Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          VNS1Jbec8AV1EyQqOwxr1Mi4OyVjbUrrFEUETNaewgg=
Subject key identifier:   72:4C:63:B9:54:C1:19:1E:C4:5F:D1:77:50:B9:36:59:2A:1C:D0:29
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       01962ECFA84DD7141AA44302602E3B0568A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          140F
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: K0hDdz1Lmeffc74N1CS0mKt3XlgX6838Scnep0wVgds=)
                          2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:4d:d7:14:1a:a4:43:02:60:2e:3b:05:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=724c63b954c1191ec45fd17750b936592a1cd029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:60:4a:4c:ea:29:2a:a6:a9:45:58:46:10:
                    df:bb:a4:c4:5d:c1:b7:c4:29:b1:d1:87:56:66:00:
                    8b:4e:a0:fb:3b:7a:4c:00:37:e7:1f:db:19:67:a2:
                    35:08:7a:3a:98:f7:4a:4c:8b:7e:5e:02:4d:b7:8d:
                    54:b3:33:de:b5:f9:14:0b:c7:35:54:9a:89:e0:16:
                    9d:15:93:63:88:dc:34:68:54:96:36:a9:24:9f:eb:
                    32:13:4b:c4:ee:8f:56:c8:e4:1a:25:cb:13:16:6d:
                    a8:dd:67:39:01:36:e4:81:e0:de:dd:ca:12:66:ba:
                    6f:d3:e9:88:0a:4d:44:7c:bb:2c:f4:00:07:04:4d:
                    a1:fc:bf:fd:12:77:34:a1:46:38:bc:29:fe:c3:f4:
                    16:df:17:fb:07:7f:a0:4d:f2:8c:39:fc:c6:1a:8c:
                    f8:bb:25:d7:ed:43:b7:38:7c:11:25:16:ff:23:5a:
                    9c:29:c0:8c:5c:cc:7c:6f:c8:61:55:94:9f:5f:74:
                    2c:91:1f:9e:c8:57:ef:d6:6c:27:e1:65:50:58:e4:
                    4a:4f:b8:3e:e6:b0:d7:ec:6c:02:fe:81:48:ac:f7:
                    e1:ee:e4:b3:c8:f2:fd:e4:37:8f:df:2b:df:ef:1c:
                    f5:24:f3:5f:6d:b8:b7:77:4c:25:70:cf:e1:b4:aa:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4C:63:B9:54:C1:19:1E:C4:5F:D1:77:50:B9:36:59:2A:1C:D0:29
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7a:65:78:89:7d:82:cd:70:ff:04:6f:cc:d3:f3:09:d7:e7:
         a4:73:64:6a:a8:56:31:94:36:31:d8:a7:a3:71:0a:26:6b:72:
         e1:21:9e:78:39:ee:3a:d5:0c:5d:5d:28:fd:13:3e:91:8f:31:
         fa:db:eb:bd:7c:2e:c8:0d:4d:a8:3a:b2:67:81:5b:51:79:9a:
         b7:88:4c:42:ff:4f:7d:9b:a2:db:ac:55:54:ce:9c:4a:58:55:
         11:19:81:0b:86:24:90:72:2d:bc:ed:ae:46:69:02:4d:39:fd:
         75:3a:5c:c4:e1:69:74:41:b7:50:6b:8d:86:12:0c:78:25:a6:
         07:d3:73:dd:76:d8:ef:02:bb:22:ee:a7:9e:18:b0:fc:56:97:
         79:73:6a:af:67:4b:46:65:2c:06:bf:36:5e:40:8d:90:d2:75:
         73:ab:e0:46:37:b3:01:af:c2:16:35:dc:82:49:c0:d6:f9:f5:
         03:8d:bf:09:ab:95:2c:98:4e:b5:95:31:cc:4b:19:19:db:cc:
         80:67:b3:53:ad:a5:3c:c0:4d:74:e3:78:6f:a0:12:84:10:22:
         86:d2:23:55:ca:f0:e7:31:da:47:60:c7:06:9d:48:a6:1c:09:
         2a:ac:cd:0d:f3:e0:13:db:fc:a9:a0:83:22:f5:e9:e7:40:ac:
         92:e8:4c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6hN1xQapEMCYC47BWipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2
OTc3YTQwHhcNMjUwNDEzMTEwMTIzWhcNMjUwNDE0MTEwMTIzWjAzMTEwLwYDVQQD
Eyg3MjRjNjNiOTU0YzExOTFlYzQ1ZmQxNzc1MGI5MzY1OTJhMWNkMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog5gSkzqKSqmqUVYRhDfu6TEXcG3
xCmx0YdWZgCLTqD7O3pMADfnH9sZZ6I1CHo6mPdKTIt+XgJNt41UszPetfkUC8c1
VJqJ4BadFZNjiNw0aFSWNqkkn+syE0vE7o9WyOQaJcsTFm2o3Wc5ATbkgeDe3coS
Zrpv0+mICk1EfLss9AAHBE2h/L/9Enc0oUY4vCn+w/QW3xf7B3+gTfKMOfzGGoz4
uyXX7UO3OHwRJRb/I1qcKcCMXMx8b8hhVZSfX3QskR+eyFfv1mwn4WVQWORKT7g+
5rDX7GwC/oFIrPfh7uSzyPL95DeP3yvf7xz1JPNfbbi3d0wlcM/htKoeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJMY7lUwRkexF/Rd1C5NlkqHNApMB8GA1UdIwQY
MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt
OWI4NmJmZmM4MzNjLzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj
LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnpleIl9
gs1w/wRvzNPzCdfnpHNkaqhWMZQ2Mdino3EKJmty4SGeeDnuOtUMXV0o/RM+kY8x
+tvrvXwuyA1NqDqyZ4FbUXmat4hMQv9PfZui26xVVM6cSlhVERmBC4YkkHItvO2u
RmkCTTn9dTpcxOFpdEG3UGuNhhIMeCWmB9Nz3XbY7wK7Iu6nnhiw/FaXeXNqr2dL
RmUsBr82XkCNkNJ1c6vgRjezAa/CFjXcgknA1vn1A42/CauVLJhOtZUxzEsZGdvM
gGezU62lPMBNdON4b6AShBAihtIjVcrw5zHaR2DHBp1IphwJKqzNDfPgE9v8qaCD
IvXp50CskuhMXw==
-----END CERTIFICATE-----