Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          2WKPVjIDfHiFvxWXPAwpj4wIk5jrpUkC04whVemq22o=
Subject key identifier:   30:50:A2:A8:18:E1:58:BF:9F:ED:CC:2E:29:58:B8:25:C7:E4:E1:97
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       01962F3D6B8915B89C2DB93A22325D5AE811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: T/QzhgT4JqxnEQlYvdOXbT9Gve8bi2F+Pg/afnzIFt0=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:89:15:b8:9c:2d:b9:3a:22:32:5d:5a:e8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=3050a2a818e158bf9fedcc2e2958b825c7e4e197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:03:c2:3c:cd:57:01:93:e9:48:9b:71:8e:
                    cb:db:ab:be:a0:e6:5a:c1:c8:a8:fe:ba:6a:63:ae:
                    e4:44:ff:c6:c5:ae:ba:57:ed:a8:3a:f0:dc:cd:19:
                    09:49:6f:bd:b0:2d:9b:18:1e:f8:30:e9:bf:26:85:
                    09:f0:4f:e6:3f:0b:f7:f2:e8:b0:e3:28:16:16:f2:
                    10:09:49:bf:b9:19:44:d3:a3:7f:0d:bf:53:fc:b6:
                    24:0c:cd:1e:30:a4:13:fb:0e:2d:e8:41:cd:a8:fe:
                    d6:25:0c:d9:ce:05:ce:25:75:de:36:89:ef:cb:55:
                    ff:54:e9:b7:39:28:7b:c4:2c:aa:13:6b:44:22:30:
                    1e:0c:f5:20:44:cc:5d:d4:82:9d:7b:a1:48:d1:73:
                    90:dd:54:7f:a9:c6:e1:2c:48:b0:fd:9a:26:0b:44:
                    7d:fc:0e:1c:0e:8a:44:de:3f:53:1a:6c:66:17:9c:
                    18:3f:a9:7b:78:0a:06:95:1a:c0:d5:dd:39:7e:ea:
                    41:5e:64:d9:17:61:df:ec:a6:a2:75:81:47:39:6b:
                    5f:d7:7c:c3:a9:26:73:76:09:1c:48:a7:61:8b:56:
                    9b:bf:74:8b:3d:37:05:a1:f9:96:9a:e3:94:81:f8:
                    aa:23:12:d2:ce:d0:a4:99:1d:e1:57:6d:1c:04:5e:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:A2:A8:18:E1:58:BF:9F:ED:CC:2E:29:58:B8:25:C7:E4:E1:97
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:61:f8:4a:af:a8:69:f0:ec:86:15:fa:48:3f:22:92:83:
         fd:5d:5a:62:27:0e:79:77:45:f4:5e:22:ab:35:4c:2d:a8:06:
         16:19:8b:9b:d6:6f:09:25:53:08:7c:68:f1:59:12:da:ee:59:
         57:7a:08:1f:a4:f4:43:6f:2e:0c:23:83:18:c4:ee:f1:f6:c5:
         6d:00:f6:ac:19:8a:1c:09:03:6a:80:8b:97:53:47:bb:71:3f:
         60:e1:12:6f:a2:2f:cc:4f:06:e4:5e:3f:2a:78:93:2b:1b:78:
         b3:ba:7c:6a:34:22:2b:7d:78:31:c6:df:98:e0:26:19:e3:fd:
         35:a0:a3:d4:8e:8a:ed:9d:16:fd:fe:6e:4f:7c:37:0f:98:56:
         71:50:1b:3a:f2:7e:21:00:f7:95:df:18:f3:1c:0b:b2:25:cd:
         91:02:ba:82:df:c5:20:cd:fa:c3:70:53:fe:a4:54:3e:fe:3b:
         4b:e5:ae:5e:96:32:80:7e:cd:af:28:76:1f:cf:10:0c:30:9c:
         de:6c:8f:82:1b:3b:33:6f:e6:a0:6d:e0:e1:22:0b:98:af:56:
         18:1b:ed:87:a9:60:12:56:7d:d2:a5:a7:a5:8a:25:2f:f6:30:
         a0:b1:8b:df:12:26:91:46:59:2f:c0:06:cb:f1:9f:c2:d4:b7:
         04:2f:a5:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWuJFbicLbk6IjJdWugRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3
NDAwOTcwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
EygzMDUwYTJhODE4ZTE1OGJmOWZlZGNjMmUyOTU4YjgyNWM3ZTRlMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MDwjzNVwGT6UibcY7L26u+oOZa
wcio/rpqY67kRP/Gxa66V+2oOvDczRkJSW+9sC2bGB74MOm/JoUJ8E/mPwv38uiw
4ygWFvIQCUm/uRlE06N/Db9T/LYkDM0eMKQT+w4t6EHNqP7WJQzZzgXOJXXeNonv
y1X/VOm3OSh7xCyqE2tEIjAeDPUgRMxd1IKde6FI0XOQ3VR/qcbhLEiw/ZomC0R9
/A4cDopE3j9TGmxmF5wYP6l7eAoGlRrA1d05fupBXmTZF2Hf7KaidYFHOWtf13zD
qSZzdgkcSKdhi1abv3SLPTcFofmWmuOUgfiqIxLSztCkmR3hV20cBF6LywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBQoqgY4Vi/n+3MLilYuCXH5OGXMB8GA1UdIwQY
MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt
NDdiY2QzOWMzZDg2LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2
LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJth+Eqv
qGnw7IYV+kg/IpKD/V1aYicOeXdF9F4iqzVMLagGFhmLm9ZvCSVTCHxo8VkS2u5Z
V3oIH6T0Q28uDCODGMTu8fbFbQD2rBmKHAkDaoCLl1NHu3E/YOESb6IvzE8G5F4/
KniTKxt4s7p8ajQiK314McbfmOAmGeP9NaCj1I6K7Z0W/f5uT3w3D5hWcVAbOvJ+
IQD3ld8Y8xwLsiXNkQK6gt/FIM36w3BT/qRUPv47S+WuXpYygH7Nryh2H88QDDCc
3myPghs7M2/moG3g4SILmK9WGBvth6lgElZ90qWnpYolL/YwoLGL3xImkUZZL8AG
y/GfwtS3BC+lRA==
-----END CERTIFICATE-----