Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File:                     W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier:          O/lEKQ7TtxzDnHDpwNkEXQ312pnuf8+fwDwgs1HkzTc=
Subject key identifier:   CA:33:14:C3:01:74:C1:E4:F6:0B:83:77:9B:07:DC:02:3E:C3:DE:3A
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer:       /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial:       01962E61CE7CD154DF7C888B487CC60EFD4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: E9hNm9uol1zJ6KKD3tSDNBtlgT6it9ZWyNn3GH2MH3s=)
                          2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
                          3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:7c:d1:54:df:7c:88:8b:48:7c:c6:0e:fd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=ca3314c30174c1e4f60b83779b07dc023ec3de3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:93:0f:97:de:f1:05:c5:01:1a:64:51:f7:
                    3f:19:65:37:d5:76:e1:e5:1a:1b:92:97:0f:ec:ea:
                    bd:d1:f5:d9:a0:b6:1d:c8:e1:28:f6:0b:2c:46:01:
                    85:d0:c9:cd:43:c7:8f:cc:72:c5:0f:bf:d9:de:38:
                    cb:a6:7f:f8:5a:13:e8:2d:b3:03:9f:da:1c:5e:d9:
                    6d:1c:a4:e2:4f:63:ae:a0:60:3e:d4:60:df:f1:21:
                    a6:c5:61:03:b1:e5:07:91:1e:8e:a0:41:af:c7:99:
                    60:1a:f5:f7:54:a4:68:25:55:86:4f:1f:4d:0c:66:
                    1b:6d:12:9f:17:78:ec:41:f5:41:2f:4c:d5:bd:a3:
                    bd:72:f7:6c:11:3a:3d:e8:ad:35:aa:f8:51:e8:b7:
                    1d:44:60:c4:84:98:46:b4:34:38:46:76:71:ea:41:
                    0f:09:4e:1f:64:b8:99:0c:41:3e:99:d9:13:03:ba:
                    69:90:7e:44:20:9d:b6:64:49:04:44:fe:6f:6e:40:
                    dc:22:2a:9d:ca:63:8b:42:60:5e:e2:80:88:d9:1f:
                    92:12:de:18:38:ce:34:e0:a8:74:8b:41:90:f5:a4:
                    c6:df:cc:8b:23:fd:8a:c3:7f:47:60:1e:8a:8f:07:
                    bb:c3:94:97:27:eb:38:e9:a0:39:8e:70:7c:ad:ff:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:14:C3:01:74:C1:E4:F6:0B:83:77:9B:07:DC:02:3E:C3:DE:3A
            X509v3 Authority Key Identifier:
                keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:81:42:dc:e2:fc:fb:d4:a1:ec:74:f2:56:f3:19:00:f1:
         a6:28:0b:02:d6:8f:96:bf:84:4b:9b:a9:a0:fd:6d:9e:b8:9c:
         a9:f7:31:40:0b:91:e7:4a:45:c6:f2:df:8e:4c:14:82:f0:e6:
         b7:41:d9:76:97:7b:02:37:a1:13:dc:bd:76:4f:62:32:8b:96:
         cc:77:44:a8:a8:53:f4:8d:b4:d6:a0:3f:c1:56:2d:a7:f3:44:
         2f:90:1f:d4:96:2c:1d:a7:18:c4:fd:da:be:2a:ae:e8:4d:9c:
         9a:b7:08:4d:b8:97:8b:31:b9:3d:81:52:7f:3b:d8:1d:3c:26:
         43:82:3e:9f:93:b3:13:a7:92:54:08:4d:4a:00:14:cf:ab:67:
         e1:4d:d0:f7:6f:8f:f0:6b:b2:19:40:f9:04:e3:bc:b6:7f:d7:
         71:7e:00:9c:59:04:75:dc:8a:86:0e:f1:f1:4a:8f:36:d7:86:
         2c:62:ec:17:74:f0:5b:4b:ac:93:21:fd:0b:0a:fc:1d:ba:c4:
         d6:46:ec:3d:bd:df:f0:26:f9:d6:a1:07:f1:5c:c5:d0:3d:08:
         ec:10:da:3f:08:93:6e:50:67:36:8d:c8:86:1e:ac:ad:c5:ae:
         b8:e8:e2:1d:3b:be:be:0a:39:27:b5:83:9f:3c:48:66:46:94:
         84:3c:26:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYc580VTffIiLSHzGDv1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDZjYmRhYTc5NGE5N2E3ZDgyNjY3MDJjYjA1NGYxYjI0
OWQ0YmYwHhcNMjUwNDEzMDkwMTIzWhcNMjUwNDE0MDkwMTIzWjAzMTEwLwYDVQQD
EyhjYTMzMTRjMzAxNzRjMWU0ZjYwYjgzNzc5YjA3ZGMwMjNlYzNkZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+TD5fe8QXFARpkUfc/GWU31Xbh
5RobkpcP7Oq90fXZoLYdyOEo9gssRgGF0MnNQ8ePzHLFD7/Z3jjLpn/4WhPoLbMD
n9ocXtltHKTiT2OuoGA+1GDf8SGmxWEDseUHkR6OoEGvx5lgGvX3VKRoJVWGTx9N
DGYbbRKfF3jsQfVBL0zVvaO9cvdsETo96K01qvhR6LcdRGDEhJhGtDQ4RnZx6kEP
CU4fZLiZDEE+mdkTA7ppkH5EIJ22ZEkERP5vbkDcIiqdymOLQmBe4oCI2R+SEt4Y
OM404Kh0i0GQ9aTG38yLI/2Kw39HYB6Kjwe7w5SXJ+s46aA5jnB8rf+NKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMozFMMBdMHk9guDd5sH3AI+w946MB8GA1UdIwQY
MBaAFFvWy9qnlKl6fYJmcCywVPGySdS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTkt
ZDc0YTEyOTU5YWQ3LzEvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jOTMxZmMtZGYxZS00YmIxLTlkZTktZDc0YTEyOTU5YWQ3
LzEvVzliTDJxZVVxWHA5Z21ad0xMQlU4YkpKMUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbimBQtzi
/PvUoex08lbzGQDxpigLAtaPlr+ES5upoP1tnricqfcxQAuR50pFxvLfjkwUgvDm
t0HZdpd7AjehE9y9dk9iMouWzHdEqKhT9I201qA/wVYtp/NEL5Af1JYsHacYxP3a
viqu6E2cmrcITbiXizG5PYFSfzvYHTwmQ4I+n5OzE6eSVAhNSgAUz6tn4U3Q92+P
8GuyGUD5BOO8tn/XcX4AnFkEddyKhg7x8UqPNteGLGLsF3TwW0uskyH9Cwr8HbrE
1kbsPb3f8Cb51qEH8VzF0D0I7BDaPwiTblBnNo3Ihh6srcWuuOjiHTu+vgo5J7WD
nzxIZkaUhDwmjw==
-----END CERTIFICATE-----