM3cg1OijtLNZo+sBciAhwkT+w4YPpNn
J0lHN33JMLLk2IanYCK1Hk59koafiuqEROMdVAFc9wGRxngrAYwVqycDt7hRjpM2
4niuvdAXXCejHZBvWLkPszBokWjNtjmkXbooaPXZSRzbu4Ix9PqJTHtuNfY+hqRB
8kYJvtrwhbCdSjGIJzLs8kjYCVyu+r5s9Z7iUkZIyjWUb9YGYNvWyxqjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITNrEFXo6F0xWeA7+tpoaZPx6BwMB8GA1UdIwQY
MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt
ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi
LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZAOqmpC
IM1PnFc8iw9AI5jJTCtqG0oU27xu9rhzc5BhP9/uSJZ1lyGFCz5AbnAUj4FGeH4L
LirHkQZ6P3ez6D7Wsjwxjdw4kTS1aNmxaTMZy8j4GNOkvkWReDC09g4p75ZlYDkt
htf1TZD7jx+v3/RQZno53B0YzHNFi+44WnOvfRSdy7h/Muil34FnCKPLDDg2usbx
iVvnyaS8RA10iVDpqHOGxey07eRP6t6gez063x6QFOpGXCY4M0CtsWesq1pPJiAE
USCp9pXBsGt9RYWDCtaqGiGwQMiaSbd5aVJmrIWLnrHn2JL13doQkv52izaghJOI
Kieyj/iiW9uulg==
-----END CERTIFICATE-----