Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File:                     VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier:          JRS2Q6RARDDPEpYQ0TPGk+Oe4lyv8XVYC54XXl4iPdk=
Subject key identifier:   F9:51:97:0D:12:B7:08:32:1F:0C:8B:03:43:1E:BE:C5:52:63:80:38
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer:       /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial:       01962F3DB6E26A1BCC68295FC52C16418476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: O_3sjFQLU8LSk5AiF4s2qKZfXBc.roa (hash: ejuYtetnOewL1sJBmaMYLDQ65Hla2peOL6OXuWr4CIE=)
                          2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: krPYp/HzzuPHYYwsyxEOv0EAcaGkYHxGNMoJ+KBlKAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:e2:6a:1b:cc:68:29:5f:c5:2c:16:41:84:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=f951970d12b708321f0c8b03431ebec552638038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:b6:6d:0d:da:68:42:27:10:51:96:3d:c5:
                    83:2a:d5:12:98:f7:db:40:2d:d7:ca:5e:3d:0e:4b:
                    2d:d6:92:a0:c7:76:dd:e4:37:22:11:64:b8:4f:04:
                    fb:9b:e2:f1:60:b1:ce:12:b3:74:3f:1b:5c:56:04:
                    f1:25:86:ac:09:fa:22:67:ca:02:e4:83:f4:9d:54:
                    40:9f:a6:28:14:cf:e1:e7:c9:f1:f7:0b:b1:1d:c6:
                    b1:31:e0:c7:c2:94:fe:26:4d:d1:ea:f7:79:70:85:
                    9d:b6:cf:49:63:00:fc:59:b6:2e:71:d5:ea:b9:53:
                    c2:f4:60:56:56:fe:0d:ff:b0:c1:a2:c5:ee:11:3f:
                    f7:1a:8e:c0:46:5b:05:3b:c7:a3:c1:60:9b:a7:a4:
                    e0:8d:0c:d5:7a:d9:33:0e:3a:5e:cd:e1:ee:6a:c0:
                    b1:38:3e:d9:23:ed:6d:4b:71:12:25:cd:75:84:71:
                    a1:20:ed:ca:67:d1:14:1e:e6:ab:62:27:26:78:4f:
                    ec:8b:b7:53:53:c4:c4:1c:5c:68:98:3f:14:2a:e4:
                    66:92:49:ee:f8:e2:38:bc:bf:bb:20:26:64:5d:53:
                    2f:26:a0:a0:b8:27:61:0a:06:a2:8e:fe:52:9c:c4:
                    a4:ce:a7:5a:0f:4b:94:c3:d2:1a:64:27:77:ea:a3:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:97:0D:12:B7:08:32:1F:0C:8B:03:43:1E:BE:C5:52:63:80:38
            X509v3 Authority Key Identifier:
                keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:54:b1:7b:b1:35:d5:ce:ac:b6:cd:45:bc:0b:4a:a3:a3:
         a8:b6:28:66:de:a7:00:fc:0b:b8:9a:f5:8e:82:a9:8c:d2:73:
         e7:d4:67:52:3f:85:a6:a8:bf:a8:a7:ac:68:ce:1b:c4:2d:40:
         06:3c:2d:92:18:c1:e8:e0:1d:cd:3f:f2:05:b4:69:8b:21:88:
         c5:c9:34:87:3a:b8:52:99:b9:d3:0d:70:f1:f9:d9:1a:f1:47:
         f2:ff:58:55:7f:22:8c:24:1f:43:30:55:ce:16:71:ce:6a:14:
         8b:72:15:78:61:0d:39:dd:ca:4e:af:ae:65:97:8c:a9:2c:19:
         d4:8c:b6:97:02:71:5e:3f:7a:2e:d9:8c:ed:8d:46:16:a4:0c:
         67:20:d5:c3:15:3e:0f:d4:93:4e:f4:aa:03:70:74:c9:a5:87:
         5f:85:2c:39:3b:1e:12:da:28:c5:34:8f:c1:53:68:64:19:b2:
         e1:68:f8:f7:f7:1e:b0:43:c3:de:27:fd:52:cb:4b:1a:7b:bc:
         20:44:bb:5c:1c:50:70:fc:c7:c6:0e:66:b9:e6:bf:db:63:ab:
         b4:e4:26:a8:73:a5:2b:5f:10:8c:3d:af:39:19:ac:89:9d:84:
         82:c7:fa:24:1f:19:1e:20:8b:68:e0:81:71:e9:b4:1d:4a:35:
         de:24:8e:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbbiahvMaClfxSwWQYR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MzRlOWJiMGVlNGQzMGMzMWU3NmFmYTY5MWFkYzkyNzli
M2YzNTYwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EyhmOTUxOTcwZDEyYjcwODMyMWYwYzhiMDM0MzFlYmVjNTUyNjM4MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iK2bQ3aaEInEFGWPcWDKtUSmPfb
QC3Xyl49Dkst1pKgx3bd5DciEWS4TwT7m+LxYLHOErN0PxtcVgTxJYasCfoiZ8oC
5IP0nVRAn6YoFM/h58nx9wuxHcaxMeDHwpT+Jk3R6vd5cIWdts9JYwD8WbYucdXq
uVPC9GBWVv4N/7DBosXuET/3Go7ARlsFO8ejwWCbp6TgjQzVetkzDjpezeHuasCx
OD7ZI+1tS3ESJc11hHGhIO3KZ9EUHuarYicmeE/si7dTU8TEHFxomD8UKuRmkknu
+OI4vL+7ICZkXVMvJqCguCdhCgaijv5SnMSkzqdaD0uUw9IaZCd36qMwYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlRlw0StwgyHwyLA0MevsVSY4A4MB8GA1UdIwQY
MBaAFFU06bsO5NMMMedq+mka3JJ5s/NWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYt
NjRmMjMxZGQ0MDQyLzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYtNjRmMjMxZGQ0MDQy
LzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuhUsXux
NdXOrLbNRbwLSqOjqLYoZt6nAPwLuJr1joKpjNJz59RnUj+Fpqi/qKesaM4bxC1A
BjwtkhjB6OAdzT/yBbRpiyGIxck0hzq4Upm50w1w8fnZGvFH8v9YVX8ijCQfQzBV
zhZxzmoUi3IVeGENOd3KTq+uZZeMqSwZ1Iy2lwJxXj96LtmM7Y1GFqQMZyDVwxU+
D9STTvSqA3B0yaWHX4UsOTseEtooxTSPwVNoZBmy4Wj49/cesEPD3if9UstLGnu8
IES7XBxQcPzHxg5muea/22OrtOQmqHOlK18QjD2vORmsiZ2Egsf6JB8ZHiCLaOCB
cem0HUo13iSOiQ==
-----END CERTIFICATE-----