Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File:                     WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier:          sfFzXvxrzTTtguVb6iw2NcgWVntaRn5MAMbvZvsJiEU=
Subject key identifier:   C6:E6:43:54:E9:BE:44:F9:C5:F9:CF:F7:06:C0:0A:2F:06:13:0C:C0
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer:       /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial:       01962E9873F78194EA8C22889FFB8BAEC198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number:          53
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
                          2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: c0VKf25kfUBcdSemuMCYlzdeEuCWCt630PiR9FIbTWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:f7:81:94:ea:8c:22:88:9f:fb:8b:ae:c1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=c6e64354e9be44f9c5f9cff706c00a2f06130cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:a2:0a:ec:ee:d1:a8:23:d6:23:e5:3e:40:
                    ce:7c:0b:94:5b:ff:ff:1d:d0:37:88:b3:40:b1:9a:
                    2c:f3:49:86:dc:ad:13:2c:fb:5b:ca:b4:a8:b1:eb:
                    f2:a3:9b:4f:57:51:ba:a4:52:80:27:66:40:cd:08:
                    1f:b4:28:79:fe:89:5d:9d:09:06:18:3a:fa:29:dc:
                    76:f5:26:87:93:83:a3:5d:67:fb:43:97:3c:68:1a:
                    64:99:f5:37:ff:08:3d:8d:82:27:1e:9b:cd:29:6b:
                    d3:60:83:b7:7a:6f:00:e9:67:80:91:29:38:25:ae:
                    aa:b0:e2:f7:c3:79:31:eb:83:d9:42:a9:8c:3e:18:
                    85:a8:2c:22:17:dd:bd:7d:ec:67:27:bb:3f:d7:7f:
                    7d:96:a5:91:90:85:e2:4e:03:a5:0e:48:d0:e3:7f:
                    52:4e:ad:c2:af:86:b7:6d:76:93:fa:bd:e5:38:e9:
                    b5:3e:74:c8:46:2d:94:36:c2:51:fb:ca:b8:59:6b:
                    80:46:33:c5:82:35:2a:e8:83:3b:08:5a:1c:6c:3c:
                    e8:dd:f0:26:4f:04:84:a9:91:dc:55:77:00:42:ca:
                    40:d1:ab:af:5a:f5:1f:a2:39:c9:91:c3:11:3e:88:
                    c5:1b:3f:cf:97:1c:8a:83:bb:15:6f:96:f2:5a:cf:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:43:54:E9:BE:44:F9:C5:F9:CF:F7:06:C0:0A:2F:06:13:0C:C0
            X509v3 Authority Key Identifier:
                keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:a5:c4:78:41:4b:87:b8:3d:08:cb:39:1d:60:a2:4b:9b:
         fd:9f:30:26:f9:0d:7f:af:30:a2:c9:21:ce:9f:d3:39:66:2e:
         79:66:1d:75:da:62:ec:e3:85:fc:45:79:2e:43:07:8c:6a:1b:
         38:b6:a8:30:cd:ec:be:7c:7c:d4:34:d4:90:a9:85:29:0c:c3:
         34:08:69:99:73:74:15:9c:01:e4:45:47:f2:b4:12:f1:0a:6d:
         78:d7:81:bf:37:4d:30:5f:f2:cc:9a:30:68:91:d6:53:db:a6:
         cc:95:d9:56:08:8e:89:2e:04:6d:25:4d:eb:02:60:45:1c:01:
         f5:f5:1a:78:64:e1:3d:30:56:6f:56:9c:54:84:d3:2d:d0:cd:
         b7:2d:2a:11:40:16:aa:64:06:56:b3:6e:fc:cd:c0:bf:8a:a8:
         0d:9e:33:9b:aa:02:c0:a7:57:c8:b5:30:23:ef:a0:da:94:7a:
         df:57:b0:13:d6:4b:20:30:6e:e4:ca:a3:7f:be:85:6e:0d:11:
         15:9a:ff:9e:a3:89:63:c6:c6:cf:df:3d:a3:f8:e8:46:64:a2:
         82:5f:80:da:a6:a8:ed:a9:99:b8:f4:7e:6f:3f:c3:48:19:95:
         f1:b6:8a:80:f3:63:d1:af:70:2a:aa:26:7f:fa:52:f9:67:3e:
         f8:62:ac:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHP3gZTqjCKIn/uLrsGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjUwNDEzMTAwMTA1WhcNMjUwNDE0MTAwMTA1WjAzMTEwLwYDVQQD
EyhjNmU2NDM1NGU5YmU0NGY5YzVmOWNmZjcwNmMwMGEyZjA2MTMwY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YKiCuzu0agj1iPlPkDOfAuUW///
HdA3iLNAsZos80mG3K0TLPtbyrSosevyo5tPV1G6pFKAJ2ZAzQgftCh5/oldnQkG
GDr6Kdx29SaHk4OjXWf7Q5c8aBpkmfU3/wg9jYInHpvNKWvTYIO3em8A6WeAkSk4
Ja6qsOL3w3kx64PZQqmMPhiFqCwiF929fexnJ7s/1399lqWRkIXiTgOlDkjQ439S
Tq3Cr4a3bXaT+r3lOOm1PnTIRi2UNsJR+8q4WWuARjPFgjUq6IM7CFocbDzo3fAm
TwSEqZHcVXcAQspA0auvWvUfojnJkcMRPojFGz/PlxyKg7sVb5byWs+n8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbmQ1TpvkT5xfnP9wbACi8GEwzAMB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO6lxHhB
S4e4PQjLOR1gokub/Z8wJvkNf68woskhzp/TOWYueWYdddpi7OOF/EV5LkMHjGob
OLaoMM3svnx81DTUkKmFKQzDNAhpmXN0FZwB5EVH8rQS8QpteNeBvzdNMF/yzJow
aJHWU9umzJXZVgiOiS4EbSVN6wJgRRwB9fUaeGThPTBWb1acVITTLdDNty0qEUAW
qmQGVrNu/M3Av4qoDZ4zm6oCwKdXyLUwI++g2pR631ewE9ZLIDBu5Mqjf76Fbg0R
FZr/nqOJY8bGz989o/joRmSigl+A2qao7amZuPR+bz/DSBmV8baKgPNj0a9wKqom
f/pS+Wc++GKsdw==
-----END CERTIFICATE-----