Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          HvYniPNlMze/faOxw4IyLNHcLjYdnAEABGAMT3wnF9Q=
Subject key identifier:   99:42:32:4F:F6:8C:3C:2F:A6:9C:2B:29:B2:5E:55:CB:32:E9:DE:D8
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       01962DF3A496C7E97A1E143F9D05F2F8FA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          0402
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: QeWjyOdKMRt+bqUjN6hC0BuzBsNI2Ml2vk3x2UROKbQ=)
                          2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
                          3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:96:c7:e9:7a:1e:14:3f:9d:05:f2:f8:fa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=9942324ff68c3c2fa69c2b29b25e55cb32e9ded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:7c:f6:57:80:76:84:c1:40:cb:24:e6:da:
                    03:9b:49:e3:85:5a:2f:b3:32:ed:b7:93:c7:71:95:
                    3a:fc:bc:57:4a:db:fe:c0:07:8e:d1:54:7d:84:7d:
                    75:e7:d6:0f:8c:31:1a:87:36:56:6c:a2:45:55:e8:
                    77:cb:c0:d4:3e:e2:3d:92:76:08:c1:1c:7c:00:8a:
                    d7:5e:c7:69:cd:13:5f:ad:fa:cb:71:b9:34:0f:b2:
                    bc:2a:68:1c:67:bc:98:e6:1e:1d:c0:12:14:da:e3:
                    dd:7d:e5:6e:83:dd:d0:1b:6c:e3:de:22:35:6e:2b:
                    cd:47:c3:6d:a9:3e:f9:37:6a:ac:48:a3:0e:f6:8d:
                    25:e5:60:01:0e:6b:78:6e:50:14:12:96:f5:4c:87:
                    28:9e:92:80:5e:d4:46:be:cc:a9:3e:a3:e6:40:6b:
                    64:4b:9b:d4:29:fb:4c:da:da:62:1a:9b:fe:d9:64:
                    02:cf:df:af:c5:15:a4:c7:64:c4:dc:72:28:96:da:
                    bc:38:fb:b5:23:44:a3:c5:91:4e:dd:44:f6:94:42:
                    65:46:55:56:d6:2c:99:b3:89:92:9f:10:22:44:da:
                    9d:22:69:1d:36:97:e9:3b:f5:c5:9d:bd:4d:7f:1e:
                    81:24:16:e1:a8:00:f6:85:8e:d3:dd:40:ba:35:49:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:32:4F:F6:8C:3C:2F:A6:9C:2B:29:B2:5E:55:CB:32:E9:DE:D8
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:fe:ef:dc:a4:e2:71:67:a6:99:2f:73:ce:22:64:0b:fe:
         45:44:57:b7:70:64:cb:e1:57:8f:32:3d:f8:cc:5c:91:7a:7a:
         4f:e4:4c:ba:31:66:f3:74:b0:4a:0b:cb:e8:ae:1b:32:29:8a:
         d8:74:53:93:b9:92:aa:e6:6c:80:f4:fb:09:41:af:f3:04:b7:
         9c:3f:b1:88:87:dc:4f:f0:1e:3c:32:cf:17:d6:96:5b:be:93:
         fe:08:24:f1:d0:26:b1:41:d5:36:ff:4b:e0:85:ec:31:3b:89:
         eb:5d:ba:f1:c8:61:84:9a:fe:d4:40:ef:d5:69:fe:13:43:d1:
         32:75:00:9e:28:4d:8d:63:5d:8d:01:80:1b:00:2c:20:6d:01:
         71:cc:d7:e2:67:7d:80:c9:14:0c:8e:8a:22:eb:ad:d4:c4:40:
         27:98:f5:1a:ee:87:09:2b:68:96:a0:0b:4c:5f:b1:b8:b2:df:
         56:44:2e:13:f2:b7:0b:5a:a9:5a:fe:58:98:29:4d:ab:52:e8:
         c1:b6:c5:d8:9a:96:49:8b:6e:b0:eb:00:92:13:94:ef:e1:45:
         1a:0d:8a:a0:ba:25:7b:f0:5b:31:3f:54:53:5e:fd:35:3f:08:
         ec:f1:1c:e6:36:1b:3a:dc:1b:e8:6c:67:92:75:5c:c6:df:ca:
         bd:d1:4e:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86SWx+l6HhQ/nQXy+PoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
Eyg5OTQyMzI0ZmY2OGMzYzJmYTY5YzJiMjliMjVlNTVjYjMyZTlkZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArth89leAdoTBQMsk5toDm0njhVov
szLtt5PHcZU6/LxXStv+wAeO0VR9hH1159YPjDEahzZWbKJFVeh3y8DUPuI9knYI
wRx8AIrXXsdpzRNfrfrLcbk0D7K8KmgcZ7yY5h4dwBIU2uPdfeVug93QG2zj3iI1
bivNR8NtqT75N2qsSKMO9o0l5WABDmt4blAUEpb1TIconpKAXtRGvsypPqPmQGtk
S5vUKftM2tpiGpv+2WQCz9+vxRWkx2TE3HIoltq8OPu1I0SjxZFO3UT2lEJlRlVW
1iyZs4mSnxAiRNqdImkdNpfpO/XFnb1Nfx6BJBbhqAD2hY7T3UC6NUkWlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlCMk/2jDwvppwrKbJeVcsy6d7YMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuv+79yk
4nFnppkvc84iZAv+RURXt3Bky+FXjzI9+MxckXp6T+RMujFm83SwSgvL6K4bMimK
2HRTk7mSquZsgPT7CUGv8wS3nD+xiIfcT/AePDLPF9aWW76T/ggk8dAmsUHVNv9L
4IXsMTuJ61268chhhJr+1EDv1Wn+E0PRMnUAnihNjWNdjQGAGwAsIG0BcczX4md9
gMkUDI6KIuut1MRAJ5j1Gu6HCStolqALTF+xuLLfVkQuE/K3C1qpWv5YmClNq1Lo
wbbF2JqWSYtusOsAkhOU7+FFGg2KoLole/BbMT9UU179NT8I7PEc5jYbOtwb6Gxn
knVcxt/KvdFO6Q==
-----END CERTIFICATE-----