Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File:                     vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier:          /96KR+QXAQMdWjGwlPOLIscrUqOkv24exxvkeYO1c8I=
Subject key identifier:   A6:6A:7B:AD:2D:CB:A8:F3:EE:A3:5F:69:B5:A8:C3:FF:00:EC:E3:02
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer:       /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial:       01962E61A835D05F3E446B03AF90BFFE049F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number:          046A
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
                          2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: t6hfMX6ou1FAP3dludBYCpCCPkaUR92YCsug1JjtG7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:35:d0:5f:3e:44:6b:03:af:90:bf:fe:04:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=a66a7bad2dcba8f3eea35f69b5a8c3ff00ece302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:48:80:2d:89:04:fc:55:9f:0e:29:e8:03:
                    b0:b5:85:4f:17:c0:51:4a:f5:ad:42:eb:72:40:bf:
                    96:eb:44:4f:73:c7:28:86:3a:16:c0:3a:38:63:a6:
                    88:0e:ae:d8:74:fe:54:ed:33:14:f3:73:2d:e7:d2:
                    66:16:4f:27:86:66:e8:c3:c2:b8:2f:5b:9f:18:71:
                    cf:01:26:d2:6e:be:35:12:c1:11:c6:35:db:19:5d:
                    bd:3e:a5:ac:9f:57:b6:10:ec:a5:96:f0:1f:ab:6a:
                    5b:bf:0f:43:2c:27:31:ca:de:a7:61:03:a4:32:49:
                    dc:7b:36:14:d7:59:1b:c4:0a:37:7d:e3:07:c4:a4:
                    29:73:53:bc:83:07:fd:3e:a2:43:65:c9:fe:8d:eb:
                    ac:bb:ef:48:31:6b:7e:56:da:96:0d:b0:d6:21:46:
                    bb:f9:24:c1:29:32:2f:b7:1a:5e:25:e0:3a:f8:48:
                    af:07:54:d8:97:33:3c:82:54:0c:99:26:8a:28:f6:
                    62:f0:e6:a6:91:fb:d0:a0:bb:75:4c:4d:e8:5b:bc:
                    11:66:69:06:00:aa:7e:37:20:e7:19:cd:fc:2b:af:
                    74:9d:e7:90:ef:70:e9:e3:09:26:8b:c3:d0:d3:c6:
                    03:13:78:73:da:c3:b7:a5:8b:c4:c9:8f:55:8d:77:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6A:7B:AD:2D:CB:A8:F3:EE:A3:5F:69:B5:A8:C3:FF:00:EC:E3:02
            X509v3 Authority Key Identifier:
                keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:50:37:89:e5:7c:57:a1:68:df:86:b8:bf:ef:7d:f0:13:67:
         b6:d5:b3:df:ce:37:33:65:ab:97:0c:e9:4f:a3:0d:b9:77:bb:
         16:96:99:b7:b0:48:9f:8b:ca:23:80:ad:33:5d:4b:a1:bd:28:
         37:8a:67:97:7c:51:36:c4:37:84:9b:e8:32:07:60:d1:75:b0:
         2b:50:a8:3a:7d:37:1e:a2:5e:c1:29:e0:9d:50:c6:bb:9f:8e:
         fc:ed:12:c9:a6:dc:46:47:91:a7:38:d7:89:57:df:e0:b0:50:
         0b:2f:4d:7f:93:e7:13:35:85:91:8d:52:81:b7:94:a6:eb:b9:
         a5:36:3d:83:aa:57:96:ba:e6:42:0b:0c:d0:17:3a:af:cf:99:
         0d:ce:9b:a9:17:da:f4:5d:b1:2f:00:8c:12:ec:ef:f3:66:4a:
         b4:88:a9:2d:32:87:88:fa:01:01:41:ed:c9:97:6c:30:b2:0d:
         ea:84:c1:0e:f9:bd:40:3d:aa:42:42:58:35:96:c2:f6:2a:c9:
         41:a9:da:f7:0c:cc:f8:08:23:5e:99:d2:f6:36:bd:be:cc:6e:
         41:be:97:ae:69:65:5f:31:d1:8c:5d:3a:f0:51:c6:0f:ee:09:
         92:26:6f:a4:19:e0:42:f9:e1:e8:ed:5a:87:6e:bd:0f:1e:a6:
         a4:8f:42:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYag10F8+RGsDr5C//gSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw
YzE5M2YwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EyhhNjZhN2JhZDJkY2JhOGYzZWVhMzVmNjliNWE4YzNmZjAwZWNlMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv1IgC2JBPxVnw4p6AOwtYVPF8BR
SvWtQutyQL+W60RPc8cohjoWwDo4Y6aIDq7YdP5U7TMU83Mt59JmFk8nhmbow8K4
L1ufGHHPASbSbr41EsERxjXbGV29PqWsn1e2EOyllvAfq2pbvw9DLCcxyt6nYQOk
MkncezYU11kbxAo3feMHxKQpc1O8gwf9PqJDZcn+jeusu+9IMWt+VtqWDbDWIUa7
+STBKTIvtxpeJeA6+EivB1TYlzM8glQMmSaKKPZi8OamkfvQoLt1TE3oW7wRZmkG
AKp+NyDnGc38K690neeQ73Dp4wkmi8PQ08YDE3hz2sO3pYvEyY9VjXdSWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZqe60ty6jz7qNfabWow/8A7OMCMB8GA1UdIwQY
MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut
YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5
LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVA3ieV8
V6Fo34a4v+998BNnttWz3843M2WrlwzpT6MNuXe7FpaZt7BIn4vKI4CtM11Lob0o
N4pnl3xRNsQ3hJvoMgdg0XWwK1CoOn03HqJewSngnVDGu5+O/O0SyabcRkeRpzjX
iVff4LBQCy9Nf5PnEzWFkY1SgbeUpuu5pTY9g6pXlrrmQgsM0Bc6r8+ZDc6bqRfa
9F2xLwCMEuzv82ZKtIipLTKHiPoBAUHtyZdsMLIN6oTBDvm9QD2qQkJYNZbC9irJ
Qana9wzM+AgjXpnS9ja9vsxuQb6XrmllXzHRjF068FHGD+4JkiZvpBngQvnh6O1a
h269Dx6mpI9CIg==
-----END CERTIFICATE-----