Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          14106XkafPDWel5XiibFuKFSlFTz+IGqN29Wi59w474=
Subject key identifier:   7B:D1:65:DC:0E:2C:E4:28:B1:DF:58:25:90:7B:42:0F:1D:2E:9B:5A
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       01962E618A6EE31359C4E7EFC2ACEA37ADF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          0F05
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: 9PqS6G6+SYHb8V+U/zpdHvXr33DlTxdyqpr1og06s9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:6e:e3:13:59:c4:e7:ef:c2:ac:ea:37:ad:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=7bd165dc0e2ce428b1df5825907b420f1d2e9b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:4a:6c:f2:d4:38:07:16:f6:76:6f:35:87:
                    d8:b6:e5:43:ee:a4:38:26:0a:09:eb:a1:cb:99:07:
                    6a:a1:30:d7:78:94:44:bd:20:f0:20:17:cc:f7:4f:
                    55:f3:ec:7b:67:09:09:1b:d9:01:4e:5b:0e:f2:a5:
                    fa:26:83:9d:f7:4b:71:46:cf:7d:84:28:12:1e:0f:
                    ee:97:72:0e:8d:c9:a2:ba:df:68:39:3a:ee:cb:3f:
                    0e:aa:7b:1f:23:34:d1:28:08:65:26:bd:a1:eb:24:
                    90:1f:cf:20:91:87:42:f2:84:07:93:1b:a4:9f:9f:
                    cf:84:01:17:2e:fb:d8:1f:02:61:62:9e:9b:25:7c:
                    b3:36:6c:07:39:6d:cf:d0:6c:9d:ce:5e:ae:31:9b:
                    03:50:1b:ea:04:32:cf:ed:9f:0b:3d:43:c8:10:0a:
                    28:c8:17:59:4e:74:f0:f5:9d:d7:ac:fd:07:79:49:
                    67:b8:c6:09:ab:ad:20:14:a4:fb:31:87:4c:d3:3e:
                    15:43:f1:ba:d0:3a:ef:fd:6a:f3:41:f1:a9:b4:3c:
                    d3:e2:c3:c3:16:68:e9:2c:68:fe:72:08:fa:ef:e8:
                    9f:fe:0e:dc:29:08:d4:23:12:b0:06:e8:ba:fb:e0:
                    f8:fb:d5:39:29:86:83:9a:5d:10:11:56:c6:61:b9:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:65:DC:0E:2C:E4:28:B1:DF:58:25:90:7B:42:0F:1D:2E:9B:5A
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:50:fe:0f:db:1c:f6:42:02:07:6d:9f:3a:50:50:8c:2a:
         e3:2a:ee:74:b8:d0:c3:d5:ab:4e:a8:85:17:b8:9d:e5:75:a8:
         a3:f3:ee:d2:f5:97:5f:af:19:2f:54:6e:36:21:b2:65:28:f0:
         0f:7f:bf:a8:25:95:a3:4f:d5:87:9e:6b:70:57:bd:4b:da:ed:
         59:a5:c1:4a:fa:51:4a:b1:94:00:55:db:27:a4:82:b8:93:68:
         b9:e4:97:6b:f4:6e:94:8e:6c:5f:82:8e:45:2b:66:f2:57:d3:
         89:2d:02:63:59:b0:62:d7:18:40:98:2e:f8:d6:c0:1b:7c:e9:
         5f:ef:2d:32:dc:a8:56:1c:a0:46:57:77:04:68:b0:ae:b6:dc:
         0c:44:ca:27:6f:e0:dd:07:d0:7a:bd:8d:e5:4f:47:26:4c:70:
         7b:51:4c:7a:35:2a:d7:79:70:2f:08:36:87:2b:1f:2d:0a:fb:
         e5:4b:b0:e9:8d:7d:f8:b3:39:ef:fc:05:06:45:fe:f5:d5:17:
         80:35:63:77:a8:f8:f5:e3:84:a4:14:50:0b:60:5d:e5:fc:7a:
         02:ab:e0:d2:d1:cd:20:57:4f:51:9c:50:5b:ef:0e:09:ce:cf:
         ec:e5:02:46:5c:78:e5:a3:a1:fb:d3:49:b4:60:c3:14:93:1a:
         1a:70:75:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYpu4xNZxOfvwqzqN63wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj
ZGQzYjMwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
Eyg3YmQxNjVkYzBlMmNlNDI4YjFkZjU4MjU5MDdiNDIwZjFkMmU5YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKBKbPLUOAcW9nZvNYfYtuVD7qQ4
JgoJ66HLmQdqoTDXeJREvSDwIBfM909V8+x7ZwkJG9kBTlsO8qX6JoOd90txRs99
hCgSHg/ul3IOjcmiut9oOTruyz8OqnsfIzTRKAhlJr2h6ySQH88gkYdC8oQHkxuk
n5/PhAEXLvvYHwJhYp6bJXyzNmwHOW3P0Gydzl6uMZsDUBvqBDLP7Z8LPUPIEAoo
yBdZTnTw9Z3XrP0HeUlnuMYJq60gFKT7MYdM0z4VQ/G60Drv/WrzQfGptDzT4sPD
FmjpLGj+cgj67+if/g7cKQjUIxKwBui6++D4+9U5KYaDml0QEVbGYbmvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvRZdwOLOQosd9YJZB7Qg8dLptaMB8GA1UdIwQY
MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt
MzQ5MjhmOWExYzRmLzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm
LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNZQ/g/b
HPZCAgdtnzpQUIwq4yrudLjQw9WrTqiFF7id5XWoo/Pu0vWXX68ZL1RuNiGyZSjw
D3+/qCWVo0/Vh55rcFe9S9rtWaXBSvpRSrGUAFXbJ6SCuJNoueSXa/RulI5sX4KO
RStm8lfTiS0CY1mwYtcYQJgu+NbAG3zpX+8tMtyoVhygRld3BGiwrrbcDETKJ2/g
3QfQer2N5U9HJkxwe1FMejUq13lwLwg2hysfLQr75Uuw6Y19+LM57/wFBkX+9dUX
gDVjd6j49eOEpBRQC2Bd5fx6Aqvg0tHNIFdPUZxQW+8OCc7P7OUCRlx45aOh+9NJ
tGDDFJMaGnB1Ww==
-----END CERTIFICATE-----