Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          6ezCnk6P+MDQHWupcIYp9XjvsPO31+vyfJGFZ0DNGA4=
Subject key identifier:   23:1C:71:5E:70:42:06:7E:E8:26:F7:5B:1D:79:A3:B3:2A:1E:55:5D
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       01962F0688230545640FB0271B03A1321F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
                          2: MrwCb1VshNGuSjy8-ZcrQ_jjBz4.roa (hash: RL8Yc0SUjE/2UAMDk7eU+CcumrO0VbncY+6nMnTALA4=)
                          3: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: F5/6Yj6W8Ovvgjnc0ujSQR5ZLdj2fYr/uxuC3ixS6ZY=)
                          5: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
                          6: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
                          7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
                          8: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (hash: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=)
                          9: txKA05gc1PNEhcuQ9gw4JRL4SOg.roa (hash: ZxoTI5LHLJfIjBc6aAlc7tJn+4E9R4JWht3d4AMJtIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:88:23:05:45:64:0f:b0:27:1b:03:a1:32:1f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=231c715e7042067ee826f75b1d79a3b32a1e555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:e6:66:d0:b9:a2:aa:3d:0a:f0:f1:b1:06:
                    15:f1:cc:f5:1e:06:f9:ea:f5:40:a5:a5:cf:45:8b:
                    f2:4c:19:07:a7:8c:d9:be:e9:ca:e2:96:03:bb:ae:
                    47:5f:01:43:3d:99:bf:18:af:6a:02:cb:01:45:dc:
                    fa:3f:58:7c:b7:16:98:cc:63:8a:24:86:1e:35:1e:
                    17:72:05:a1:12:e4:96:50:ff:6c:41:65:d5:ca:85:
                    52:b3:0a:5a:1d:46:af:df:ee:d9:2d:b3:d9:7d:e6:
                    c2:64:f5:1b:cd:6e:0d:a5:0e:b4:f4:98:d4:c5:80:
                    06:3f:ca:db:d1:9f:8c:c2:22:3b:20:ba:cf:7f:a8:
                    1f:a3:0c:52:84:c8:7d:79:93:eb:9e:ee:92:10:7b:
                    65:ab:c9:5e:6e:4d:f6:88:8a:1d:68:d7:0a:b8:57:
                    89:27:da:61:b0:dd:8a:d7:02:13:15:75:6a:e9:05:
                    22:28:81:de:d2:1a:3b:77:99:d5:53:fa:01:88:f4:
                    a2:75:d7:04:6b:c5:09:f1:29:b8:d1:1d:1c:08:82:
                    5d:5b:6a:99:5a:dc:3a:6b:6d:c6:b3:5d:f5:f1:5c:
                    ef:f6:41:4d:0f:74:0a:fb:99:ae:5c:36:4f:27:aa:
                    47:b5:3e:07:bb:10:24:3a:6c:18:a3:f4:ec:da:72:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:71:5E:70:42:06:7E:E8:26:F7:5B:1D:79:A3:B3:2A:1E:55:5D
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:04:44:68:23:50:b7:ef:2b:18:0e:b4:f5:84:68:be:ac:3f:
         95:7e:7d:1c:c7:56:c9:6d:7c:1c:07:31:27:72:53:2d:12:15:
         6a:b8:70:4d:90:30:57:ca:d2:1e:26:87:13:7f:12:3d:d1:e1:
         c0:68:13:d7:4d:23:35:0b:b9:1b:3f:90:13:39:0c:f5:1e:ab:
         91:58:f4:14:29:a8:a9:8e:7d:c3:2b:09:fd:4b:bb:55:b0:5d:
         5a:49:a3:04:10:30:0f:80:69:82:14:8b:0d:71:98:7e:c8:86:
         49:6b:38:e7:d9:e3:ab:fa:23:54:ff:78:bd:66:43:6c:32:ed:
         7e:84:ae:e2:c3:4e:52:24:a6:a9:f1:98:5c:a9:f1:5c:a1:a2:
         d5:f8:e8:28:71:70:46:b2:9f:33:d1:2a:fe:93:0a:47:b2:2c:
         15:da:32:ba:fc:73:07:61:6d:ec:25:b4:ea:1d:6e:d1:61:05:
         9d:ee:31:00:86:75:0d:5b:dd:12:b6:83:4c:b9:2d:a0:ff:0b:
         44:ab:75:2a:2e:33:0f:66:bf:aa:80:63:83:45:bc:35:6a:84:
         0a:35:db:30:b0:50:60:b7:a0:3a:bb:0c:6f:1d:9b:ee:02:f4:
         28:9f:79:30:c2:7e:29:8e:c6:5a:93:68:1a:ff:ee:05:43:15:
         78:b4:38:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBogjBUVkD7AnGwOhMh8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjUwNDEzMTIwMTE5WhcNMjUwNDE0MTIwMTE5WjAzMTEwLwYDVQQD
EygyMzFjNzE1ZTcwNDIwNjdlZTgyNmY3NWIxZDc5YTNiMzJhMWU1NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiTmZtC5oqo9CvDxsQYV8cz1Hgb5
6vVApaXPRYvyTBkHp4zZvunK4pYDu65HXwFDPZm/GK9qAssBRdz6P1h8txaYzGOK
JIYeNR4XcgWhEuSWUP9sQWXVyoVSswpaHUav3+7ZLbPZfebCZPUbzW4NpQ609JjU
xYAGP8rb0Z+MwiI7ILrPf6gfowxShMh9eZPrnu6SEHtlq8lebk32iIodaNcKuFeJ
J9phsN2K1wITFXVq6QUiKIHe0ho7d5nVU/oBiPSiddcEa8UJ8Sm40R0cCIJdW2qZ
Wtw6a23Gs1318Vzv9kFND3QK+5muXDZPJ6pHtT4HuxAkOmwYo/Ts2nK2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMccV5wQgZ+6Cb3Wx15o7MqHlVdMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQREaCNQ
t+8rGA609YRovqw/lX59HMdWyW18HAcxJ3JTLRIVarhwTZAwV8rSHiaHE38SPdHh
wGgT100jNQu5Gz+QEzkM9R6rkVj0FCmoqY59wysJ/Uu7VbBdWkmjBBAwD4BpghSL
DXGYfsiGSWs459njq/ojVP94vWZDbDLtfoSu4sNOUiSmqfGYXKnxXKGi1fjoKHFw
RrKfM9Eq/pMKR7IsFdoyuvxzB2Ft7CW06h1u0WEFne4xAIZ1DVvdEraDTLktoP8L
RKt1Ki4zD2a/qoBjg0W8NWqECjXbMLBQYLegOrsMbx2b7gL0KJ95MMJ+KY7GWpNo
Gv/uBUMVeLQ4ZQ==
-----END CERTIFICATE-----