Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File:                     wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier:          BiGk2WDbYnE9N6wMZKwuT0qTUHQgHMS9/V+wOf1H/t8=
Subject key identifier:   61:2C:03:F8:7C:4F:85:95:53:53:BD:0D:3E:64:5D:C8:9A:04:22:C3
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       01962DF42DA36E6773CE1D0C2C5C13899430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
                          2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
                          3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
                          4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: kVdb+J7zACYJsMwOaspTkdjoWytAXT1v0XQ89DHVV54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:a3:6e:67:73:ce:1d:0c:2c:5c:13:89:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=612c03f87c4f85955353bd0d3e645dc89a0422c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:ac:9d:c3:36:d3:53:1e:51:54:34:1a:e7:
                    84:bf:8f:54:9f:4e:ee:e2:bf:9c:6d:14:59:db:9a:
                    da:46:19:6e:64:be:14:e6:37:14:27:24:10:fe:e7:
                    34:00:16:6c:96:f8:dd:e5:3f:18:00:be:2c:59:7f:
                    15:da:eb:2d:e2:69:70:ed:38:ff:62:7e:07:9a:4a:
                    f3:0b:49:89:a5:ca:2b:bd:58:06:2d:89:60:68:50:
                    27:d5:24:86:11:a6:3a:bb:e6:32:e0:44:bc:47:5a:
                    12:29:03:4d:9b:9a:cc:36:d7:fb:8c:17:4d:f8:7d:
                    78:0b:7e:4b:f7:4b:d2:e1:7d:4f:63:5b:4c:2e:63:
                    5a:38:d3:3a:ea:93:cb:7a:eb:30:bf:bb:1a:a3:ec:
                    29:dd:b0:37:71:0e:18:a4:28:b3:b8:e2:15:5c:ca:
                    64:1d:c1:13:8a:93:d3:11:86:ea:f0:96:cd:5b:84:
                    bf:0c:a0:78:31:36:d3:8a:ff:b8:69:24:ef:03:0b:
                    b2:6e:b9:69:33:24:aa:00:80:db:df:b8:bd:25:c4:
                    7f:bd:07:86:e6:40:28:6f:50:2a:0f:a9:f8:54:85:
                    66:fa:9f:27:ce:c8:d3:f3:8f:2a:5c:ca:c0:7e:93:
                    d4:12:73:09:ce:db:15:4e:f1:5a:1b:4d:cc:db:75:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2C:03:F8:7C:4F:85:95:53:53:BD:0D:3E:64:5D:C8:9A:04:22:C3
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:4a:24:e3:9c:42:47:8a:1c:68:0e:73:42:8a:35:6d:ce:
         ab:c8:cb:78:9f:9c:c2:93:6b:9e:c2:60:9c:d9:83:74:5f:05:
         bf:14:9d:e9:40:30:64:18:f9:fa:54:49:65:cb:d0:99:94:69:
         44:0d:d1:1a:a0:f2:f6:ec:27:f0:14:07:19:43:27:7d:81:cd:
         c2:51:e0:1c:8c:dd:e3:4b:58:a4:3d:7f:8d:96:8c:aa:1e:4e:
         4b:bd:da:58:83:57:f8:e6:c4:24:c6:6b:e2:38:47:72:56:a1:
         3a:d2:cc:86:6e:c6:11:56:ee:78:5d:e6:42:46:89:77:e9:e4:
         67:1f:2c:d4:58:fb:07:81:a7:71:1a:16:43:3a:6f:7d:35:b6:
         01:c6:92:e3:06:5d:a0:bf:b0:6b:17:07:5f:8f:a1:d4:94:96:
         d4:c1:7c:6c:39:df:7a:cf:d3:51:cf:ae:a4:6a:22:5a:fd:ac:
         fc:02:2a:89:94:90:b2:67:a8:5f:53:fe:ec:9a:7e:df:ab:ce:
         4d:7d:42:4d:c4:4a:5f:4f:a2:4b:98:9b:a1:0d:e0:a4:30:d1:
         49:48:ad:72:fb:c7:db:f1:28:ec:bc:64:22:c3:49:9d:fd:70:
         25:5b:48:ba:d7:ad:1b:92:11:5e:ec:20:29:4f:64:a9:a4:98:
         aa:cb:47:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9C2jbmdzzh0MLFwTiZQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYWZjMTRkY2U0NTBiMDVlYzg2YzdjNTMwNzBjZDZiYjZk
YmM3ZWUwHhcNMjUwNDEzMDcwMTM5WhcNMjUwNDE0MDcwMTM5WjAzMTEwLwYDVQQD
Eyg2MTJjMDNmODdjNGY4NTk1NTM1M2JkMGQzZTY0NWRjODlhMDQyMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G6sncM201MeUVQ0GueEv49Un07u
4r+cbRRZ25raRhluZL4U5jcUJyQQ/uc0ABZslvjd5T8YAL4sWX8V2ust4mlw7Tj/
Yn4HmkrzC0mJpcorvVgGLYlgaFAn1SSGEaY6u+Yy4ES8R1oSKQNNm5rMNtf7jBdN
+H14C35L90vS4X1PY1tMLmNaONM66pPLeuswv7sao+wp3bA3cQ4YpCizuOIVXMpk
HcETipPTEYbq8JbNW4S/DKB4MTbTiv+4aSTvAwuybrlpMySqAIDb37i9JcR/vQeG
5kAob1AqD6n4VIVm+p8nzsjT848qXMrAfpPUEnMJztsVTvFaG03M23UbiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEsA/h8T4WVU1O9DT5kXciaBCLDMB8GA1UdIwQY
MBaAFMKvwU3ORQsF7IbHxTBwzWu228fuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgt
MTg0N2NiODhlODNhLzEvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgtMTg0N2NiODhlODNh
LzEvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnlKJOOc
QkeKHGgOc0KKNW3Oq8jLeJ+cwpNrnsJgnNmDdF8FvxSd6UAwZBj5+lRJZcvQmZRp
RA3RGqDy9uwn8BQHGUMnfYHNwlHgHIzd40tYpD1/jZaMqh5OS73aWINX+ObEJMZr
4jhHclahOtLMhm7GEVbueF3mQkaJd+nkZx8s1Fj7B4GncRoWQzpvfTW2AcaS4wZd
oL+waxcHX4+h1JSW1MF8bDnfes/TUc+upGoiWv2s/AIqiZSQsmeoX1P+7Jp+36vO
TX1CTcRKX0+iS5iboQ3gpDDRSUitcvvH2/Eo7LxkIsNJnf1wJVtIutetG5IRXuwg
KU9kqaSYqstH0Q==
-----END CERTIFICATE-----