Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File:                     vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier:          4gwXWUSPJF/Eovx5hUzHsF9QNEFQDmcHKecnjKh73mQ=
Subject key identifier:   4C:75:88:EE:8A:A6:01:56:37:D7:3D:AA:5B:11:B4:86:18:44:02:06
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer:       /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial:       01962ECF5B2BB79EB5B963F730F83F2B3E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number:          07DF
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
                          2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
                          3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: gpndf48AtY83u685Nu2HcE+RJA4O8jJJx3e89McjIyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:2b:b7:9e:b5:b9:63:f7:30:f8:3f:2b:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=4c7588ee8aa6015637d73daa5b11b48618440206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:b6:82:2a:2c:33:9f:ac:4f:e6:07:6e:4b:
                    c0:70:44:37:22:3d:e5:8a:c1:a1:35:be:cd:78:c8:
                    5c:80:fd:08:89:79:a3:b3:39:e3:12:90:eb:7b:a3:
                    63:98:d0:f8:df:73:48:83:93:60:30:aa:2a:0d:fe:
                    76:12:1e:0a:f5:fd:69:8d:02:12:ec:81:ed:95:b8:
                    5a:74:b5:ed:7f:13:f6:96:43:23:6a:d0:d6:2c:78:
                    92:9a:99:7f:91:da:73:58:a9:40:12:ee:1e:b5:e1:
                    ac:d3:c0:7b:4b:7f:cb:7e:d5:27:9c:c7:20:ed:bb:
                    c0:68:bb:09:9a:69:cc:89:67:b2:db:1c:ec:dd:08:
                    83:b2:32:bb:8f:06:d2:3a:d9:3e:54:de:18:17:b1:
                    b8:5b:a8:0f:66:0c:e4:d9:67:7c:54:eb:43:b5:d4:
                    03:06:b0:7a:75:2e:83:89:6b:2f:fd:92:01:25:c4:
                    1c:72:6a:54:1b:5e:ed:27:e8:61:c2:fe:b4:4b:87:
                    e0:e8:0c:89:6d:98:ca:c4:03:2d:df:f6:a5:bb:b2:
                    cc:cb:5e:4b:c1:8f:3a:8f:61:6c:de:48:fe:ee:40:
                    09:51:6a:5f:39:99:a0:56:c1:ca:d4:0b:04:89:2e:
                    42:da:68:1a:22:e3:7e:60:52:17:33:7b:69:a4:f4:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:88:EE:8A:A6:01:56:37:D7:3D:AA:5B:11:B4:86:18:44:02:06
            X509v3 Authority Key Identifier:
                keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:48:53:06:08:6c:61:b4:af:a2:5b:05:82:0d:96:1f:6c:1b:
         e8:c0:6f:b0:52:ca:2d:5b:41:ec:cd:48:29:63:48:49:44:31:
         24:9e:cd:47:b9:bf:8e:6b:e1:c7:0c:a9:3b:90:1d:2a:c8:b6:
         c8:23:96:07:47:c0:3a:65:89:7c:91:25:ac:33:dd:e2:d1:72:
         27:af:22:9d:84:0f:40:05:42:59:90:8a:53:e6:b7:d6:d2:fb:
         1d:2c:c3:b7:f3:02:38:16:52:2b:e5:a4:06:80:b3:6a:5f:ff:
         32:5f:47:a3:54:36:71:97:ba:7d:96:db:fd:e9:c9:4e:2d:ba:
         79:13:84:d3:3b:f9:73:9c:a7:be:21:a5:f0:74:69:e2:7c:f1:
         3c:43:47:d6:10:16:8a:cd:c2:a3:f7:59:b4:6b:8c:4c:1c:d7:
         b1:36:a3:51:35:6f:9f:13:bf:f8:29:6c:9e:98:da:c3:b4:2a:
         a1:9e:3d:1c:80:a5:72:92:bd:6a:d2:6d:bf:69:1b:30:78:7e:
         a5:2d:91:ea:ea:4f:fc:be:28:6d:18:19:00:19:ed:d2:a5:df:
         ba:8c:2a:7b:ff:0b:ca:bb:c1:28:4d:fe:0f:f8:0d:40:38:f4:
         17:1e:01:56:a8:c2:11:12:cc:c1:47:5b:b1:b2:2e:9f:da:42:
         82:88:41:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1srt561uWP3MPg/Kz5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWI2Y2IyZTgwN2FlY2ViZDdlMDNhODA4MDhmYWIyM2Q5
YzQ3MTYwHhcNMjUwNDEzMTEwMTAzWhcNMjUwNDE0MTEwMTAzWjAzMTEwLwYDVQQD
Eyg0Yzc1ODhlZThhYTYwMTU2MzdkNzNkYWE1YjExYjQ4NjE4NDQwMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgu2giosM5+sT+YHbkvAcEQ3Ij3l
isGhNb7NeMhcgP0IiXmjsznjEpDre6NjmND433NIg5NgMKoqDf52Eh4K9f1pjQIS
7IHtlbhadLXtfxP2lkMjatDWLHiSmpl/kdpzWKlAEu4eteGs08B7S3/LftUnnMcg
7bvAaLsJmmnMiWey2xzs3QiDsjK7jwbSOtk+VN4YF7G4W6gPZgzk2Wd8VOtDtdQD
BrB6dS6DiWsv/ZIBJcQccmpUG17tJ+hhwv60S4fg6AyJbZjKxAMt3/alu7LMy15L
wY86j2Fs3kj+7kAJUWpfOZmgVsHK1AsEiS5C2mgaIuN+YFIXM3tppPQC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx1iO6KpgFWN9c9qlsRtIYYRAIGMB8GA1UdIwQY
MBaAFL2rbLLoB67OvX4DqAgI+rI9nEcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2It
MjlmNzhjMjc5ODlmLzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2ItMjlmNzhjMjc5ODlm
LzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkhTBghs
YbSvolsFgg2WH2wb6MBvsFLKLVtB7M1IKWNISUQxJJ7NR7m/jmvhxwypO5AdKsi2
yCOWB0fAOmWJfJElrDPd4tFyJ68inYQPQAVCWZCKU+a31tL7HSzDt/MCOBZSK+Wk
BoCzal//Ml9Ho1Q2cZe6fZbb/enJTi26eROE0zv5c5ynviGl8HRp4nzxPENH1hAW
is3Co/dZtGuMTBzXsTajUTVvnxO/+Clsnpjaw7QqoZ49HIClcpK9atJtv2kbMHh+
pS2R6upP/L4obRgZABnt0qXfuowqe/8LyrvBKE3+D/gNQDj0Fx4BVqjCERLMwUdb
sbIun9pCgohB8g==
-----END CERTIFICATE-----