Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File:                     wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier:          KtO2XH448b5LpSGv5cnN2sVLu7Ltm2rFboAgNj2kobU=
Subject key identifier:   B4:5E:10:07:D8:8B:55:CE:81:DD:34:81:C3:1F:CB:23:3E:C1:19:50
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       01962F74A93D86A30D7B272B94D10FDF7B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number:          150D
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=)
                          2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=)
                          3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=)
                          4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=)
                          5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=)
                          6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=)
                          7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=)
                          8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=)
                          9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: DyRXrIyrHCXPfDCsocAQ+yXRFOgcWoDI4kzar/Rmo9s=)
                          10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a9:3d:86:a3:0d:7b:27:2b:94:d1:0f:df:7b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=b45e1007d88b55ce81dd3481c31fcb233ec11950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:8c:71:5d:01:45:b1:6e:88:de:0a:82:18:
                    47:68:ed:1e:16:41:0c:a9:ad:34:af:2d:1e:0c:00:
                    e2:78:21:bf:e9:a8:71:45:03:4b:c3:17:ca:82:85:
                    21:d3:7f:d4:99:58:56:c1:3c:cd:ae:38:83:5e:7d:
                    5f:da:a3:a7:01:7a:86:5d:f3:75:df:87:fd:24:ce:
                    5a:60:66:68:9f:19:a8:ed:1d:d9:a4:16:4e:a0:27:
                    9a:2d:5d:fa:55:3f:74:53:b5:05:e1:0c:39:9a:3d:
                    50:21:8e:ab:25:b2:4c:1e:88:07:a1:48:aa:ed:3d:
                    81:69:8c:5a:ee:01:d9:66:4a:42:39:3b:46:df:8e:
                    f9:61:19:85:bf:f5:96:e6:53:75:fd:63:1a:70:a9:
                    e2:17:a3:34:68:36:66:e9:76:12:ad:a3:70:10:11:
                    99:89:c5:61:a4:30:ac:61:0f:37:6c:6a:1e:38:10:
                    a2:75:08:6f:03:49:1f:70:6d:3c:20:44:09:8a:63:
                    11:69:a3:a8:9c:12:b9:5a:c6:00:44:5b:59:98:65:
                    e1:18:06:6b:f7:40:69:b0:8c:bd:00:d8:33:44:b1:
                    57:60:98:10:e1:27:58:4e:a2:89:cb:8a:50:a9:83:
                    09:91:55:df:c2:91:7f:d8:70:76:d1:2d:f8:db:77:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:10:07:D8:8B:55:CE:81:DD:34:81:C3:1F:CB:23:3E:C1:19:50
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:31:8f:53:8c:9a:92:3a:9d:17:99:9d:b2:47:90:48:43:02:
         c4:0f:3c:e1:f4:2b:88:bf:09:c3:51:44:96:09:e7:ac:e7:19:
         39:fc:a0:21:28:10:e1:a1:20:c7:a2:b9:b7:35:ed:06:b4:3d:
         bb:63:a9:f8:58:e5:77:ae:2b:f1:8e:dc:e4:f2:c2:85:dc:bc:
         e9:a7:61:a1:84:28:f3:e4:86:60:b1:89:2a:c9:bd:b5:12:3a:
         62:44:21:31:e5:9f:ce:94:79:3a:dd:39:2c:3a:86:9c:8f:78:
         d2:b2:e8:fd:f5:73:7a:b1:30:fe:79:d2:08:87:d8:60:64:1c:
         fe:45:cd:40:41:61:47:e4:e6:81:0c:a6:b1:fa:ba:9d:c1:82:
         64:01:57:7a:4b:57:17:35:5a:9f:2c:95:f0:15:8c:18:53:8f:
         e3:51:36:a4:cb:af:3c:07:78:c3:65:cc:e7:62:83:6e:e7:b8:
         27:9f:c8:27:27:93:f4:b2:4b:0c:22:58:a7:95:52:80:a1:14:
         c4:6a:34:ee:87:50:a9:2a:07:79:2c:d1:ec:36:19:76:b4:56:
         1b:d8:4f:79:19:53:c7:e0:c1:65:3b:6a:f7:a8:40:e3:a8:04:
         d4:37:71:f9:7a:37:25:f9:b2:1a:dc:b5:b7:95:3f:a6:d6:fc:
         f6:42:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----