Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File:                     Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier:          KKmMYmXbzl415WxjollJYNS7P0rJBLDh26LK1bCsPyI=
Subject key identifier:   48:9C:95:26:0F:D0:CB:2A:73:3C:7E:B7:7D:40:92:4B:BF:F7:E0:A2
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer:       /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial:       01962E98C733308DDF5A48AEAD77B0D50004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number:          0EAF
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: t3LIeJA0ntrxssZ4fmqWbOgPH6OjxOkyYKhrIepIWNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:33:30:8d:df:5a:48:ae:ad:77:b0:d5:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=489c95260fd0cb2a733c7eb77d40924bbff7e0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:fa:5a:7a:01:3e:5d:fa:4d:c1:f8:ad:91:
                    21:65:cb:24:39:b9:ce:b2:41:c6:b8:a9:40:a9:63:
                    5e:c5:55:91:c0:f3:a5:d5:b1:40:20:02:ff:d2:4e:
                    f4:cf:27:a9:79:9d:96:59:73:53:86:f7:55:aa:48:
                    d5:16:a0:eb:ff:9c:1a:06:d5:1c:4d:92:5e:9d:f0:
                    07:5b:57:51:35:7a:5f:7f:dc:9d:78:3d:c7:00:92:
                    0f:7c:fb:ab:bb:a7:26:96:a6:f7:46:70:8f:eb:c6:
                    be:46:32:01:bd:75:cd:69:3a:04:5f:71:0a:b6:e0:
                    ee:89:3d:e0:ea:3b:bd:d2:eb:c9:49:e4:84:98:8d:
                    04:2a:0c:9a:21:65:6f:aa:50:db:02:e1:52:8c:56:
                    5c:92:77:57:ee:a7:af:b7:53:e4:b0:46:dc:15:c7:
                    12:3e:12:e2:82:79:2c:3b:28:d5:8c:74:3b:25:0f:
                    29:e0:b9:b0:65:e5:10:be:68:95:27:bf:6a:83:9d:
                    b1:38:92:f8:23:4f:2a:b0:24:be:9f:3a:1d:a5:69:
                    06:98:c7:06:98:39:32:0a:aa:90:fb:5f:37:a4:cc:
                    3a:df:6e:05:c4:fa:62:be:00:19:9c:8f:c1:b5:58:
                    29:6f:c5:bd:19:c0:c7:38:f0:56:06:61:49:51:a5:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9C:95:26:0F:D0:CB:2A:73:3C:7E:B7:7D:40:92:4B:BF:F7:E0:A2
            X509v3 Authority Key Identifier:
                keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:01:cf:67:51:2f:86:4b:24:e3:83:b3:d8:d9:38:91:49:
         c9:0e:d8:c3:91:a0:9a:1a:e8:3a:e9:a4:b5:44:92:19:da:41:
         79:16:dc:5d:b9:99:99:a9:37:49:ab:22:ab:6a:db:95:f2:82:
         e4:69:9e:37:ec:2e:9a:62:76:8d:8b:d8:e9:6e:e4:39:38:db:
         99:15:1c:5c:98:70:e4:9f:ec:ad:93:b4:11:66:59:27:bb:3e:
         95:78:a5:1b:f1:be:35:86:bc:32:b7:a4:1e:f1:8c:bf:94:e3:
         10:a4:3f:66:14:c1:a3:d6:bb:ed:c3:d3:25:a0:b5:f6:55:08:
         1a:ee:22:ca:45:de:91:d7:84:16:87:32:eb:e0:14:1a:9e:53:
         ad:43:8e:1b:91:b2:9c:5b:95:d0:3f:41:27:d7:44:cd:98:ad:
         b5:f2:af:88:7e:f8:b6:28:f6:66:c6:92:26:d4:c0:fe:b9:81:
         8c:e7:48:d5:72:fd:8b:12:af:0a:74:d9:fb:41:41:23:3b:c0:
         fd:83:f5:4f:f2:34:89:d4:81:a6:f8:1a:dc:5e:5a:f8:20:9a:
         27:4a:45:2a:13:f0:b7:7b:4c:a1:f2:73:17:6d:15:12:d4:2d:
         9a:ab:84:a0:5d:cc:0f:ee:f3:9d:72:74:69:66:c7:c6:c2:26:
         6a:4b:50:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMczMI3fWkiurXew1QAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWY3ODRiYmM2NjljMWRiNzZhOGJkMWQxZTk5MzkzZDhm
MjE3NmIwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg0ODljOTUyNjBmZDBjYjJhNzMzYzdlYjc3ZDQwOTI0YmJmZjdlMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgn6WnoBPl36TcH4rZEhZcskObnO
skHGuKlAqWNexVWRwPOl1bFAIAL/0k70zyepeZ2WWXNThvdVqkjVFqDr/5waBtUc
TZJenfAHW1dRNXpff9ydeD3HAJIPfPuru6cmlqb3RnCP68a+RjIBvXXNaToEX3EK
tuDuiT3g6ju90uvJSeSEmI0EKgyaIWVvqlDbAuFSjFZckndX7qevt1PksEbcFccS
PhLignksOyjVjHQ7JQ8p4LmwZeUQvmiVJ79qg52xOJL4I08qsCS+nzodpWkGmMcG
mDkyCqqQ+183pMw6324FxPpivgAZnI/BtVgpb8W9GcDHOPBWBmFJUaWnNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiclSYP0Msqczx+t31Akku/9+CiMB8GA1UdIwQY
MBaAFFaveEu8Zpwdt2qL0dHpk5PY8hdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAt
NTVlOThlMjVmY2FkLzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAtNTVlOThlMjVmY2Fk
LzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgMBz2dR
L4ZLJOODs9jZOJFJyQ7Yw5GgmhroOumktUSSGdpBeRbcXbmZmak3Sasiq2rblfKC
5GmeN+wummJ2jYvY6W7kOTjbmRUcXJhw5J/srZO0EWZZJ7s+lXilG/G+NYa8Mrek
HvGMv5TjEKQ/ZhTBo9a77cPTJaC19lUIGu4iykXekdeEFocy6+AUGp5TrUOOG5Gy
nFuV0D9BJ9dEzZittfKviH74tij2ZsaSJtTA/rmBjOdI1XL9ixKvCnTZ+0FBIzvA
/YP1T/I0idSBpvga3F5a+CCaJ0pFKhPwt3tMofJzF20VEtQtmquEoF3MD+7znXJ0
aWbHxsImaktQNw==
-----END CERTIFICATE-----