Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          w7FxWotTZhMiMkAifHpVKDGdTljjCdjosX9bPmMhhMY=
Subject key identifier:   53:0A:69:43:F5:AE:77:3F:61:DF:F4:09:AE:DF:6B:03:06:BC:D0:8C
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       01962E98E90019B744DB33940CFC374FFB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: 6m3ZXl886SYeqrSXl+Q3r4FgNIaETk6JWN7MZNP8K3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:00:19:b7:44:db:33:94:0c:fc:37:4f:fb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=530a6943f5ae773f61dff409aedf6b0306bcd08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:5e:77:a0:f6:ff:1c:5b:05:0c:23:57:a2:
                    3c:b4:3b:51:92:e3:d7:89:76:1d:c4:93:f1:d4:11:
                    ad:d5:b7:99:26:27:73:18:17:38:7c:2c:de:2f:f3:
                    6f:99:81:59:6d:eb:b9:ea:d8:1a:8b:1f:5d:f2:e8:
                    d7:47:a1:57:8a:55:78:4c:09:13:72:09:21:b5:54:
                    b5:3a:a8:06:53:13:a1:d2:82:f3:a1:b3:be:58:80:
                    c7:1f:51:ed:02:d7:6b:4d:a8:4c:49:69:a6:98:a9:
                    0a:19:d9:0c:6e:76:a3:6c:ab:f6:78:60:3d:0d:86:
                    2e:dc:e7:8e:3e:ff:77:88:29:27:30:62:eb:46:da:
                    cb:96:41:bb:63:a1:ee:aa:9e:56:60:62:4f:33:b4:
                    47:2b:50:80:a9:ab:a4:d1:83:3b:49:f3:33:7a:80:
                    d3:ba:a0:4c:4d:7f:5a:fb:56:92:05:b0:6a:2e:12:
                    6a:83:29:e1:b8:c3:4e:3c:b8:77:6b:c7:a9:9b:50:
                    dc:fa:51:5b:95:e7:c8:74:a5:be:8a:77:80:c4:19:
                    3d:60:77:38:51:00:c3:ef:66:48:4e:16:4d:61:e1:
                    d4:b2:a7:83:53:ee:32:c6:1d:08:2f:11:07:8a:19:
                    18:cf:2a:28:bd:70:fb:01:52:87:48:48:3d:73:ee:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:69:43:F5:AE:77:3F:61:DF:F4:09:AE:DF:6B:03:06:BC:D0:8C
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:28:89:42:09:f7:b0:68:ed:0f:b9:86:0e:3f:f6:a2:85:
         e0:61:fa:bc:a4:1d:06:57:54:89:f2:0f:76:e4:cc:46:52:84:
         d5:fe:6c:a9:1f:15:b1:4a:c4:ee:76:74:80:38:2d:cb:44:98:
         0c:e9:b9:83:32:cc:60:fd:c3:33:b8:30:08:ff:5e:1f:f6:e7:
         97:17:c8:29:3e:69:c8:15:43:7a:dc:aa:69:bb:01:77:28:18:
         2d:ad:0d:ff:fa:e9:2f:30:79:9c:4b:aa:c6:3d:64:6a:34:db:
         30:01:f7:61:60:4c:f0:01:ac:f2:8d:2a:42:f4:1f:ec:22:4c:
         aa:35:8f:e3:a1:8a:d8:b2:84:4e:ff:89:ea:0d:14:52:61:6e:
         fa:e1:a5:4e:f1:f0:0b:fa:69:96:40:e9:45:42:7d:7a:c2:fb:
         d4:24:7d:32:6b:ad:97:5c:55:1c:e7:56:e2:08:01:19:f5:b9:
         72:b5:1f:50:85:c4:ca:17:90:7b:29:d1:f4:3f:c7:10:50:c6:
         a9:7b:29:a1:c8:3d:7a:61:de:8e:63:ba:cd:a7:34:51:2b:b4:
         8c:b2:03:b2:78:d9:a2:18:50:c4:c2:5e:0b:77:29:77:9f:b1:
         9b:f7:01:9d:21:9a:63:b0:65:b4:d7:64:a4:a1:7b:68:42:4d:
         69:60:d0:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOkAGbdE2zOUDPw3T/ucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUwNDEzMTAwMTM1WhcNMjUwNDE0MTAwMTM1WjAzMTEwLwYDVQQD
Eyg1MzBhNjk0M2Y1YWU3NzNmNjFkZmY0MDlhZWRmNmIwMzA2YmNkMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCRed6D2/xxbBQwjV6I8tDtRkuPX
iXYdxJPx1BGt1beZJidzGBc4fCzeL/NvmYFZbeu56tgaix9d8ujXR6FXilV4TAkT
cgkhtVS1OqgGUxOh0oLzobO+WIDHH1HtAtdrTahMSWmmmKkKGdkMbnajbKv2eGA9
DYYu3OeOPv93iCknMGLrRtrLlkG7Y6Huqp5WYGJPM7RHK1CAqauk0YM7SfMzeoDT
uqBMTX9a+1aSBbBqLhJqgynhuMNOPLh3a8epm1Dc+lFblefIdKW+ineAxBk9YHc4
UQDD72ZIThZNYeHUsqeDU+4yxh0ILxEHihkYzyoovXD7AVKHSEg9c+4T5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMKaUP1rnc/Yd/0Ca7fawMGvNCMMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHN8oiUIJ
97Bo7Q+5hg4/9qKF4GH6vKQdBldUifIPduTMRlKE1f5sqR8VsUrE7nZ0gDgty0SY
DOm5gzLMYP3DM7gwCP9eH/bnlxfIKT5pyBVDetyqabsBdygYLa0N//rpLzB5nEuq
xj1kajTbMAH3YWBM8AGs8o0qQvQf7CJMqjWP46GK2LKETv+J6g0UUmFu+uGlTvHw
C/pplkDpRUJ9esL71CR9Mmutl1xVHOdW4ggBGfW5crUfUIXEyheQeynR9D/HEFDG
qXspocg9emHejmO6zac0USu0jLIDsnjZohhQxMJeC3cpd5+xm/cBnSGaY7BltNdk
pKF7aEJNaWDQfA==
-----END CERTIFICATE-----