Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File:                     WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier:          W9rHU0Gp3728XJFqiooXzW0KYJFN79/WjecC3Is8Zcg=
Subject key identifier:   97:A6:98:86:FF:AE:AF:55:C9:D9:5C:90:AA:65:E2:1C:46:3F:7B:CA
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer:       /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial:       01962F3D8AFFB6FD0D0947CAFBCB402C64A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number:          0296
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=)
                          2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: UG2exBEGdmYC+BpNxqcKKY07dLoCI4pwJuRh9+xFOjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8a:ff:b6:fd:0d:09:47:ca:fb:cb:40:2c:64:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=97a69886ffaeaf55c9d95c90aa65e21c463f7bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:d6:5f:03:c5:27:e6:1e:37:37:bf:13:e4:
                    43:c2:09:46:a7:6e:21:21:9a:1b:0a:f8:c1:ff:d6:
                    68:ca:47:6e:f3:98:66:8b:f0:54:c8:93:10:fd:10:
                    a6:69:ea:c4:f4:9d:53:4d:5a:b1:14:cc:5a:7e:fb:
                    4e:b3:4d:08:b8:5d:14:9e:dd:4d:a2:d8:30:80:cc:
                    f4:18:1d:6e:92:7f:ff:49:13:d7:59:ca:a3:ce:76:
                    ef:24:b1:30:db:0c:ab:a3:ef:32:04:5c:e7:09:82:
                    52:44:d4:64:d6:29:c9:76:b3:3a:88:15:1e:98:4f:
                    8b:0e:b4:52:c8:95:b6:65:5b:fd:8c:fa:02:65:e5:
                    62:e3:8b:99:ee:6f:20:63:d3:0f:1f:ab:73:6d:c9:
                    41:a1:f4:8b:1e:2a:1a:ed:8a:f9:3c:5a:ca:42:bd:
                    80:d9:61:fe:c4:e0:e9:f2:d0:21:0f:e6:7e:3c:c0:
                    24:7f:17:ef:c7:82:49:34:e4:1c:7e:bb:2c:f2:53:
                    7a:65:42:e5:23:96:5d:8a:20:6c:93:48:31:32:b2:
                    77:bd:d2:88:ac:fc:68:59:11:90:6c:98:07:38:ed:
                    9c:84:fc:e7:19:2a:40:01:e3:a2:60:a8:59:a0:88:
                    13:4b:2f:0d:c1:23:a1:01:ce:8b:04:7e:96:42:af:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:98:86:FF:AE:AF:55:C9:D9:5C:90:AA:65:E2:1C:46:3F:7B:CA
            X509v3 Authority Key Identifier:
                keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:76:b5:0c:22:35:19:ce:93:cd:ea:66:cc:46:16:fe:7b:
         92:ca:c7:e1:5a:fa:21:4d:1c:cf:8e:3d:c1:e0:8e:97:a3:c6:
         3f:87:d0:b4:45:ed:2c:6b:83:de:10:f0:7b:c1:e1:75:ee:49:
         9c:c7:6e:f9:f6:b1:b6:02:7c:08:21:4f:30:55:29:21:fc:65:
         1e:b5:62:93:00:9d:18:3d:2b:59:37:8f:c9:31:3b:21:3f:30:
         0b:26:aa:38:37:6e:2c:25:62:28:12:72:97:5b:84:96:6e:45:
         00:6f:4b:55:c2:27:75:3a:85:f8:d7:b7:b3:6b:18:fd:f1:33:
         55:a5:9a:ea:d7:f5:51:6b:e3:72:f2:0c:ee:47:a6:ce:3a:60:
         67:fe:c8:4d:a3:e4:ed:19:c9:72:29:5b:3a:5f:d4:57:6c:cb:
         fd:2f:a9:b6:54:a2:d6:55:46:a0:a0:5c:86:2c:0f:1e:9d:01:
         82:18:60:36:f6:c6:c8:34:ba:a2:2d:27:16:91:97:d3:1a:33:
         53:ce:1e:3d:9b:8c:39:28:5e:57:d1:87:9f:e1:a5:05:f6:51:
         15:a3:59:24:ca:c7:04:f8:c6:85:97:82:24:97:7a:0e:eb:a0:
         2c:57:9c:71:ed:88:60:d9:1e:06:b4:59:88:9f:d6:9d:6a:3e:
         23:65:f4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYr/tv0NCUfK+8tALGSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmM2OTlmOGZlY2JlYzg0N2QzMzkwYjQ2NThkZDNjYjIx
YzUyYjMwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
Eyg5N2E2OTg4NmZmYWVhZjU1YzlkOTVjOTBhYTY1ZTIxYzQ2M2Y3YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYvWXwPFJ+YeNze/E+RDwglGp24h
IZobCvjB/9Zoykdu85hmi/BUyJMQ/RCmaerE9J1TTVqxFMxafvtOs00IuF0Unt1N
otgwgMz0GB1ukn//SRPXWcqjznbvJLEw2wyro+8yBFznCYJSRNRk1inJdrM6iBUe
mE+LDrRSyJW2ZVv9jPoCZeVi44uZ7m8gY9MPH6tzbclBofSLHioa7Yr5PFrKQr2A
2WH+xODp8tAhD+Z+PMAkfxfvx4JJNOQcfrss8lN6ZULlI5ZdiiBsk0gxMrJ3vdKI
rPxoWRGQbJgHOO2chPznGSpAAeOiYKhZoIgTSy8NwSOhAc6LBH6WQq9hwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJemmIb/rq9VydlckKpl4hxGP3vKMB8GA1UdIwQY
MBaAFFksaZ+P7L7IR9M5C0ZY3TyyHFKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEt
YjI4YzNjOGM5OTA5LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEtYjI4YzNjOGM5OTA5
LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC12tQwi
NRnOk83qZsxGFv57ksrH4Vr6IU0cz449weCOl6PGP4fQtEXtLGuD3hDwe8Hhde5J
nMdu+faxtgJ8CCFPMFUpIfxlHrVikwCdGD0rWTePyTE7IT8wCyaqODduLCViKBJy
l1uElm5FAG9LVcIndTqF+Ne3s2sY/fEzVaWa6tf1UWvjcvIM7kemzjpgZ/7ITaPk
7RnJcilbOl/UV2zL/S+ptlSi1lVGoKBchiwPHp0BghhgNvbGyDS6oi0nFpGX0xoz
U84ePZuMOSheV9GHn+GlBfZRFaNZJMrHBPjGhZeCJJd6DuugLFecce2IYNkeBrRZ
iJ/WnWo+I2X0OQ==
-----END CERTIFICATE-----