Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
File:                     WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft (raw, json)
Hash identifier:          H8L6z7mxOkGC3x/HlD4M73ich36fGR+8WwPizp40mrU=
Subject key identifier:   31:E9:78:5C:1E:F0:B2:4D:93:55:BA:AB:1A:33:D2:46:4C:7E:79:FD
Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
Certificate issuer:       /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Certificate serial:       01962F0728F4327449264E1138CB3A9202CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
Manifest number:          0538
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: GqbACIHpXheHhq0oe01LtYC6Cs8.roa (hash: 1QDs0/2NoNbNsd7ad8m6jQQ5pnMmhaUanNisyPMXmxQ=)
                          2: WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl (hash: Kg6JvNPTsPd/YPpWKHfO8FXYx5lXmf26WBHO1Lhr1YI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:f4:32:74:49:26:4e:11:38:cb:3a:92:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=31e9785c1ef0b24d9355baab1a33d2464c7e79fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:93:e7:96:5d:3e:01:27:25:7a:cf:2e:7d:
                    71:99:dc:fb:2b:31:c3:9f:54:10:25:bb:3f:b0:7d:
                    20:b7:3e:05:1d:53:de:89:09:66:00:fc:c2:fa:4d:
                    be:ef:7b:fe:0b:d5:3f:5c:5f:c7:0e:17:ee:2c:ef:
                    1a:5c:3f:dc:f3:6c:5d:df:91:87:2e:49:9f:db:46:
                    c9:e1:a5:a4:e8:c3:51:24:fd:44:57:2f:34:81:0a:
                    79:19:99:e7:60:a3:24:d8:92:8d:23:35:be:4c:a8:
                    53:ae:03:84:68:97:cd:78:f7:92:a5:24:ee:98:1b:
                    92:bf:e1:a9:e9:0e:3f:45:2e:24:02:02:93:02:7c:
                    33:a0:ac:c6:da:57:a5:d0:71:20:a3:d6:da:ab:a6:
                    00:6d:66:15:62:60:c3:bf:60:3e:13:7a:13:1b:9e:
                    13:ca:83:25:28:3c:6a:94:bc:4e:b4:ad:63:5a:04:
                    9f:33:dc:0e:99:74:2c:ca:e8:5f:8a:88:67:d7:c1:
                    86:86:58:67:4f:39:65:39:78:b5:ec:f6:8a:7a:da:
                    cc:16:b4:b3:b8:c1:f8:0c:20:a8:0d:d7:db:22:5e:
                    d1:cd:f9:41:58:e8:92:67:45:fd:67:be:91:1e:e9:
                    82:29:98:ec:69:bc:1f:96:3f:1e:97:88:95:3a:d5:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:78:5C:1E:F0:B2:4D:93:55:BA:AB:1A:33:D2:46:4C:7E:79:FD
            X509v3 Authority Key Identifier:
                keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:86:25:f8:45:a7:59:56:5f:b8:57:81:44:f0:e3:8e:12:4a:
         c0:cd:cc:48:6f:ff:a9:99:88:2c:16:d2:1e:84:32:60:60:70:
         0b:93:d1:35:20:c0:0f:6c:0b:6f:03:8d:36:f8:53:64:c1:21:
         b6:2b:7a:d8:7f:7a:9d:dc:06:8e:f0:82:7e:55:4f:a2:e4:dd:
         ca:2a:93:79:9e:49:de:ab:68:66:8c:cd:6e:0f:27:a5:aa:35:
         dd:90:8c:bf:33:ab:9f:14:d0:94:14:81:95:08:57:68:5d:e2:
         aa:17:77:c4:f6:aa:fc:9a:10:af:09:09:81:6b:c5:a3:9b:96:
         41:90:ae:8c:e9:a4:88:2c:fa:e6:ce:1d:03:45:eb:30:d4:5b:
         6e:69:c4:dc:d1:bd:cd:3c:ca:8a:33:33:83:b2:c0:ce:87:23:
         b6:9c:ab:0b:c9:4b:6a:70:0a:cf:1e:d1:fb:c5:16:28:38:65:
         4e:52:e4:03:2e:02:d1:06:d6:42:0d:8a:2d:cc:fe:4e:75:2e:
         0e:72:aa:6e:ec:6f:eb:11:5d:60:40:c4:21:b3:c2:d2:a2:ca:
         1b:4a:8a:0b:c0:05:ed:aa:0e:8d:35:52:cb:4e:54:3a:52:a0:
         be:ef:96:b5:f0:6b:0f:85:70:b5:00:31:1a:e3:cc:c0:c4:b3:
         42:6d:39:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByj0MnRJJk4ROMs6kgLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTNlZmRkMGEyOGZkM2FiNjZiN2EwNWI5YjhkNzdjNTY2
NjYzNTYwHhcNMjUwNDEzMTIwMjAwWhcNMjUwNDE0MTIwMjAwWjAzMTEwLwYDVQQD
EygzMWU5Nzg1YzFlZjBiMjRkOTM1NWJhYWIxYTMzZDI0NjRjN2U3OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E+T55ZdPgEnJXrPLn1xmdz7KzHD
n1QQJbs/sH0gtz4FHVPeiQlmAPzC+k2+73v+C9U/XF/HDhfuLO8aXD/c82xd35GH
Lkmf20bJ4aWk6MNRJP1EVy80gQp5GZnnYKMk2JKNIzW+TKhTrgOEaJfNePeSpSTu
mBuSv+Gp6Q4/RS4kAgKTAnwzoKzG2lel0HEgo9baq6YAbWYVYmDDv2A+E3oTG54T
yoMlKDxqlLxOtK1jWgSfM9wOmXQsyuhfiohn18GGhlhnTzllOXi17PaKetrMFrSz
uMH4DCCoDdfbIl7RzflBWOiSZ0X9Z76RHumCKZjsabwflj8el4iVOtXnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHpeFwe8LJNk1W6qxoz0kZMfnn9MB8GA1UdIwQY
MBaAFFmT790KKP06tmt6Bbm413xWZmNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjIt
YTk1MjJiMmQwNDhiLzEvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjItYTk1MjJiMmQwNDhi
LzEvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Yl+EWn
WVZfuFeBRPDjjhJKwM3MSG//qZmILBbSHoQyYGBwC5PRNSDAD2wLbwONNvhTZMEh
tit62H96ndwGjvCCflVPouTdyiqTeZ5J3qtoZozNbg8npao13ZCMvzOrnxTQlBSB
lQhXaF3iqhd3xPaq/JoQrwkJgWvFo5uWQZCujOmkiCz65s4dA0XrMNRbbmnE3NG9
zTzKijMzg7LAzocjtpyrC8lLanAKzx7R+8UWKDhlTlLkAy4C0QbWQg2KLcz+TnUu
DnKqbuxv6xFdYEDEIbPC0qLKG0qKC8AF7aoOjTVSy05UOlKgvu+WtfBrD4VwtQAx
GuPMwMSzQm05Eg==
-----END CERTIFICATE-----