Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File:                     WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier:          m+3cLoNbZLWIXCwV2GTyfb0ExodbI1zF9jMXRFBiQWc=
Subject key identifier:   BE:2E:FF:95:B6:AD:00:C4:F2:47:DA:A2:25:DD:E4:AF:8B:12:5C:8C
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer:       /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial:       01962E99A843ACE44DAEC81003EB6E6F445B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number:          0800
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=)
                          2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: TuNLkhjJ5g3snLh/VnvCAxpNRlbwh8fDVglJPRlYaxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:43:ac:e4:4d:ae:c8:10:03:eb:6e:6f:44:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=be2eff95b6ad00c4f247daa225dde4af8b125c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:c9:8f:68:4d:94:96:0c:ae:e7:db:fb:45:
                    d3:95:a1:05:48:81:c2:8c:d3:a1:ae:06:05:71:89:
                    a1:6f:7b:0d:9c:12:28:e7:d7:18:4f:83:34:5e:04:
                    5e:05:e8:e2:0b:cf:3b:65:bd:65:23:73:a9:e6:a1:
                    47:15:1c:7a:be:1f:4e:e5:5d:3c:9a:ff:e3:a5:ff:
                    2b:09:16:21:2f:19:61:eb:32:8c:8e:93:a1:8a:1f:
                    e3:e2:82:ec:7f:2c:c3:26:87:7f:f6:47:3d:c8:69:
                    e6:63:c0:e4:2d:23:f4:9e:6e:b4:14:c2:77:01:b6:
                    cd:8e:c4:88:7d:01:a2:40:d0:81:87:df:a5:16:99:
                    c5:64:41:d2:1e:45:57:74:b1:55:f4:16:06:46:90:
                    72:30:41:b9:5e:58:8e:6c:05:b3:8a:28:94:97:2f:
                    dc:b7:0e:bb:29:73:86:0e:cc:28:3c:74:94:dc:a0:
                    54:5e:5f:d8:62:51:92:0d:b0:99:74:0b:53:98:26:
                    ad:49:0a:14:13:4d:5d:f9:7f:9e:9b:5e:33:72:4e:
                    df:a4:f4:bb:a8:fe:ea:d7:ba:de:39:0d:b0:8a:b5:
                    6d:71:a6:bd:38:85:42:c2:26:c5:02:ce:a4:4b:c2:
                    ba:9d:59:92:46:b2:b1:f8:c0:ce:c9:02:41:ca:95:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:FF:95:B6:AD:00:C4:F2:47:DA:A2:25:DD:E4:AF:8B:12:5C:8C
            X509v3 Authority Key Identifier:
                keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:01:98:b8:07:8b:b7:cc:4e:6f:0f:32:11:a8:53:1b:1a:37:
         19:e1:16:30:ca:19:da:b5:29:a3:a4:37:07:33:7e:cf:46:77:
         7a:4b:dd:b0:c6:08:58:80:96:ac:68:4e:43:eb:e5:a8:a1:cf:
         be:1f:75:e7:36:15:45:af:43:e8:1e:38:a8:ee:35:d7:91:05:
         90:86:54:73:94:6e:03:c4:e3:8a:39:06:49:13:ed:c3:4b:37:
         b0:18:04:b3:c9:8f:8d:45:95:bd:56:e0:cd:77:3c:2b:3d:fb:
         63:41:b6:58:0c:24:96:2d:2e:cd:5d:0c:4b:d6:3f:36:12:cb:
         98:cf:61:57:b6:0a:89:5a:c3:32:3e:94:ba:2a:dd:cc:f5:6d:
         0e:0d:c7:95:d6:a9:1a:f1:65:e6:c4:03:e0:bc:75:1d:35:a0:
         de:a6:fa:a4:73:c7:a4:ae:c4:e2:f5:09:89:50:47:22:99:0b:
         8d:db:df:31:18:54:2b:40:50:a5:c1:b2:c5:da:7d:f1:7b:0f:
         fb:62:f6:d8:a1:ee:a7:e4:c6:e3:1e:f7:5f:49:b0:0a:71:f8:
         f6:55:a7:e1:8d:aa:89:d5:74:71:8c:c5:17:39:e6:8f:e4:bb:
         e3:7b:10:fb:95:16:76:8f:c5:d4:8f:c9:39:76:8b:08:08:9e:
         a7:22:f8:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumahDrORNrsgQA+tub0RbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1
ZmMyNWMwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EyhiZTJlZmY5NWI2YWQwMGM0ZjI0N2RhYTIyNWRkZTRhZjhiMTI1YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrJj2hNlJYMrufb+0XTlaEFSIHC
jNOhrgYFcYmhb3sNnBIo59cYT4M0XgReBejiC887Zb1lI3Op5qFHFRx6vh9O5V08
mv/jpf8rCRYhLxlh6zKMjpOhih/j4oLsfyzDJod/9kc9yGnmY8DkLSP0nm60FMJ3
AbbNjsSIfQGiQNCBh9+lFpnFZEHSHkVXdLFV9BYGRpByMEG5XliObAWziiiUly/c
tw67KXOGDswoPHSU3KBUXl/YYlGSDbCZdAtTmCatSQoUE01d+X+em14zck7fpPS7
qP7q17reOQ2wirVtcaa9OIVCwibFAs6kS8K6nVmSRrKx+MDOyQJBypVTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4u/5W2rQDE8kfaoiXd5K+LElyMMB8GA1UdIwQY
MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt
NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5
LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wGYuAeL
t8xObw8yEahTGxo3GeEWMMoZ2rUpo6Q3BzN+z0Z3ekvdsMYIWICWrGhOQ+vlqKHP
vh915zYVRa9D6B44qO4115EFkIZUc5RuA8TjijkGSRPtw0s3sBgEs8mPjUWVvVbg
zXc8Kz37Y0G2WAwkli0uzV0MS9Y/NhLLmM9hV7YKiVrDMj6UuirdzPVtDg3Hldap
GvFl5sQD4Lx1HTWg3qb6pHPHpK7E4vUJiVBHIpkLjdvfMRhUK0BQpcGyxdp98XsP
+2L22KHup+TG4x73X0mwCnH49lWn4Y2qidV0cYzFFznmj+S743sQ+5UWdo/F1I/J
OXaLCAiepyL41Q==
-----END CERTIFICATE-----