Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          DZ5nDGKrIkPt4YbNQRfqR7wvjBF23G3wPyaKZLK21G0=
Subject key identifier:   82:B8:B6:3B:69:68:02:EE:0C:79:65:63:6F:8E:D1:6F:EC:F6:30:AF
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       01962E619B2EBCD4FFD65CC02D038FFCAE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          0197
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
                          2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: U7e0n9Dv1MjnS0XwZie8Gn4mfPGV5PJaprZ3foYizv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9b:2e:bc:d4:ff:d6:5c:c0:2d:03:8f:fc:ae:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=82b8b63b696802ee0c7965636f8ed16fecf630af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:42:bd:6b:4a:79:b1:32:01:23:5a:30:1f:
                    9e:2c:a0:0f:fe:29:78:33:d4:83:10:4c:9e:c1:f6:
                    b6:2e:bf:32:de:65:93:16:ac:c6:84:f6:0d:66:94:
                    41:79:43:35:43:e0:fd:6b:10:e9:6c:65:b4:27:95:
                    cc:6b:22:c6:51:b7:b0:02:c3:44:bb:94:8b:1e:57:
                    48:1e:27:2d:26:e0:90:3f:b5:09:03:80:9e:aa:20:
                    da:17:e8:43:5b:c0:0d:6b:c0:81:32:a3:1d:05:97:
                    c9:cc:be:26:02:7a:48:54:57:72:86:d1:54:97:a9:
                    83:bb:44:26:39:b0:36:c4:c1:55:b0:e4:52:56:81:
                    63:fc:41:45:46:dd:5d:ad:fc:a4:45:0c:e4:9c:68:
                    82:72:b4:c3:5e:1b:c2:3d:76:f7:9b:ee:ac:86:f7:
                    b2:4d:1e:ca:63:ab:26:88:25:3f:21:7a:3e:76:20:
                    fe:0a:ed:c1:bc:00:33:2b:da:9d:06:c1:75:05:69:
                    17:68:c9:c5:77:32:ca:20:0e:a2:1f:de:ec:91:83:
                    69:09:ea:38:86:b6:f7:25:e8:0a:5e:c0:3e:db:49:
                    cd:c2:1b:a9:40:93:4a:48:4f:30:5c:a4:60:20:92:
                    d6:49:a4:59:75:2d:44:ae:f0:61:74:3f:41:93:9e:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:B6:3B:69:68:02:EE:0C:79:65:63:6F:8E:D1:6F:EC:F6:30:AF
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:17:b7:91:55:d4:52:db:89:0c:2e:5a:65:54:35:dd:84:5b:
         2a:7f:a3:fa:2f:e7:91:eb:82:91:b8:e6:53:b1:49:de:c3:eb:
         bf:b0:52:98:97:0b:bb:6d:e8:f0:38:19:b9:24:ed:e3:e6:60:
         95:c1:77:09:ea:6d:8a:9e:25:37:a8:00:20:fc:a2:c1:bd:80:
         2c:ea:05:2a:12:b3:f9:f8:ff:52:41:41:4b:7b:6f:1e:8c:e4:
         c7:fa:66:25:c1:3e:e8:5a:7b:4c:56:ab:48:74:69:5b:d0:9e:
         fd:92:c9:f3:3e:a6:84:7a:e9:dc:bf:7c:c9:36:65:ca:c7:2a:
         08:86:e1:ac:eb:91:39:e3:20:2b:2c:2e:44:2b:e0:03:f1:72:
         e6:8f:c6:ab:29:3a:ee:e1:d8:9d:e7:be:4d:79:f0:46:ee:35:
         05:c5:48:4f:f9:16:1e:c5:9f:01:f8:f4:63:d3:cd:e8:de:13:
         66:2b:14:8b:83:a2:0a:27:95:41:05:b2:98:9e:b5:de:6e:73:
         d5:69:33:eb:7d:ed:19:59:1e:a5:70:de:7f:dc:8a:d0:b6:4d:
         8f:af:35:27:97:82:40:e4:39:e0:a3:f3:6e:45:4a:4d:3a:36:
         ec:8f:c2:9a:4b:f2:9d:f6:94:7a:96:70:fd:f0:ab:2e:09:8c:
         82:39:02:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZsuvNT/1lzALQOP/K5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDFhNDA2ZmRmZmVlMjU5Mzg0OTZiZTVhYzlhNTNlMWJi
OWM2NTkwHhcNMjUwNDEzMDkwMTEwWhcNMjUwNDE0MDkwMTEwWjAzMTEwLwYDVQQD
Eyg4MmI4YjYzYjY5NjgwMmVlMGM3OTY1NjM2ZjhlZDE2ZmVjZjYzMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyBCvWtKebEyASNaMB+eLKAP/il4
M9SDEEyewfa2Lr8y3mWTFqzGhPYNZpRBeUM1Q+D9axDpbGW0J5XMayLGUbewAsNE
u5SLHldIHictJuCQP7UJA4CeqiDaF+hDW8ANa8CBMqMdBZfJzL4mAnpIVFdyhtFU
l6mDu0QmObA2xMFVsORSVoFj/EFFRt1drfykRQzknGiCcrTDXhvCPXb3m+6shvey
TR7KY6smiCU/IXo+diD+Cu3BvAAzK9qdBsF1BWkXaMnFdzLKIA6iH97skYNpCeo4
hrb3JegKXsA+20nNwhupQJNKSE8wXKRgIJLWSaRZdS1ErvBhdD9Bk57LnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK4tjtpaALuDHllY2+O0W/s9jCvMB8GA1UdIwQY
MBaAFFlBpAb9/+4lk4SWvlrJpT4bucZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUt
OWI0ZmZkMDhlMDQ4LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUtOWI0ZmZkMDhlMDQ4
LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhe3kVXU
UtuJDC5aZVQ13YRbKn+j+i/nkeuCkbjmU7FJ3sPrv7BSmJcLu23o8DgZuSTt4+Zg
lcF3Ceptip4lN6gAIPyiwb2ALOoFKhKz+fj/UkFBS3tvHozkx/pmJcE+6Fp7TFar
SHRpW9Ce/ZLJ8z6mhHrp3L98yTZlyscqCIbhrOuROeMgKywuRCvgA/Fy5o/Gqyk6
7uHYnee+TXnwRu41BcVIT/kWHsWfAfj0Y9PN6N4TZisUi4OiCieVQQWymJ613m5z
1Wkz633tGVkepXDef9yK0LZNj681J5eCQOQ54KPzbkVKTTo27I/CmkvynfaUepZw
/fCrLgmMgjkC5w==
-----END CERTIFICATE-----