Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File:                     vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier:          WxmzGN5SmRpylU0NQF/J4tXpMtswFRLgfdkgOYG0vwo=
Subject key identifier:   62:56:58:A8:64:FB:DE:D9:3F:42:61:53:8E:56:11:69:AB:22:39:46
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer:       /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial:       01962E996502C92846BE391124B8105CBE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number:          051B
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=)
                          2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: AnIqFAA9HCJNaeorZxxsHh6mDCW/pzYvxCycPcw9iBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:02:c9:28:46:be:39:11:24:b8:10:5c:be:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=625658a864fbded93f4261538e561169ab223946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:76:75:30:01:e2:cf:88:9d:cf:f0:2c:7f:
                    75:66:95:94:d2:52:84:b4:e1:52:e1:6d:e2:b2:76:
                    21:05:ca:96:94:d5:b2:8f:c7:ca:b2:b6:c4:95:16:
                    09:7c:f2:e1:f3:94:1c:e8:0a:37:99:ea:a0:3b:24:
                    66:79:d9:d7:53:bc:cb:55:c8:95:98:da:28:4b:21:
                    2f:99:34:09:55:cd:09:de:05:05:ef:a4:29:93:48:
                    58:3a:01:ba:6e:77:54:1a:44:0e:b9:67:f6:2c:83:
                    e9:b3:af:c3:65:fb:94:d6:df:df:08:2e:44:f8:4c:
                    ce:49:c9:b8:c9:e8:f8:f1:5e:60:79:84:10:f0:5d:
                    63:40:b4:6a:b9:38:57:2c:11:8a:a6:0d:5e:cc:12:
                    6b:4a:7b:c7:24:d3:6f:ca:c2:0c:db:28:f5:4d:30:
                    54:2b:bf:1b:98:2d:a7:41:ae:75:28:09:c6:f1:df:
                    52:cb:09:ab:98:86:b4:33:a2:6b:bb:d6:b4:7c:46:
                    b9:96:26:72:47:ab:a9:25:db:90:57:41:95:db:42:
                    95:b8:52:8e:ba:e8:d0:8d:f5:60:17:3d:fe:a0:51:
                    4d:b8:a4:3f:a5:ba:3e:fc:5c:46:7b:d0:0f:b8:dc:
                    db:44:18:5a:03:ee:c8:9e:02:72:21:5e:76:cd:98:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:56:58:A8:64:FB:DE:D9:3F:42:61:53:8E:56:11:69:AB:22:39:46
            X509v3 Authority Key Identifier:
                keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:80:31:1d:83:f6:c4:cc:15:42:3a:6e:96:83:ca:39:3e:
         c8:77:ea:5d:6b:b3:90:02:9b:12:e3:39:b3:e8:9b:94:50:11:
         eb:44:ed:82:f5:de:85:fc:f3:93:da:0f:7d:5c:da:4a:27:9a:
         45:c6:cd:50:ea:f4:e5:73:aa:fd:c7:e6:97:2e:e5:a0:0b:93:
         55:1d:63:17:71:89:0d:5e:16:c1:70:24:fe:35:c4:fc:70:6c:
         be:b6:fe:5b:eb:4b:36:3e:ba:8a:88:0f:39:cf:8b:82:1a:0b:
         a6:93:29:cf:c6:60:30:50:8c:7c:77:63:58:c4:3e:d1:5c:32:
         90:68:d9:32:3d:cc:69:5f:93:e7:df:ca:3e:b1:fd:95:7b:25:
         b8:e4:99:35:25:4a:6e:fd:f2:48:f0:94:15:76:a3:2f:77:ed:
         16:d2:14:d9:99:7e:cd:c4:f8:2d:06:21:bf:5d:f3:90:fc:03:
         39:63:21:29:02:bf:da:84:30:45:6a:7a:d1:d8:05:b7:b8:38:
         b8:2c:0d:8f:16:9b:c4:ad:a4:40:09:11:c5:88:a3:a2:de:66:
         fd:8e:3a:83:36:52:0d:ce:b4:9b:d9:ed:5c:f9:3a:01:56:f1:
         5f:77:30:f4:d3:bc:46:10:20:81:d1:e9:27:5a:5e:ba:32:4b:
         fe:38:72:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWUCyShGvjkRJLgQXL5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi
M2FlNDIwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
Eyg2MjU2NThhODY0ZmJkZWQ5M2Y0MjYxNTM4ZTU2MTE2OWFiMjIzOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYR2dTAB4s+Inc/wLH91ZpWU0lKE
tOFS4W3isnYhBcqWlNWyj8fKsrbElRYJfPLh85Qc6Ao3meqgOyRmednXU7zLVciV
mNooSyEvmTQJVc0J3gUF76Qpk0hYOgG6bndUGkQOuWf2LIPps6/DZfuU1t/fCC5E
+EzOScm4yej48V5geYQQ8F1jQLRquThXLBGKpg1ezBJrSnvHJNNvysIM2yj1TTBU
K78bmC2nQa51KAnG8d9SywmrmIa0M6Jru9a0fEa5liZyR6upJduQV0GV20KVuFKO
uujQjfVgFz3+oFFNuKQ/pbo+/FxGe9APuNzbRBhaA+7IngJyIV52zZjbtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJWWKhk+97ZP0JhU45WEWmrIjlGMB8GA1UdIwQY
MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt
ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3
LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIiAMR2D
9sTMFUI6bpaDyjk+yHfqXWuzkAKbEuM5s+iblFAR60TtgvXehfzzk9oPfVzaSiea
RcbNUOr05XOq/cfmly7loAuTVR1jF3GJDV4WwXAk/jXE/HBsvrb+W+tLNj66iogP
Oc+LghoLppMpz8ZgMFCMfHdjWMQ+0VwykGjZMj3MaV+T59/KPrH9lXsluOSZNSVK
bv3ySPCUFXajL3ftFtIU2Zl+zcT4LQYhv13zkPwDOWMhKQK/2oQwRWp60dgFt7g4
uCwNjxabxK2kQAkRxYijot5m/Y46gzZSDc60m9ntXPk6AVbxX3cw9NO8RhAggdHp
J1peujJL/jhyrA==
-----END CERTIFICATE-----