Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File:                     WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier:          nutakB713PfOKiRrBoNV1qiP3PQ4g6I1YLG4Cj3AiTk=
Subject key identifier:   7F:39:F9:72:BA:C1:E7:22:9C:E1:1A:87:03:2A:F5:FD:94:FB:38:96
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer:       /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial:       01962F74F1EC1B9F5EE4A1260CCBD25A1EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: RLZU/rJczMLq9gNi60GxbbPGT8qWdEJVhFCMPFHwz68=)
                          2: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (hash: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f1:ec:1b:9f:5e:e4:a1:26:0c:cb:d2:5a:1e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=7f39f972bac1e7229ce11a87032af5fd94fb3896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:43:14:9c:17:c7:e3:d1:ad:50:54:7c:43:
                    9d:64:c2:c0:e4:f1:39:ab:13:1d:37:29:1b:44:ce:
                    c9:b9:a4:99:58:67:10:c3:0f:a1:1b:00:ab:54:90:
                    1b:4c:ae:b4:42:42:d4:6a:87:24:1b:6f:09:9b:0f:
                    6b:d5:d1:07:cc:61:c5:1a:25:c3:e1:28:b6:d4:91:
                    d7:3d:3c:5c:95:68:e9:00:9e:d5:58:6e:86:ec:a0:
                    8a:70:62:3b:eb:83:b6:08:62:c6:84:7f:49:b7:c1:
                    e5:79:eb:e1:72:21:be:2a:30:18:95:85:4a:20:7e:
                    a9:53:5f:ce:71:a6:4a:44:40:d0:92:6b:3e:42:4b:
                    f3:6e:e3:5b:e8:2a:f8:a4:1b:d1:a2:54:be:ec:99:
                    12:c1:7d:3f:5b:57:fc:bb:10:3a:95:56:fd:0e:a6:
                    92:69:f9:4f:4a:65:c8:76:aa:d7:fe:f4:06:28:3b:
                    dc:27:29:ab:59:5d:40:89:68:0a:f6:d8:75:5b:06:
                    d9:bc:c3:b2:1e:74:9d:f3:4b:64:9a:d2:2e:88:a7:
                    1b:48:75:31:a8:d6:06:a4:c4:07:73:05:64:2d:9b:
                    d7:8a:37:b2:7e:e2:e7:27:92:ba:00:82:d8:09:49:
                    9c:34:54:42:d1:a1:96:16:1e:89:50:f2:b8:29:6c:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:F9:72:BA:C1:E7:22:9C:E1:1A:87:03:2A:F5:FD:94:FB:38:96
            X509v3 Authority Key Identifier:
                keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:aa:e4:e9:60:cb:b4:38:81:6a:af:ad:99:72:bb:29:f2:b1:
         35:2c:72:09:6d:71:b5:1c:99:e9:66:15:6b:ab:86:75:8c:c0:
         58:5a:ad:b7:65:2d:2f:db:a9:44:9a:c4:72:84:c6:30:60:21:
         8f:10:f2:d1:b2:1b:00:d5:ff:93:c4:8a:04:9b:bc:0e:26:3d:
         eb:3c:e6:40:23:a0:09:a1:ce:6b:7f:da:24:be:be:ec:42:b4:
         3a:28:0a:91:4f:b3:d7:a9:9f:2d:85:7e:03:f5:9d:8b:b7:d6:
         fa:3b:f7:fb:d0:7d:4c:5f:b9:32:be:0b:fc:cf:64:36:bd:44:
         c3:76:3a:4c:d1:ef:00:7c:1a:d3:92:87:77:0b:15:d0:27:ff:
         54:7c:77:e3:62:f1:ec:d8:90:3a:bb:65:26:3e:ae:10:6f:5b:
         e6:90:1e:2d:f1:37:89:13:20:b2:ab:e6:1d:b9:ff:a7:63:84:
         4f:47:0b:09:fd:8d:72:de:d1:d7:f5:ff:fb:b7:5e:b4:0a:0a:
         99:cd:99:78:05:de:81:56:08:63:a9:19:e4:94:ed:1f:21:e9:
         f2:7b:d8:ac:3d:3b:fc:c7:c9:06:a9:57:62:f1:81:8a:93:5b:
         43:0e:09:bc:6c:1c:bd:f3:65:33:d4:2c:92:08:9a:91:7b:b7:
         3e:9a:41:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdPHsG59e5KEmDMvSWh6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGFjZDIxMTIzZjllNzVhOTJhMGU2ZDRiMjZmOWU5Yzk2
MzY3NWYwHhcNMjUwNDEzMTQwMTU1WhcNMjUwNDE0MTQwMTU1WjAzMTEwLwYDVQQD
Eyg3ZjM5Zjk3MmJhYzFlNzIyOWNlMTFhODcwMzJhZjVmZDk0ZmIzODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+lDFJwXx+PRrVBUfEOdZMLA5PE5
qxMdNykbRM7JuaSZWGcQww+hGwCrVJAbTK60QkLUaockG28Jmw9r1dEHzGHFGiXD
4Si21JHXPTxclWjpAJ7VWG6G7KCKcGI764O2CGLGhH9Jt8HleevhciG+KjAYlYVK
IH6pU1/OcaZKREDQkms+QkvzbuNb6Cr4pBvRolS+7JkSwX0/W1f8uxA6lVb9DqaS
aflPSmXIdqrX/vQGKDvcJymrWV1AiWgK9th1WwbZvMOyHnSd80tkmtIuiKcbSHUx
qNYGpMQHcwVkLZvXijeyfuLnJ5K6AILYCUmcNFRC0aGWFh6JUPK4KWwx7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH85+XK6wecinOEahwMq9f2U+ziWMB8GA1UdIwQY
MBaAFFpKzSESP551qSoObUsm+enJY2dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQt
YmNkMzMwMjgxMGUzLzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQtYmNkMzMwMjgxMGUz
LzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqrk6WDL
tDiBaq+tmXK7KfKxNSxyCW1xtRyZ6WYVa6uGdYzAWFqtt2UtL9upRJrEcoTGMGAh
jxDy0bIbANX/k8SKBJu8DiY96zzmQCOgCaHOa3/aJL6+7EK0OigKkU+z16mfLYV+
A/Wdi7fW+jv3+9B9TF+5Mr4L/M9kNr1Ew3Y6TNHvAHwa05KHdwsV0Cf/VHx342Lx
7NiQOrtlJj6uEG9b5pAeLfE3iRMgsqvmHbn/p2OET0cLCf2Nct7R1/X/+7detAoK
mc2ZeAXegVYIY6kZ5JTtHyHp8nvYrD07/MfJBqlXYvGBipNbQw4JvGwcvfNlM9Qs
kgiakXu3PppB7w==
-----END CERTIFICATE-----