Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          H5vqGTDLtKomadGyy1xiMoHliCVX+ZvB9zLfAFPIQbA=
Subject key identifier:   72:3E:73:57:CA:FB:A0:E7:0C:46:28:25:B8:D9:DC:46:51:6B:4D:AC
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       01962DF3E49DD3140725547ABEC0216CEF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
                          2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: Ou0yg4GKg2gyB+4ocgWQ6nFuzxZ2NYSFXuVlWoxCBjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:9d:d3:14:07:25:54:7a:be:c0:21:6c:ef:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=723e7357cafba0e70c462825b8d9dc46516b4dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:8e:e2:f9:78:aa:c6:6f:8b:0f:4a:43:e2:
                    a0:bd:55:31:ae:ab:10:4f:7e:72:5b:a0:52:46:bf:
                    f9:6e:d7:6b:30:56:48:19:d2:54:ba:8e:57:c4:42:
                    32:4e:72:5b:9f:04:e3:d4:a5:b4:08:24:ec:fd:d6:
                    9a:e5:cd:c8:76:ad:8c:ac:34:e6:73:02:4f:4a:97:
                    48:0a:fa:80:e7:6f:cc:d3:c4:e1:54:55:14:1e:b3:
                    16:a5:18:84:bf:94:d2:73:a2:70:98:d6:86:e3:5a:
                    46:9d:b5:be:a9:59:b6:f9:b7:4d:34:b3:b0:02:5f:
                    f2:5b:81:79:bf:9c:4c:04:e8:bb:58:5f:d8:a6:35:
                    9e:fa:27:cd:54:6c:50:2c:f4:aa:0e:3c:04:7c:2c:
                    91:2c:36:bb:19:f1:35:da:63:c6:39:ab:20:e9:a5:
                    00:2b:0e:50:a2:2e:d2:bb:52:cf:a9:f1:46:2b:b8:
                    3d:53:b9:23:2a:54:56:19:43:9d:2b:a5:d2:82:9c:
                    69:b5:55:68:62:ad:8b:92:c2:7e:c3:33:18:f5:6b:
                    be:e9:3b:49:1f:ef:51:72:85:61:aa:e6:a6:4b:47:
                    a4:ef:95:7a:7c:e3:f0:54:ad:f8:1e:8b:19:e5:4f:
                    fd:bc:64:e3:5f:8c:86:c2:d4:ba:7d:c8:c3:ff:7a:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:73:57:CA:FB:A0:E7:0C:46:28:25:B8:D9:DC:46:51:6B:4D:AC
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:01:73:45:76:e6:e5:49:b0:af:6f:6e:35:91:2f:2f:bf:df:
         c3:8c:33:bb:f2:b9:c9:df:17:aa:f2:e7:c4:f6:31:e6:fc:62:
         66:9a:de:82:2f:11:fe:49:44:13:5c:dc:13:df:1e:9a:38:27:
         9d:34:ad:9c:7b:25:03:61:f8:f4:8a:b5:27:5f:01:f3:43:ef:
         b7:74:53:f3:d5:02:ce:0e:08:52:70:ce:5c:f5:a6:a2:c9:77:
         f9:c9:a0:d7:28:d5:ad:c0:d3:d3:9c:c7:f6:bb:54:98:3e:57:
         ce:cb:82:b6:99:a4:a2:4c:b7:3c:a7:32:f6:bf:e4:41:69:4d:
         f3:cb:a5:dd:9d:b1:70:2a:90:1d:4f:61:8e:66:f1:a3:67:8c:
         4e:cd:4e:03:a3:49:ed:da:e9:cc:52:f3:55:72:91:45:8c:cc:
         e6:57:bc:bf:be:cb:7c:61:eb:ae:0c:38:fb:c6:da:29:e8:6d:
         93:3c:7b:16:4e:43:93:bd:14:a8:99:ca:8f:02:eb:53:f2:b3:
         5e:40:78:d3:10:71:ee:58:29:22:e1:71:bc:af:00:02:31:77:
         9a:4b:e4:b0:7d:88:66:e9:5e:39:68:47:2c:35:20:3b:6a:46:
         83:b5:3f:f8:1d:8b:91:25:1b:2c:00:84:ab:6e:69:74:60:83:
         05:9c:d6:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+Sd0xQHJVR6vsAhbO+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
Eyg3MjNlNzM1N2NhZmJhMGU3MGM0NjI4MjViOGQ5ZGM0NjUxNmI0ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc6O4vl4qsZviw9KQ+KgvVUxrqsQ
T35yW6BSRr/5btdrMFZIGdJUuo5XxEIyTnJbnwTj1KW0CCTs/daa5c3Idq2MrDTm
cwJPSpdICvqA52/M08ThVFUUHrMWpRiEv5TSc6JwmNaG41pGnbW+qVm2+bdNNLOw
Al/yW4F5v5xMBOi7WF/YpjWe+ifNVGxQLPSqDjwEfCyRLDa7GfE12mPGOasg6aUA
Kw5Qoi7Su1LPqfFGK7g9U7kjKlRWGUOdK6XSgpxptVVoYq2LksJ+wzMY9Wu+6TtJ
H+9RcoVhquamS0ek75V6fOPwVK34HosZ5U/9vGTjX4yGwtS6fcjD/3rE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI+c1fK+6DnDEYoJbjZ3EZRa02sMB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAFzRXbm
5Umwr29uNZEvL7/fw4wzu/K5yd8XqvLnxPYx5vxiZpregi8R/klEE1zcE98emjgn
nTStnHslA2H49Iq1J18B80Pvt3RT89UCzg4IUnDOXPWmosl3+cmg1yjVrcDT05zH
9rtUmD5XzsuCtpmkoky3PKcy9r/kQWlN88ul3Z2xcCqQHU9hjmbxo2eMTs1OA6NJ
7drpzFLzVXKRRYzM5le8v77LfGHrrgw4+8baKehtkzx7Fk5Dk70UqJnKjwLrU/Kz
XkB40xBx7lgpIuFxvK8AAjF3mkvksH2IZuleOWhHLDUgO2pGg7U/+B2LkSUbLACE
q25pdGCDBZzWiA==
-----END CERTIFICATE-----