Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File:                     wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier:          Y9dtRm8lmK48+qYFzV8v4Jd++UzBt9GZdsNB9X7kugY=
Subject key identifier:   C2:33:DF:0D:FA:0A:53:B8:45:BF:94:EC:58:F6:E3:03:2B:F0:9C:35
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer:       /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial:       01962E2B1E0EBD727AF0788D7F3F1D7B0834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number:          03C6
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: aE6JwttymnnWe04L4gTCpTChVfNtns/0iPvoRDcm23A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1e:0e:bd:72:7a:f0:78:8d:7f:3f:1d:7b:08:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=c233df0dfa0a53b845bf94ec58f6e3032bf09c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:40:ca:84:96:1f:27:58:06:58:4b:f7:ae:
                    32:41:07:ea:f0:2c:b3:60:60:3c:96:72:fa:7e:c5:
                    b6:58:84:82:7c:4f:f3:eb:a7:9c:83:b3:c0:e1:4f:
                    e1:4a:d4:51:ed:bd:49:4a:04:31:03:d1:4f:e6:c6:
                    7c:db:0f:67:0e:87:0b:0e:5a:c2:a5:41:56:fa:5f:
                    21:80:14:5e:ca:e3:9e:2e:62:66:b4:d4:8f:77:c5:
                    36:4e:d2:3d:99:8f:f9:3a:a8:4f:6c:27:fe:f8:b0:
                    66:40:47:6e:fa:5e:87:b4:28:03:ff:93:bf:30:88:
                    20:fe:4b:43:21:5e:fa:b3:5f:4e:14:08:ea:4f:59:
                    ee:bd:9b:3c:1f:02:03:bd:2c:11:f0:14:d9:e9:76:
                    9f:7d:72:9b:3f:35:72:e0:27:94:fa:11:ec:4c:4d:
                    11:8c:ec:05:64:db:d6:20:c7:79:56:71:58:25:a9:
                    f5:b8:aa:8d:97:80:af:d0:8b:19:04:8d:17:97:e5:
                    71:b2:89:94:f9:4b:7b:59:3d:03:57:dc:ce:da:4a:
                    ac:4a:3f:ae:c3:38:ef:14:ef:cd:4c:a2:f9:b2:4e:
                    14:fe:32:f9:f5:f4:8f:5a:63:96:de:41:6e:ac:62:
                    d9:e4:33:ef:84:84:30:3d:20:7f:4b:c2:46:29:6d:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:33:DF:0D:FA:0A:53:B8:45:BF:94:EC:58:F6:E3:03:2B:F0:9C:35
            X509v3 Authority Key Identifier:
                keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:98:2e:d5:8b:3d:95:a7:7c:70:57:93:f2:80:37:8c:e4:
         57:de:69:a1:bb:b7:b2:98:03:22:e6:27:1e:0a:0c:11:84:20:
         0c:27:cd:b3:6b:60:58:a1:d7:a5:b9:1c:d0:f0:d7:cf:27:84:
         cb:4e:25:f0:a2:27:82:84:47:84:a6:8f:69:88:3d:5a:cf:d6:
         e9:41:5c:e3:90:c4:fd:0c:18:0d:f0:c5:59:c9:ed:01:87:d9:
         8d:28:5d:68:04:cc:0e:f4:bb:4c:a7:90:05:ff:b1:d7:0b:1a:
         5e:06:0a:f5:6a:a8:d4:a5:6d:e4:9e:7c:75:60:ec:e5:d1:0f:
         c4:62:5c:4c:3c:0e:87:6c:02:19:14:3b:61:7f:bc:ee:97:5f:
         9d:69:96:5e:3c:0b:e1:80:ce:b6:7a:8c:b2:6d:f3:af:50:61:
         b5:c0:d8:bf:61:5f:e2:ed:e7:28:c5:de:a2:bf:94:75:9f:9a:
         8a:ea:8d:5c:f6:ef:6c:d6:82:8d:83:ff:60:fe:a5:d9:11:a3:
         3c:a4:91:c9:41:f3:59:7d:17:0e:73:c9:58:d9:fe:c1:4e:38:
         05:2a:8f:34:d6:db:70:c3:24:f0:d8:5a:09:29:b7:8d:1e:72:
         d8:96:7d:94:ef:13:32:dd:49:90:53:26:e0:3a:48:39:95:7b:
         79:37:bb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKx4OvXJ68HiNfz8dewg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNmNmYjlhNjg0OWM0MWU1ZjExNzA1YjhmZDcxNjA4NWQ1
Yzg1NDkwHhcNMjUwNDEzMDgwMTM5WhcNMjUwNDE0MDgwMTM5WjAzMTEwLwYDVQQD
EyhjMjMzZGYwZGZhMGE1M2I4NDViZjk0ZWM1OGY2ZTMwMzJiZjA5YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xZAyoSWHydYBlhL964yQQfq8Cyz
YGA8lnL6fsW2WISCfE/z66ecg7PA4U/hStRR7b1JSgQxA9FP5sZ82w9nDocLDlrC
pUFW+l8hgBReyuOeLmJmtNSPd8U2TtI9mY/5OqhPbCf++LBmQEdu+l6HtCgD/5O/
MIgg/ktDIV76s19OFAjqT1nuvZs8HwIDvSwR8BTZ6XaffXKbPzVy4CeU+hHsTE0R
jOwFZNvWIMd5VnFYJan1uKqNl4Cv0IsZBI0Xl+VxsomU+Ut7WT0DV9zO2kqsSj+u
wzjvFO/NTKL5sk4U/jL59fSPWmOW3kFurGLZ5DPvhIQwPSB/S8JGKW0WmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIz3w36ClO4Rb+U7Fj24wMr8Jw1MB8GA1UdIwQY
MBaAFMFs+5poScQeXxFwW4/XFghdXIVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAt
MTEyM2NjOWRkY2NjLzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAtMTEyM2NjOWRkY2Nj
LzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyOYLtWL
PZWnfHBXk/KAN4zkV95pobu3spgDIuYnHgoMEYQgDCfNs2tgWKHXpbkc0PDXzyeE
y04l8KIngoRHhKaPaYg9Ws/W6UFc45DE/QwYDfDFWcntAYfZjShdaATMDvS7TKeQ
Bf+x1wsaXgYK9Wqo1KVt5J58dWDs5dEPxGJcTDwOh2wCGRQ7YX+87pdfnWmWXjwL
4YDOtnqMsm3zr1BhtcDYv2Ff4u3nKMXeor+UdZ+aiuqNXPbvbNaCjYP/YP6l2RGj
PKSRyUHzWX0XDnPJWNn+wU44BSqPNNbbcMMk8NhaCSm3jR5y2JZ9lO8TMt1JkFMm
4DpIOZV7eTe7zA==
-----END CERTIFICATE-----