Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          /ids3GsKvdGEw2mc64R7Y+btIL6M0fuXOwzFeuZTg1s=
Subject key identifier:   F7:D2:09:01:A4:2B:0B:62:2C:6B:9A:80:3D:33:C4:1E:03:D5:22:99
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       01962F065FC7D8BC11B4A1A1082855F9E92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0981
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=)
                          2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: Dq0wMemdyuRpHgVEbAvHTOTc30+WXa46K+dBRArNKJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:c7:d8:bc:11:b4:a1:a1:08:28:55:f9:e9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=f7d20901a42b0b622c6b9a803d33c41e03d52299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:cc:ad:66:4b:62:2d:9e:29:47:e1:57:f2:
                    b5:e9:81:b6:27:db:9f:71:d7:07:6e:3a:e0:c3:62:
                    c1:1a:31:b7:88:6b:24:b2:25:66:d3:d8:4b:fb:45:
                    4c:c6:ad:d6:c5:2c:a3:67:c0:55:e7:d4:8f:04:6a:
                    69:9c:7b:56:68:4b:7a:8c:f3:a6:0b:59:2f:50:c7:
                    bd:0d:ca:a0:94:72:db:68:e4:28:44:51:46:fc:c0:
                    b7:29:f3:26:0e:93:94:e3:f2:14:84:96:9b:13:fe:
                    c7:ad:bd:cb:45:58:71:40:ad:17:23:6c:c2:83:36:
                    bd:ba:53:98:07:4e:1d:02:f0:9f:78:60:86:3e:22:
                    49:59:f8:80:93:0e:f7:7f:43:fa:92:c6:ea:e9:6c:
                    dd:bf:a0:f0:6d:d2:27:3b:cf:6e:f7:fe:25:1b:d1:
                    ae:76:bd:4c:53:a2:cb:d2:bf:ac:d8:d1:2d:58:90:
                    6f:5f:f0:93:4b:76:be:52:4c:5c:af:ab:2e:35:1f:
                    64:ee:97:ec:1d:f4:46:7f:71:c7:4e:aa:92:19:a1:
                    0f:e9:ca:d8:0a:02:9a:bc:0b:b8:3a:72:6c:ca:3d:
                    88:0a:55:bf:81:34:7b:56:3a:70:32:ce:82:7e:e4:
                    5e:ab:9d:66:af:f9:02:a3:f7:9e:9a:a0:72:9c:f4:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:09:01:A4:2B:0B:62:2C:6B:9A:80:3D:33:C4:1E:03:D5:22:99
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:60:ed:76:2b:e5:41:a2:ed:05:9c:51:ec:a7:c5:aa:82:41:
         ea:81:e4:c8:fa:9d:f1:df:d6:1c:ce:54:de:e3:a9:68:40:24:
         1b:90:16:c2:ec:56:90:cd:fc:47:21:45:1e:5b:2d:a4:51:7f:
         90:4e:58:14:f6:3c:88:7b:ea:ac:74:2a:31:97:d9:a3:06:ca:
         66:84:e1:e8:01:b4:ae:50:1c:49:07:4d:41:0c:43:63:de:7d:
         8b:d2:df:b6:92:28:0b:ad:17:3e:c3:d6:34:4f:c6:fd:c2:f1:
         3f:83:dc:f5:ba:99:34:73:e5:76:6a:1c:15:75:29:13:15:74:
         be:3e:12:14:f8:ea:f7:78:c6:cc:d9:70:80:97:a6:d5:d0:e2:
         f3:bd:18:f0:82:af:b1:35:6e:46:9b:bf:ae:5c:6f:08:e6:84:
         9f:fb:23:8a:96:dd:c6:a5:ec:74:f1:36:03:7d:ae:cd:49:38:
         c1:fa:f0:7e:05:79:9e:1c:c8:25:40:38:ed:06:9c:6c:ef:74:
         8e:8c:22:ea:7e:9c:6a:29:9e:db:14:80:53:a0:3c:49:fa:a8:
         c5:72:dd:58:a6:5a:54:92:d6:56:c3:79:10:ad:fd:b4:a9:ed:
         53:89:6e:ea:94:06:aa:89:3c:8e:2d:af:ec:ff:4a:01:95:71:
         f9:90:77:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBl/H2LwRtKGhCChV+ekvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5
Y2FkNjAwHhcNMjUwNDEzMTIwMTA4WhcNMjUwNDE0MTIwMTA4WjAzMTEwLwYDVQQD
EyhmN2QyMDkwMWE0MmIwYjYyMmM2YjlhODAzZDMzYzQxZTAzZDUyMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iHMrWZLYi2eKUfhV/K16YG2J9uf
cdcHbjrgw2LBGjG3iGsksiVm09hL+0VMxq3WxSyjZ8BV59SPBGppnHtWaEt6jPOm
C1kvUMe9DcqglHLbaOQoRFFG/MC3KfMmDpOU4/IUhJabE/7Hrb3LRVhxQK0XI2zC
gza9ulOYB04dAvCfeGCGPiJJWfiAkw73f0P6ksbq6Wzdv6DwbdInO89u9/4lG9Gu
dr1MU6LL0r+s2NEtWJBvX/CTS3a+Ukxcr6suNR9k7pfsHfRGf3HHTqqSGaEP6crY
CgKavAu4OnJsyj2IClW/gTR7VjpwMs6CfuReq51mr/kCo/eemqBynPRJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfSCQGkKwtiLGuagD0zxB4D1SKZMB8GA1UdIwQY
MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt
YjE4ZDllNzFjMTZhLzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh
LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6mDtdivl
QaLtBZxR7KfFqoJB6oHkyPqd8d/WHM5U3uOpaEAkG5AWwuxWkM38RyFFHlstpFF/
kE5YFPY8iHvqrHQqMZfZowbKZoTh6AG0rlAcSQdNQQxDY959i9LftpIoC60XPsPW
NE/G/cLxP4Pc9bqZNHPldmocFXUpExV0vj4SFPjq93jGzNlwgJem1dDi870Y8IKv
sTVuRpu/rlxvCOaEn/sjipbdxqXsdPE2A32uzUk4wfrwfgV5nhzIJUA47QacbO90
jowi6n6caime2xSAU6A8SfqoxXLdWKZaVJLWVsN5EK39tKntU4lu6pQGqok8ji2v
7P9KAZVx+ZB3yg==
-----END CERTIFICATE-----