Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          TYw3iojRl/bKqbmtc9R5iUJD+Cq9nOsT6IaP9VW32sk=
Subject key identifier:   C2:E5:02:2A:6F:A9:A6:F7:64:C9:0B:20:B2:61:A4:18:3C:FC:58:1F
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       01962E6192510AEFCB58E5200A9AB17E27C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: kkegATyt5eLk0evBixUjqlYs16bEff34zyz4xm0hqHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:92:51:0a:ef:cb:58:e5:20:0a:9a:b1:7e:27:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=c2e5022a6fa9a6f764c90b20b261a4183cfc581f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:47:f2:36:a1:de:b2:64:25:c7:d8:82:4d:
                    6d:de:bf:18:63:f2:93:3d:91:66:0d:24:90:3d:8c:
                    87:34:09:87:f6:e0:87:46:ff:7c:74:f7:2f:7c:7c:
                    8a:a5:30:54:94:90:cd:e7:ea:46:22:ec:00:0f:a4:
                    28:ad:10:eb:f5:05:0b:f1:c0:09:ff:1b:2c:e8:22:
                    a5:a3:ef:eb:a6:7c:da:20:2f:57:3b:aa:94:bd:c5:
                    a1:57:a5:3a:f8:ad:5e:f7:81:25:4e:37:8f:08:d0:
                    46:be:ab:f2:46:16:7e:bf:d2:63:aa:14:3e:5d:b5:
                    51:03:98:ac:38:ef:ad:0b:1c:c1:77:a2:dd:b4:3a:
                    32:4a:1b:1b:58:04:3f:09:42:4f:13:56:81:23:51:
                    fe:93:7f:ee:fb:1f:52:1c:9c:29:d0:1c:9b:ee:c2:
                    34:eb:5b:46:4a:75:01:3c:f1:60:ee:16:e8:4b:5b:
                    0c:42:33:4d:35:b4:ef:f0:c0:d5:59:4e:35:91:46:
                    e4:ce:82:89:52:25:12:55:45:10:a0:0f:50:e8:4a:
                    37:a4:ca:bb:6e:38:61:d5:e9:26:16:e7:ae:66:17:
                    05:50:2d:6e:77:ec:f3:c7:b2:b2:36:7e:55:65:23:
                    a8:85:aa:d5:38:5c:69:3b:fc:9a:f6:30:93:42:c1:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E5:02:2A:6F:A9:A6:F7:64:C9:0B:20:B2:61:A4:18:3C:FC:58:1F
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:a6:5e:5c:e1:cd:bd:75:9b:11:ea:df:ce:5f:98:23:4e:
         c8:dc:c2:af:7d:21:97:73:d7:2d:aa:c9:7c:18:bc:16:4e:6a:
         db:60:ff:d3:1c:71:80:a9:b0:38:9f:c3:3e:25:32:1a:1a:86:
         34:7f:d8:a1:05:ee:d2:98:c2:e3:5e:d2:3d:c9:b6:c2:9f:9c:
         c2:f2:b2:b0:97:ad:75:7f:0a:8d:1b:89:c5:e7:41:e9:1c:4f:
         12:0c:78:e5:1a:e7:28:23:e1:12:12:2f:a1:0a:98:bd:98:cb:
         0c:69:35:05:88:ee:6a:a1:94:ee:a0:d7:4a:03:51:c9:5d:bd:
         8e:4e:a4:5b:34:f9:d0:5a:2b:71:eb:ae:97:bf:42:19:e4:6b:
         a2:08:1d:92:6b:68:10:23:d0:d7:2d:4b:f5:d7:94:24:fb:b3:
         86:38:52:cc:f6:05:67:e9:79:8a:05:16:ea:d9:59:0b:a6:03:
         71:d4:cc:3b:41:ff:c2:d7:e9:9c:30:23:12:26:fc:ae:e4:c0:
         39:64:72:a3:d5:bb:06:94:bb:d2:7d:59:a9:ec:53:ff:3c:44:
         07:ca:8a:24:7c:84:85:f2:b1:d1:bf:78:8b:0a:8b:bc:3d:93:
         bd:be:b9:73:76:c9:84:1d:8a:dd:a3:5c:a0:ac:20:dc:1e:ec:
         f7:b3:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----