Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File:                     r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier:          0HHAN1EpBSqOrQAS3OXhoYeOEqVQPtacGGZlrKs/B9M=
Subject key identifier:   DF:58:86:B2:CF:00:58:FD:4B:8D:7F:42:C9:0C:2C:99:92:DB:8A:BA
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer:       /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial:       01962E99354ED75918912C58D02724AE7316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number:          05F4
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
                          2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
                          3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: v+61HCNTWhG0leYkOOFaQPQYyOHRweqWApD/YNFvea4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:4e:d7:59:18:91:2c:58:d0:27:24:ae:73:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=df5886b2cf0058fd4b8d7f42c90c2c9992db8aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:25:12:29:8a:5d:3d:a2:c2:29:a8:98:b7:
                    f5:71:af:9d:41:90:d3:8b:6b:be:d3:2e:16:16:91:
                    18:f0:db:1a:e7:4b:3a:9f:7c:09:a2:16:68:12:b5:
                    d5:d6:33:4b:06:03:35:5f:6f:03:d4:78:49:a0:8f:
                    eb:29:2a:f9:5f:ba:b5:89:08:3b:90:ba:59:8c:8d:
                    87:72:c0:98:5b:43:d3:a1:46:fd:2b:39:b4:37:18:
                    fc:b8:8d:3a:31:50:94:dd:7c:a8:32:b3:43:c9:64:
                    72:22:17:ab:23:67:72:c0:d4:fa:83:8f:9f:d2:a4:
                    23:ce:25:d4:15:86:21:0e:20:4c:0e:03:40:0f:17:
                    27:3d:c7:a3:3c:66:5d:08:9d:48:d2:b9:12:f8:e5:
                    3b:3a:c5:16:0e:be:df:3a:2e:f3:ce:74:fa:aa:03:
                    c4:32:b7:00:8c:dc:bc:e2:9e:e9:80:7c:21:0e:0b:
                    28:b8:eb:f9:ae:6f:03:f4:e9:f7:17:76:f4:5a:0b:
                    32:46:3a:53:37:22:51:9d:d7:99:4e:50:22:0e:cf:
                    9b:e3:de:c5:21:af:c5:07:39:ed:ab:24:09:f0:85:
                    dd:53:3e:96:21:dc:13:9e:2a:7c:ea:0b:c0:80:60:
                    9c:0f:03:d2:90:da:a0:38:7a:e0:d4:7e:b8:bb:e6:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:58:86:B2:CF:00:58:FD:4B:8D:7F:42:C9:0C:2C:99:92:DB:8A:BA
            X509v3 Authority Key Identifier:
                keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:88:2f:75:5e:56:a8:cf:94:ab:9b:fd:cf:7e:ab:30:63:
         e6:58:b8:5d:58:1c:a5:40:8b:7e:c6:92:32:d3:1f:8e:c0:c2:
         dd:6d:b8:3c:e9:e3:88:e9:7a:ef:c9:79:39:7b:4f:7f:e2:55:
         9c:51:35:c3:42:75:05:d7:36:96:d6:5e:3c:46:e4:ca:8e:61:
         43:8a:e0:b1:6d:7f:2a:6e:93:5c:2f:9c:26:55:b0:04:0a:ab:
         12:a8:70:70:57:8b:55:d1:21:f0:28:d6:4a:1d:3a:82:7b:20:
         98:64:1b:d5:9b:b5:cd:0c:78:bd:39:eb:ff:49:ce:7f:4e:6b:
         bc:7b:d2:da:9a:7c:1b:8b:32:f8:f0:b2:33:fb:92:1c:c0:94:
         cb:56:b3:bf:3f:aa:36:60:69:72:59:4f:92:a3:e8:17:a0:b6:
         21:1b:18:a6:4e:10:ce:c4:6c:ec:52:24:25:7c:8f:20:5e:7e:
         67:9f:b7:49:15:1c:0d:45:77:e9:a3:99:d2:15:5d:36:bf:e8:
         dc:a8:46:47:4e:ca:90:91:1f:3d:dd:fe:0b:05:aa:c2:e8:72:
         ff:6c:af:23:fd:c1:7b:be:5c:bf:d3:14:af:72:2d:14:17:23:
         37:b8:2d:a9:32:ae:03:b1:3f:fe:7c:75:ef:fb:41:3c:0c:b6:
         dd:c5:e4:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTVO11kYkSxY0CckrnMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0
ZWZiMWQwHhcNMjUwNDEzMTAwMTU0WhcNMjUwNDE0MTAwMTU0WjAzMTEwLwYDVQQD
EyhkZjU4ODZiMmNmMDA1OGZkNGI4ZDdmNDJjOTBjMmM5OTkyZGI4YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQwlEimKXT2iwimomLf1ca+dQZDT
i2u+0y4WFpEY8Nsa50s6n3wJohZoErXV1jNLBgM1X28D1HhJoI/rKSr5X7q1iQg7
kLpZjI2HcsCYW0PToUb9Kzm0Nxj8uI06MVCU3XyoMrNDyWRyIherI2dywNT6g4+f
0qQjziXUFYYhDiBMDgNADxcnPcejPGZdCJ1I0rkS+OU7OsUWDr7fOi7zznT6qgPE
MrcAjNy84p7pgHwhDgsouOv5rm8D9On3F3b0WgsyRjpTNyJRndeZTlAiDs+b497F
Ia/FBzntqyQJ8IXdUz6WIdwTnip86gvAgGCcDwPSkNqgOHrg1H64u+ZWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9YhrLPAFj9S41/QskMLJmS24q6MB8GA1UdIwQY
MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt
ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl
LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOaIL3Ve
VqjPlKub/c9+qzBj5li4XVgcpUCLfsaSMtMfjsDC3W24POnjiOl678l5OXtPf+JV
nFE1w0J1Bdc2ltZePEbkyo5hQ4rgsW1/Km6TXC+cJlWwBAqrEqhwcFeLVdEh8CjW
Sh06gnsgmGQb1Zu1zQx4vTnr/0nOf05rvHvS2pp8G4sy+PCyM/uSHMCUy1azvz+q
NmBpcllPkqPoF6C2IRsYpk4QzsRs7FIkJXyPIF5+Z5+3SRUcDUV36aOZ0hVdNr/o
3KhGR07KkJEfPd3+CwWqwuhy/2yvI/3Be75cv9MUr3ItFBcjN7gtqTKuA7E//nx1
7/tBPAy23cXkZA==
-----END CERTIFICATE-----