Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File:                     wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier:          DOpIb/Xl3YX4V6AJ94+8esM4cgZVhCpwOvdnzP68OC4=
Subject key identifier:   C2:A9:13:60:72:AE:5B:78:5F:18:45:63:B3:91:C1:44:4F:85:83:DE
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer:       /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial:       01962E99C65C17A7794FFEC76A81680BA95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=)
                          2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: 8937+eWckRB3gAmwA9fAnXqJ6muZay39hzIPiQHOUwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c6:5c:17:a7:79:4f:fe:c7:6a:81:68:0b:a9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=c2a9136072ae5b785f184563b391c1444f8583de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:12:7b:8c:a5:85:f7:53:01:b4:1a:40:94:
                    1e:cf:15:d5:33:fe:a1:a0:d3:48:2b:29:d7:f8:a1:
                    bb:74:23:e3:a7:88:17:ae:4e:86:cb:18:0e:96:06:
                    3f:3b:2d:24:78:1b:1f:fb:84:42:b8:c4:86:ff:6b:
                    cf:b4:1b:5a:f9:a6:30:ee:94:8d:e1:b5:0b:b1:eb:
                    76:c4:4b:59:59:35:5f:27:09:20:1e:ae:90:27:9b:
                    4a:bc:6f:3b:25:61:06:e5:f5:c1:ff:a4:6f:26:1c:
                    c1:ef:95:1b:2e:58:8c:48:ec:da:64:d4:7c:86:5e:
                    3a:2a:75:92:c4:a1:8b:83:d5:d0:ba:0f:f6:47:4e:
                    7c:0c:fb:64:b1:e0:5e:05:2c:20:60:82:5f:83:cb:
                    6b:e9:51:1c:eb:dc:ec:a6:8c:29:f9:f3:03:db:09:
                    6d:b8:c5:19:2b:0f:a8:b6:9b:c8:f1:4e:d3:86:cc:
                    c9:63:2e:58:3d:05:21:20:75:37:88:b6:cd:d2:fa:
                    e7:d8:84:8f:0e:42:38:ea:e5:cd:72:5f:b5:ee:6d:
                    b9:fa:5c:73:e7:8c:32:57:52:13:a1:7c:61:91:68:
                    39:c7:bf:bf:cb:ef:bd:ed:9b:d5:42:6b:96:e7:3c:
                    de:12:ca:57:d3:0a:1e:11:20:ac:02:b2:91:f9:54:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A9:13:60:72:AE:5B:78:5F:18:45:63:B3:91:C1:44:4F:85:83:DE
            X509v3 Authority Key Identifier:
                keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:a7:1b:75:d0:36:63:d1:8f:43:43:c5:f9:76:49:91:47:
         54:ef:14:d6:fa:ac:ab:fe:95:a5:3a:f8:2e:86:b6:1e:9b:51:
         4b:43:7e:d2:b6:9c:28:68:44:6e:6a:42:05:1a:57:bc:e5:a3:
         93:ac:72:d5:60:b8:84:56:f6:83:b0:2e:65:dc:67:04:ed:58:
         af:eb:d9:2a:d8:a7:4c:09:fa:10:fb:83:d9:58:65:b5:5e:63:
         f2:a0:1d:40:a0:0a:e0:82:25:d4:39:a6:56:7c:93:f0:ad:66:
         89:5f:db:67:c5:45:7c:df:2f:5f:22:0e:8a:c2:0c:a4:9a:d3:
         e7:c6:f0:3f:d9:48:66:2b:59:4d:c5:5b:98:a0:0b:27:f3:2e:
         cd:9d:89:e2:5f:c2:b4:30:83:15:0e:27:41:a6:d0:4b:10:82:
         ff:67:bc:70:ac:99:6b:67:25:ac:79:e9:45:26:c7:25:55:7a:
         4d:d5:76:ff:23:e7:2f:1e:d4:49:5d:2e:91:ea:70:da:f3:f3:
         7d:3a:74:92:c1:dd:88:83:7c:66:40:e8:c3:ea:96:7f:0d:1f:
         e2:c7:7f:5c:4a:33:32:bb:c1:96:80:61:13:96:55:2f:49:f6:
         29:33:05:c0:d4:48:5d:ca:23:c3:5a:8c:17:36:64:88:88:46:
         a1:2a:f2:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumcZcF6d5T/7HaoFoC6leMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5
MzA3YjcwHhcNMjUwNDEzMTAwMjMxWhcNMjUwNDE0MTAwMjMxWjAzMTEwLwYDVQQD
EyhjMmE5MTM2MDcyYWU1Yjc4NWYxODQ1NjNiMzkxYzE0NDRmODU4M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFASe4ylhfdTAbQaQJQezxXVM/6h
oNNIKynX+KG7dCPjp4gXrk6GyxgOlgY/Oy0keBsf+4RCuMSG/2vPtBta+aYw7pSN
4bULset2xEtZWTVfJwkgHq6QJ5tKvG87JWEG5fXB/6RvJhzB75UbLliMSOzaZNR8
hl46KnWSxKGLg9XQug/2R058DPtkseBeBSwgYIJfg8tr6VEc69zspowp+fMD2wlt
uMUZKw+otpvI8U7ThszJYy5YPQUhIHU3iLbN0vrn2ISPDkI46uXNcl+17m25+lxz
54wyV1IToXxhkWg5x7+/y++97ZvVQmuW5zzeEspX0woeESCsArKR+VRZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKpE2Byrlt4XxhFY7ORwURPhYPeMB8GA1UdIwQY
MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt
ZTRjNzE4MDczMGNiLzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi
LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbynG3XQ
NmPRj0NDxfl2SZFHVO8U1vqsq/6VpTr4Loa2HptRS0N+0racKGhEbmpCBRpXvOWj
k6xy1WC4hFb2g7AuZdxnBO1Yr+vZKtinTAn6EPuD2VhltV5j8qAdQKAK4IIl1Dmm
VnyT8K1miV/bZ8VFfN8vXyIOisIMpJrT58bwP9lIZitZTcVbmKALJ/MuzZ2J4l/C
tDCDFQ4nQabQSxCC/2e8cKyZa2clrHnpRSbHJVV6TdV2/yPnLx7USV0ukepw2vPz
fTp0ksHdiIN8ZkDow+qWfw0f4sd/XEozMrvBloBhE5ZVL0n2KTMFwNRIXcojw1qM
FzZkiIhGoSry+A==
-----END CERTIFICATE-----