Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.mft
File:                     WwFrAHEUKca8MbA4M_L14U2NMEk.mft (raw, json)
Hash identifier:          H+Ksq9cH8JPxDrFlJqlS9iyXH9AhAhLLDm4R28xX+Ew=
Subject key identifier:   2E:AC:EE:08:06:90:E1:FD:A3:4B:0A:D6:44:06:FB:F5:95:24:7C:3C
Authority key identifier: 5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
Certificate issuer:       /CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
Certificate serial:       018C7B4C53DF49C766B14B27ECE782B7CFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.mft
Manifest number:          085D
Signing time:             Mon 18 Dec 2023 05:00:48 +0000
Manifest this update:     Mon 18 Dec 2023 05:00:48 +0000
Manifest next update:     Tue 19 Dec 2023 05:00:48 +0000
Files and hashes:         1: OcbsIvk5_hW2oAHjB0eLed0aRFQ.roa (hash: QryTawVwXKaE/nU4uidLnz4zFpZOMVlXe5/FfqLOHp0=)
                          2: WwFrAHEUKca8MbA4M_L14U2NMEk.crl (hash: EpACvanpjBGVV7UUPeOMVm052DLZfQ7OnP0KUDcAT5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:4c:53:df:49:c7:66:b1:4b:27:ec:e7:82:b7:cf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
        Validity
            Not Before: Dec 18 05:00:48 2023 GMT
            Not After : Dec 19 05:00:48 2023 GMT
        Subject: CN=2eacee080690e1fda34b0ad64406fbf595247c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:af:f2:dd:01:b1:b1:f5:fb:bd:95:0f:16:
                    b9:9d:41:20:cb:61:fb:73:25:3d:b6:ea:2d:8b:67:
                    c7:95:70:f5:82:10:e7:31:51:80:d6:8a:62:57:33:
                    25:ae:41:19:23:21:04:0f:78:6c:53:0a:51:c4:c6:
                    62:03:27:f4:ed:d5:b8:fd:89:d7:3d:7e:d6:7c:26:
                    7e:04:57:87:12:b6:0c:7d:34:59:01:2a:45:f5:c9:
                    cd:5b:3b:41:10:c1:17:25:6f:19:39:ca:e6:2f:75:
                    07:7c:ac:33:2a:8c:18:2d:5a:19:b1:a1:86:5c:2c:
                    a7:38:08:a4:ca:0a:db:3f:be:79:3b:f0:eb:14:e1:
                    ba:3f:35:2a:fc:b0:4a:3d:16:b9:9d:96:b0:a0:32:
                    bf:40:38:fb:a2:f6:11:f3:ba:9f:1b:56:7f:36:e2:
                    49:2f:40:fd:5e:cf:01:b5:fc:2e:4a:7d:5f:d2:4a:
                    52:7f:e4:c8:11:b9:ab:4a:bc:88:4f:a8:b0:29:06:
                    a7:32:e3:8e:3f:10:d5:84:a5:6c:dc:05:6c:98:2c:
                    a0:84:77:20:83:8f:bd:94:09:2f:d5:8a:c5:1e:35:
                    39:3c:16:2c:22:97:af:33:e0:3b:e8:2b:01:41:46:
                    1c:11:20:ff:82:52:92:3f:1b:e6:df:c0:a9:d8:43:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:EE:08:06:90:E1:FD:A3:4B:0A:D6:44:06:FB:F5:95:24:7C:3C
            X509v3 Authority Key Identifier:
                keyid:5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:1d:31:1d:e3:9a:5d:16:70:7c:fe:65:0f:57:ea:b4:c7:
         83:be:c2:2b:5a:8d:e8:98:12:12:db:d3:ca:c3:d3:33:ec:b8:
         63:04:9c:49:2c:2b:24:83:40:74:54:39:62:89:fd:1c:86:08:
         a8:ff:2b:de:ec:b4:29:04:55:6e:fa:62:52:f4:83:f1:c4:47:
         fd:96:21:c8:f4:48:25:30:11:74:98:c1:7c:22:ce:af:38:47:
         17:b3:25:63:6a:25:15:14:4b:67:e0:bc:d9:ba:09:c6:a3:70:
         fd:c5:c4:b0:43:cf:a7:53:c2:07:80:0e:b0:57:9d:50:fe:2b:
         17:e8:c3:6a:c2:65:e1:fe:91:a5:f1:2f:14:d5:59:67:90:25:
         28:f7:07:55:1d:c9:d9:a5:a5:72:34:5a:33:fe:a9:36:c9:cc:
         7c:63:74:f0:f4:37:64:59:f8:32:43:43:87:c0:bc:35:68:2d:
         11:2c:98:d2:85:aa:72:40:75:98:3d:df:b0:8d:63:a0:6a:0b:
         de:4e:8f:e5:c9:25:f5:b5:7e:9d:ca:c8:50:ae:19:6a:91:f3:
         ca:45:7d:dc:5b:f2:2f:09:46:40:e4:98:f7:db:92:07:22:fa:
         41:69:95:6a:3e:b0:ac:42:fa:e3:fc:fb:c0:75:3b:01:92:a3:
         5b:8a:68:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYx7TFPfScdmsUsn7OeCt8/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDE2YjAwNzExNDI5YzZiYzMxYjAzODMzZjJmNWUxNGQ4
ZDMwNDkwHhcNMjMxMjE4MDUwMDQ4WhcNMjMxMjE5MDUwMDQ4WjAzMTEwLwYDVQQD
EygyZWFjZWUwODA2OTBlMWZkYTM0YjBhZDY0NDA2ZmJmNTk1MjQ3YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY6v8t0BsbH1+72VDxa5nUEgy2H7
cyU9tuoti2fHlXD1ghDnMVGA1opiVzMlrkEZIyEED3hsUwpRxMZiAyf07dW4/YnX
PX7WfCZ+BFeHErYMfTRZASpF9cnNWztBEMEXJW8ZOcrmL3UHfKwzKowYLVoZsaGG
XCynOAikygrbP755O/DrFOG6PzUq/LBKPRa5nZawoDK/QDj7ovYR87qfG1Z/NuJJ
L0D9Xs8BtfwuSn1f0kpSf+TIEbmrSryIT6iwKQanMuOOPxDVhKVs3AVsmCyghHcg
g4+9lAkv1YrFHjU5PBYsIpevM+A76CsBQUYcESD/glKSPxvm38Cp2EOOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6s7ggGkOH9o0sK1kQG+/WVJHw8MB8GA1UdIwQY
MBaAFFsBawBxFCnGvDGwODPy9eFNjTBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dGckFIRVVLY2E4TWJBNE1fTDE0VTJOTUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kMGRlNzItZWJjMi00ZGNlLThhZjgt
NGFiMzM1MDcwOWU5LzEvV3dGckFIRVVLY2E4TWJBNE1fTDE0VTJOTUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kMGRlNzItZWJjMi00ZGNlLThhZjgtNGFiMzM1MDcwOWU5
LzEvV3dGckFIRVVLY2E4TWJBNE1fTDE0VTJOTUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6sdMR3j
ml0WcHz+ZQ9X6rTHg77CK1qN6JgSEtvTysPTM+y4YwScSSwrJINAdFQ5Yon9HIYI
qP8r3uy0KQRVbvpiUvSD8cRH/ZYhyPRIJTARdJjBfCLOrzhHF7MlY2olFRRLZ+C8
2boJxqNw/cXEsEPPp1PCB4AOsFedUP4rF+jDasJl4f6RpfEvFNVZZ5AlKPcHVR3J
2aWlcjRaM/6pNsnMfGN08PQ3ZFn4MkNDh8C8NWgtESyY0oWqckB1mD3fsI1joGoL
3k6P5ckl9bV+ncrIUK4ZapHzykV93FvyLwlGQOSY99uSByL6QWmVaj6wrEL64/z7
wHU7AZKjW4po6A==
-----END CERTIFICATE-----