Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File:                     09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier:          CvcnpHP4k0OaqqXs9wRBIEem/EwlfhrN7IwEYryy5T8=
Subject key identifier:   DE:13:18:C1:7B:32:4E:3A:86:F9:3C:DE:7A:04:84:D8:F9:0A:89:76
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer:       /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial:       01962F072A65F77C66BA99A788A689E2B952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: HV1GgHxq20FEBzneh7dh9rwQC1GQBz799l6GaZhbIo0=)
                          2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=)
                          3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=)
                          4: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=)
                          5: Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa (hash: hvO0OTnIGIVunaf7/zvrYJ2CBHE0j5nUl5E6OrK/DUM=)
                          6: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=)
                          7: WgHSs4gRde9Esu_hc-x9rRmkPIU.roa (hash: +VkjckdDEgGwECvmTIytXqs9Few6AaepnvobAqBXX3M=)
                          8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=)
                          9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=)
                          10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=)
                          11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2a:65:f7:7c:66:ba:99:a7:88:a6:89:e2:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=de1318c17b324e3a86f93cde7a0484d8f90a8976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:71:fa:36:82:3f:4c:26:4c:2a:87:1a:12:
                    78:ea:a2:82:34:6c:d8:49:e9:c6:76:20:1c:e2:f7:
                    30:8e:57:17:48:26:f0:6e:10:53:15:a0:00:c2:7e:
                    81:31:59:35:dd:30:b4:53:e7:42:ea:2f:c6:53:60:
                    f7:03:83:91:de:7a:60:f0:12:91:77:43:dc:fb:04:
                    1d:01:aa:69:5e:60:50:70:2b:db:85:1d:52:1e:8a:
                    07:55:ec:32:4f:42:1e:86:02:bc:64:5b:a4:42:33:
                    3d:32:d3:8b:d2:f5:f5:26:e5:aa:7f:86:f1:50:b5:
                    a9:f4:32:c5:72:e4:3a:76:6f:53:80:4e:cb:0e:40:
                    62:63:96:b8:0c:b8:04:3e:63:bd:25:27:51:f1:f7:
                    79:d0:6b:a9:40:ec:89:96:8f:79:9a:df:65:54:e4:
                    6f:77:a6:31:60:17:44:fd:69:7f:ee:d1:4a:81:7f:
                    42:85:4c:61:25:dc:82:02:38:1e:99:87:dd:da:ad:
                    6e:20:ea:b1:eb:04:77:38:fa:91:16:3c:84:71:43:
                    3a:8a:64:23:8b:d6:9f:e0:42:61:39:fd:6b:0f:53:
                    cd:1f:37:93:2c:c1:96:68:b6:cc:e6:be:f5:d5:61:
                    41:50:12:67:ce:ad:5a:6f:d4:5f:90:08:35:51:6a:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:18:C1:7B:32:4E:3A:86:F9:3C:DE:7A:04:84:D8:F9:0A:89:76
            X509v3 Authority Key Identifier:
                keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:16:ac:36:57:2d:7e:73:53:da:f3:62:a4:dc:31:9e:1d:
         0d:9d:e0:f6:7b:2d:a7:95:fe:7b:b4:6e:ee:32:f2:b5:dc:43:
         dd:0f:84:b8:e3:c8:2d:06:13:43:8b:9f:7e:eb:b9:75:3d:f5:
         fc:4e:c6:dd:a7:a0:07:0c:b1:fe:fd:95:d0:8d:ed:15:77:1c:
         95:73:2e:b4:8f:6a:67:b8:98:2b:32:5c:d9:24:ff:96:78:1f:
         5f:9b:76:14:5d:b8:cf:b1:b2:02:c8:e4:49:ff:46:54:97:71:
         5f:78:ee:77:fb:fb:75:66:ac:58:f3:95:25:20:d6:94:a8:d6:
         16:21:15:bc:a1:eb:6b:99:8d:0c:89:df:d1:af:f9:8e:38:71:
         5a:c8:91:0d:db:26:57:77:b0:ce:36:c7:ad:b6:24:60:e3:41:
         40:d2:19:20:06:1c:ff:43:3d:f2:64:a4:7d:a7:9e:16:85:c8:
         8d:77:30:2f:30:1f:ad:c3:da:93:e8:64:a2:a3:eb:ce:da:4e:
         d8:1e:2f:49:34:12:12:39:8c:69:12:0b:14:af:50:be:42:96:
         1b:a2:e2:14:d1:fb:c5:ec:93:3b:5a:59:13:a0:8e:6b:a5:38:
         4a:b8:1b:0f:c1:90:e2:58:b4:0e:47:c1:15:48:f2:eb:8e:f0:
         2d:2c:91:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBypl93xmupmniKaJ4rlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx
NmMzMmEwHhcNMjUwNDEzMTIwMjAwWhcNMjUwNDE0MTIwMjAwWjAzMTEwLwYDVQQD
EyhkZTEzMThjMTdiMzI0ZTNhODZmOTNjZGU3YTA0ODRkOGY5MGE4OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Jx+jaCP0wmTCqHGhJ46qKCNGzY
SenGdiAc4vcwjlcXSCbwbhBTFaAAwn6BMVk13TC0U+dC6i/GU2D3A4OR3npg8BKR
d0Pc+wQdAappXmBQcCvbhR1SHooHVewyT0IehgK8ZFukQjM9MtOL0vX1JuWqf4bx
ULWp9DLFcuQ6dm9TgE7LDkBiY5a4DLgEPmO9JSdR8fd50GupQOyJlo95mt9lVORv
d6YxYBdE/Wl/7tFKgX9ChUxhJdyCAjgemYfd2q1uIOqx6wR3OPqRFjyEcUM6imQj
i9af4EJhOf1rD1PNHzeTLMGWaLbM5r711WFBUBJnzq1ab9RfkAg1UWoIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4TGMF7Mk46hvk83noEhNj5Col2MB8GA1UdIwQY
MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdwWrDZX
LX5zU9rzYqTcMZ4dDZ3g9nstp5X+e7Ru7jLytdxD3Q+EuOPILQYTQ4uffuu5dT31
/E7G3aegBwyx/v2V0I3tFXcclXMutI9qZ7iYKzJc2ST/lngfX5t2FF24z7GyAsjk
Sf9GVJdxX3jud/v7dWasWPOVJSDWlKjWFiEVvKHra5mNDInf0a/5jjhxWsiRDdsm
V3ewzjbHrbYkYONBQNIZIAYc/0M98mSkfaeeFoXIjXcwLzAfrcPak+hkoqPrztpO
2B4vSTQSEjmMaRILFK9QvkKWG6LiFNH7xeyTO1pZE6COa6U4SrgbD8GQ4li0DkfB
FUjy647wLSyRLQ==
-----END CERTIFICATE-----