Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File:                     wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier:          fTd+dARlMBeKNp5njc4OCtyedbP/0xOvjX5PCFR53BQ=
Subject key identifier:   83:70:58:EE:3D:2B:17:0D:93:C8:B0:0E:23:F7:2B:0E:79:FF:8B:94
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer:       /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial:       01962ECFBF7D9A238B33BF4F4D4956D40641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
                          2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: JoCfysu+XJqU7zsFX5U26Iyk+IyQ52hIauMtOYFzGDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bf:7d:9a:23:8b:33:bf:4f:4d:49:56:d4:06:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=837058ee3d2b170d93c8b00e23f72b0e79ff8b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:a9:c2:d7:9e:65:fc:6c:b8:0a:2a:ee:56:
                    ae:ce:4a:53:e3:06:98:06:ab:5c:14:57:53:16:b1:
                    22:47:08:ea:50:02:93:fe:5a:dc:e9:08:bd:05:28:
                    8a:de:6b:8b:ea:86:28:de:b5:9d:1a:ca:3f:f8:14:
                    21:d7:3b:3e:e4:e9:86:e5:3d:97:d3:48:c6:81:f2:
                    72:7d:8c:54:34:84:74:1d:d0:c7:ea:fc:11:48:50:
                    09:c3:9a:fd:b4:88:bd:b3:42:3e:56:f7:f5:11:9c:
                    18:af:42:da:88:51:c5:c0:2f:33:bf:ed:51:0e:7e:
                    d0:78:dc:bc:43:c5:d7:44:b1:fa:13:e2:ae:9c:d1:
                    aa:0d:3a:9c:b5:0e:7f:c0:6e:cd:f5:30:68:03:01:
                    7f:fd:78:0b:4f:40:cc:da:d9:43:fb:66:33:13:4d:
                    d1:ef:c8:c3:70:4a:ce:4b:36:00:0c:66:e3:d4:50:
                    0e:31:e7:cf:26:ca:be:99:e5:98:c3:52:11:57:16:
                    64:05:8b:69:93:f7:51:09:e1:14:17:77:9e:f2:cb:
                    c3:5a:1a:39:fb:9e:a6:fb:b8:5b:00:b4:34:06:af:
                    ad:cd:20:31:c5:fc:30:e6:65:5e:83:9b:64:84:4b:
                    dc:b5:0a:cd:6a:a5:31:4c:fe:1f:ea:da:fe:53:15:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:58:EE:3D:2B:17:0D:93:C8:B0:0E:23:F7:2B:0E:79:FF:8B:94
            X509v3 Authority Key Identifier:
                keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:51:83:87:c1:89:0e:ea:5a:7c:f5:d3:10:66:3c:56:c6:
         06:a7:d9:b8:59:34:d9:00:7f:dd:fa:42:1f:af:5e:54:7d:ea:
         18:b2:83:20:e6:d9:9c:67:a0:4e:e0:f5:64:aa:51:41:ee:9f:
         c3:1a:f0:72:41:e7:e0:52:a4:65:5e:87:e1:73:f2:81:a5:c0:
         aa:8a:b7:e9:af:22:26:da:2d:c2:0b:74:db:ea:81:22:10:ca:
         35:08:92:a5:ee:bf:c1:ab:ba:f9:2b:59:2f:65:22:dd:d4:c1:
         7a:17:b5:ac:75:3e:ef:f7:60:88:5c:03:71:72:18:1e:94:7e:
         25:06:e5:6b:4f:3c:50:3d:8b:ec:2d:89:b6:37:0a:a4:17:74:
         d3:14:b6:a0:32:9a:1e:a4:c0:95:23:70:13:33:54:ac:db:b2:
         ba:fe:79:2d:95:34:71:11:cf:8d:8a:81:8f:da:d6:be:a0:e8:
         40:d0:2a:64:de:66:90:9b:e4:d0:24:e1:f7:3c:b5:06:56:04:
         8d:4f:b8:0d:ea:d7:04:59:f5:10:80:bf:2e:01:ec:c1:a4:82:
         a5:a2:2a:8f:53:12:5d:d4:e8:eb:54:c9:08:b8:c3:75:23:31:
         94:a8:58:8b:ea:f2:4f:2f:75:d4:91:11:50:03:e9:82:c8:e0:
         4c:aa:17:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz799miOLM79PTUlW1AZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5
MjVhNzIwHhcNMjUwNDEzMTEwMTI4WhcNMjUwNDE0MTEwMTI4WjAzMTEwLwYDVQQD
Eyg4MzcwNThlZTNkMmIxNzBkOTNjOGIwMGUyM2Y3MmIwZTc5ZmY4Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tCpwteeZfxsuAoq7lauzkpT4waY
BqtcFFdTFrEiRwjqUAKT/lrc6Qi9BSiK3muL6oYo3rWdGso/+BQh1zs+5OmG5T2X
00jGgfJyfYxUNIR0HdDH6vwRSFAJw5r9tIi9s0I+Vvf1EZwYr0LaiFHFwC8zv+1R
Dn7QeNy8Q8XXRLH6E+KunNGqDTqctQ5/wG7N9TBoAwF//XgLT0DM2tlD+2YzE03R
78jDcErOSzYADGbj1FAOMefPJsq+meWYw1IRVxZkBYtpk/dRCeEUF3ee8svDWho5
+56m+7hbALQ0Bq+tzSAxxfww5mVeg5tkhEvctQrNaqUxTP4f6tr+UxV7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINwWO49KxcNk8iwDiP3Kw55/4uUMB8GA1UdIwQY
MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt
MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3
LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY15Rg4fB
iQ7qWnz10xBmPFbGBqfZuFk02QB/3fpCH69eVH3qGLKDIObZnGegTuD1ZKpRQe6f
wxrwckHn4FKkZV6H4XPygaXAqoq36a8iJtotwgt02+qBIhDKNQiSpe6/wau6+StZ
L2Ui3dTBehe1rHU+7/dgiFwDcXIYHpR+JQbla088UD2L7C2JtjcKpBd00xS2oDKa
HqTAlSNwEzNUrNuyuv55LZU0cRHPjYqBj9rWvqDoQNAqZN5mkJvk0CTh9zy1BlYE
jU+4DerXBFn1EIC/LgHswaSCpaIqj1MSXdTo61TJCLjDdSMxlKhYi+ryTy911JER
UAPpgsjgTKoXOA==
-----END CERTIFICATE-----