Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File:                     wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier:          64P04GaAeDMmEnFzC1t98uiMZOk7vSUiQnz/179ReEc=
Subject key identifier:   8B:F4:E2:D0:D1:15:5E:B2:D2:F2:BD:21:C5:CA:74:9D:4F:C7:59:43
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer:       /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial:       01962E2ABA6833297682ACA9C88F5FA6B477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
                          2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: +0ONgnnBvFCV0tRAhlo3xtzyIB6WTfArrviE+t+l2so=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:68:33:29:76:82:ac:a9:c8:8f:5f:a6:b4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=8bf4e2d0d1155eb2d2f2bd21c5ca749d4fc75943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:9c:a2:64:0a:58:f6:0c:b1:49:0a:de:0a:
                    b0:7d:bb:16:17:85:25:a2:d1:65:e0:1f:1e:bc:a5:
                    e6:94:a4:77:1b:cf:44:e6:65:c6:61:3d:05:f9:92:
                    59:dd:5b:a8:25:18:38:a7:e1:28:81:b8:d5:00:65:
                    ae:b5:fc:31:33:c5:32:5c:7d:44:42:2c:8c:b7:7a:
                    7f:24:a9:23:d1:fa:3e:cb:8e:a3:01:69:b3:7d:b0:
                    54:d8:af:8d:5c:00:fb:6e:70:81:6e:ba:4c:0a:23:
                    6f:cc:75:06:76:13:76:0e:b8:13:93:d8:b5:a6:9d:
                    d1:fc:37:de:17:0c:d2:40:79:d9:51:05:3b:1f:41:
                    50:74:05:cd:a0:8e:f6:e9:8e:94:75:c7:e7:51:61:
                    36:a2:01:b8:c3:2c:68:96:bb:b4:7d:2a:a9:4a:45:
                    30:31:90:63:58:11:ee:95:3e:33:43:9c:9c:b5:3f:
                    5f:81:6a:91:75:da:a1:fd:6d:cd:4d:c0:8d:fc:f6:
                    44:72:5e:0e:94:8d:e6:2d:75:5d:a2:f6:23:ef:b2:
                    f6:12:3b:4f:ef:47:72:82:6c:ac:09:dd:b6:5c:83:
                    2b:19:d7:73:e1:a2:1b:11:4b:9b:b0:45:6a:d0:94:
                    1e:78:83:8e:45:f5:de:40:08:c1:fe:f2:e4:8f:9a:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:E2:D0:D1:15:5E:B2:D2:F2:BD:21:C5:CA:74:9D:4F:C7:59:43
            X509v3 Authority Key Identifier:
                keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:87:77:0d:21:84:4f:15:c5:ed:2f:0f:7c:80:ed:5b:b5:
         45:cc:05:dd:a0:45:39:5d:80:d8:cc:bc:f3:bd:c2:8f:02:1d:
         4b:b6:36:4e:9b:b7:1d:39:ef:1c:fa:7e:06:6e:05:11:42:41:
         d7:fc:e4:e0:0c:df:d0:28:4a:9f:03:b9:0b:f8:b3:74:27:d4:
         96:22:b5:4d:a1:68:e8:ad:d7:d2:86:48:60:89:be:a0:68:8d:
         e7:20:cc:86:79:a3:7e:e8:21:95:dc:ed:f5:7c:b6:97:2d:2f:
         ff:7a:02:a0:20:55:3b:b2:2e:4f:60:8f:d8:73:28:db:f7:29:
         eb:6e:fc:5d:9e:4e:63:64:42:07:b2:64:cf:70:15:9a:42:af:
         01:71:09:4b:bc:c3:d2:6a:7f:b6:f1:ff:89:af:fc:ae:85:56:
         96:44:33:57:0e:d2:23:7a:f2:11:fc:57:1e:b9:dd:49:fe:78:
         3b:38:35:bb:bb:c9:83:48:09:e4:01:97:75:69:b0:94:a9:d1:
         0b:9f:60:28:94:b6:1d:ac:66:d5:6c:3d:38:7f:21:24:28:53:
         a0:fc:20:47:9a:f9:d2:61:73:2f:9b:04:ad:60:1c:94:ba:30:
         a6:de:2d:83:80:0a:9a:4c:59:df:7c:69:07:3d:0b:b7:24:04:
         c0:1d:90:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKrpoMyl2gqypyI9fprR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmIwODJkODZmNTA3YmZmYWRmOTE5MmFhNjc2YWI3ZGEy
NzBkNDIwHhcNMjUwNDEzMDgwMTE0WhcNMjUwNDE0MDgwMTE0WjAzMTEwLwYDVQQD
Eyg4YmY0ZTJkMGQxMTU1ZWIyZDJmMmJkMjFjNWNhNzQ5ZDRmYzc1OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLycomQKWPYMsUkK3gqwfbsWF4Ul
otFl4B8evKXmlKR3G89E5mXGYT0F+ZJZ3VuoJRg4p+EogbjVAGWutfwxM8UyXH1E
QiyMt3p/JKkj0fo+y46jAWmzfbBU2K+NXAD7bnCBbrpMCiNvzHUGdhN2DrgTk9i1
pp3R/DfeFwzSQHnZUQU7H0FQdAXNoI726Y6UdcfnUWE2ogG4wyxolru0fSqpSkUw
MZBjWBHulT4zQ5yctT9fgWqRddqh/W3NTcCN/PZEcl4OlI3mLXVdovYj77L2EjtP
70dygmysCd22XIMrGddz4aIbEUubsEVq0JQeeIOORfXeQAjB/vLkj5rRFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv04tDRFV6y0vK9IcXKdJ1Px1lDMB8GA1UdIwQY
MBaAFMG7CC2G9Qe/+t+RkqpnarfaJw1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzIt
ZTg3YzlmNGJhOTdkLzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzItZTg3YzlmNGJhOTdk
LzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm76Hdw0h
hE8Vxe0vD3yA7Vu1RcwF3aBFOV2A2My8873CjwIdS7Y2Tpu3HTnvHPp+Bm4FEUJB
1/zk4Azf0ChKnwO5C/izdCfUliK1TaFo6K3X0oZIYIm+oGiN5yDMhnmjfughldzt
9Xy2ly0v/3oCoCBVO7IuT2CP2HMo2/cp6278XZ5OY2RCB7Jkz3AVmkKvAXEJS7zD
0mp/tvH/ia/8roVWlkQzVw7SI3ryEfxXHrndSf54Ozg1u7vJg0gJ5AGXdWmwlKnR
C59gKJS2Haxm1Ww9OH8hJChToPwgR5r50mFzL5sErWAclLowpt4tg4AKmkxZ33xp
Bz0LtyQEwB2QmA==
-----END CERTIFICATE-----