Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          +iviRXvojhj0Bxw/606VLBQz5vckSJy6s2iUwfmSgm0=
Subject key identifier:   02:6F:51:30:97:BA:BF:B7:6A:D9:75:C3:69:76:4C:AE:C5:3F:A2:1E
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       01962F06A5F43195364467455E7EF1854FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          07E1
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa (hash: cL3utd2QLzcDLl61jDEDa8thzTSW3ILE3u54VZ6FafA=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: GkzKjLnvyp6WxYOlxbwpjgHHGqcNjZTrg+dMqqPdXyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:f4:31:95:36:44:67:45:5e:7e:f1:85:4f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=026f513097babfb76ad975c369764caec53fa21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:7c:4a:8f:71:0d:64:ef:e2:5c:3f:5b:81:
                    86:07:85:48:9d:88:78:2c:0d:be:2a:98:68:34:2b:
                    54:65:8a:b1:63:bb:91:36:5b:2a:3c:63:c4:70:a0:
                    31:43:1c:4d:c0:58:1e:1b:60:43:39:89:54:42:c9:
                    fa:82:b2:8d:53:ab:f3:cf:b2:25:6c:7f:23:5d:b1:
                    51:d8:99:8c:84:d8:67:27:1f:ce:e5:4b:c4:5c:39:
                    c4:78:b2:8b:12:cf:d3:57:2b:aa:c6:e1:54:a6:37:
                    b2:f1:80:e4:58:d3:0a:f7:fc:82:5d:77:20:50:6f:
                    8c:77:9e:ab:f2:55:cf:f3:72:d1:e2:f6:53:b3:8d:
                    c4:07:69:10:59:6b:53:da:c8:0d:b8:01:db:e1:b9:
                    a6:96:f3:24:b4:23:12:5d:04:84:3a:49:be:b9:72:
                    b3:cf:6c:e2:b9:af:f5:9b:ee:fc:55:69:00:fc:de:
                    fd:1f:60:09:5b:c4:f7:be:6c:a9:fb:f4:df:65:8e:
                    46:f3:05:53:46:65:07:62:be:82:a9:05:08:c5:37:
                    4d:25:f2:1d:26:12:4d:b6:31:9a:2b:cf:69:94:e9:
                    5b:38:3e:72:ba:45:7e:f4:33:62:70:9f:e9:b9:ff:
                    e6:d1:39:fb:27:e4:f9:9d:6e:d8:a4:87:94:38:30:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:51:30:97:BA:BF:B7:6A:D9:75:C3:69:76:4C:AE:C5:3F:A2:1E
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:93:f6:65:a8:b4:0f:2f:2e:d7:20:fe:5c:d0:23:0e:3d:90:
         15:f5:5e:00:73:78:05:cb:6a:56:5a:ae:c7:20:9f:28:0e:72:
         a3:ad:c7:69:fb:46:45:6a:b0:f8:85:46:ba:d1:5d:92:45:b6:
         a1:d7:1b:10:5d:37:7d:a1:5f:5e:85:7d:2f:e0:e9:c6:71:23:
         f1:db:c6:cb:a6:ac:30:cb:94:dc:72:fc:34:e1:b1:8e:23:45:
         2d:50:94:56:80:04:6a:ef:c1:10:9a:3e:8c:bd:18:e7:0c:6e:
         15:f2:16:f3:5a:dc:0f:a8:05:83:7c:14:4a:01:f7:5b:ae:c6:
         d7:04:d8:95:9d:27:05:81:d2:67:6a:64:f1:2b:cc:fd:e2:db:
         12:9a:e4:b8:b4:40:0e:d7:b4:82:f5:40:38:24:54:3e:da:18:
         c7:3e:48:cb:dd:c0:64:81:d4:16:0a:fa:ef:39:25:fe:6a:65:
         9e:21:39:d6:32:20:88:6b:10:28:02:8e:7c:41:d8:70:15:84:
         81:f0:0a:3c:d4:c0:51:a5:9d:9d:64:d0:f5:28:5b:f6:e1:e2:
         55:86:d1:e3:c1:0d:26:07:53:13:e7:d1:ca:0c:dc:cd:bb:bd:
         dd:21:67:ed:58:52:23:7a:05:d4:eb:33:26:55:d2:69:60:04:
         42:61:e3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqX0MZU2RGdFXn7xhU++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzcwY2YxODA5YjdiYzY2M2FkNDE0M2MwODk3NmI0ODEw
MmVmYjkwHhcNMjUwNDEzMTIwMTI2WhcNMjUwNDE0MTIwMTI2WjAzMTEwLwYDVQQD
EygwMjZmNTEzMDk3YmFiZmI3NmFkOTc1YzM2OTc2NGNhZWM1M2ZhMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOl8So9xDWTv4lw/W4GGB4VInYh4
LA2+KphoNCtUZYqxY7uRNlsqPGPEcKAxQxxNwFgeG2BDOYlUQsn6grKNU6vzz7Il
bH8jXbFR2JmMhNhnJx/O5UvEXDnEeLKLEs/TVyuqxuFUpjey8YDkWNMK9/yCXXcg
UG+Md56r8lXP83LR4vZTs43EB2kQWWtT2sgNuAHb4bmmlvMktCMSXQSEOkm+uXKz
z2ziua/1m+78VWkA/N79H2AJW8T3vmyp+/TfZY5G8wVTRmUHYr6CqQUIxTdNJfId
JhJNtjGaK89plOlbOD5yukV+9DNicJ/puf/m0Tn7J+T5nW7YpIeUODBnhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJvUTCXur+3atl1w2l2TK7FP6IeMB8GA1UdIwQY
MBaAFMI3DPGAm3vGY61BQ8CJdrSBAu+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWIt
ZTE1NjNmODEyOTI5LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWItZTE1NjNmODEyOTI5
LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpP2Zai0
Dy8u1yD+XNAjDj2QFfVeAHN4BctqVlquxyCfKA5yo63HaftGRWqw+IVGutFdkkW2
odcbEF03faFfXoV9L+DpxnEj8dvGy6asMMuU3HL8NOGxjiNFLVCUVoAEau/BEJo+
jL0Y5wxuFfIW81rcD6gFg3wUSgH3W67G1wTYlZ0nBYHSZ2pk8SvM/eLbEprkuLRA
Dte0gvVAOCRUPtoYxz5Iy93AZIHUFgr67zkl/mplniE51jIgiGsQKAKOfEHYcBWE
gfAKPNTAUaWdnWTQ9Shb9uHiVYbR48ENJgdTE+fRygzczbu93SFn7VhSI3oF1Osz
JlXSaWAEQmHjaw==
-----END CERTIFICATE-----