Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          QcW0/qvbA8nXst8b11z/W/BxAKn4e/8xl/QbG3tJhBs=
Subject key identifier:   5A:A6:1C:1D:25:70:67:7C:B2:66:21:29:AB:51:B1:BC:3C:E8:B2:BB
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       01962F06E51584360C7C4E919A45FD1BC43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0969
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: wdFBaoCkS7htUY7Fpml81H4U5lQ4/cQoH5Qgj/DZ9z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:15:84:36:0c:7c:4e:91:9a:45:fd:1b:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=5aa61c1d2570677cb2662129ab51b1bc3ce8b2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:ce:ce:68:6d:07:5b:c3:a0:3b:ee:55:2a:
                    30:89:6d:2d:16:d5:04:60:be:a6:e3:21:46:d2:75:
                    b3:e4:de:8a:6b:9b:81:74:1e:00:d5:45:15:ba:7e:
                    f1:77:9b:86:f9:70:5b:f5:79:3b:ed:c2:2d:c6:54:
                    45:06:ee:69:8c:ad:19:17:ef:2c:5a:2b:3a:8b:63:
                    2f:7f:af:50:57:76:a5:29:33:f9:80:19:81:75:b8:
                    c6:ab:a7:93:ee:f5:17:1b:8e:26:82:df:80:46:de:
                    71:4a:68:2f:50:64:b2:81:32:9e:31:8a:c2:38:98:
                    33:21:78:ef:68:f8:15:15:f5:32:33:75:e8:fd:a9:
                    11:24:b8:ee:e7:88:d3:e8:1d:f6:9a:ae:42:34:f3:
                    9f:bd:31:62:af:5e:ba:ae:69:2a:57:0d:93:f8:2e:
                    87:65:26:ca:a4:86:71:9c:7c:86:3c:55:ce:aa:de:
                    01:86:90:b4:ac:48:2f:d0:6b:7f:16:b6:d4:d2:e1:
                    9d:e8:fc:d3:54:99:5e:8b:b4:12:1e:be:71:5b:28:
                    62:9e:4f:a8:18:f6:ec:bd:e7:5c:e0:bd:ae:dd:58:
                    10:d9:5a:5c:bf:49:21:c4:7e:95:a5:7e:f7:74:16:
                    f2:b1:ef:db:95:49:6c:aa:2f:59:34:6f:a7:9f:c2:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:1C:1D:25:70:67:7C:B2:66:21:29:AB:51:B1:BC:3C:E8:B2:BB
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:bb:87:9b:f3:04:36:b6:45:af:31:80:7a:37:76:4d:92:
         e2:f1:8e:77:40:26:60:ef:6f:7f:3a:f7:1a:01:b5:ef:6b:b2:
         79:92:4c:dc:be:cd:78:3a:63:d9:2f:fb:69:aa:9e:80:68:7a:
         53:f7:a1:8c:ed:81:86:8f:91:6d:fe:55:8e:ad:e7:f3:0f:33:
         af:3b:62:78:24:bf:fa:4a:67:11:7c:6e:98:de:79:a0:9e:69:
         a7:ff:a2:09:13:ef:38:9e:69:0a:39:d3:6e:0c:ec:49:b7:79:
         d3:96:65:42:04:68:ed:09:cd:f1:20:f0:85:bd:50:20:db:d3:
         9e:f7:46:52:2c:25:38:d0:73:7e:83:7d:d4:14:82:04:83:b5:
         6f:4d:88:9e:d3:4c:c4:21:7b:d8:69:2c:62:91:08:73:41:34:
         97:51:3f:4d:67:61:16:39:f6:bc:18:89:4f:dd:a4:4d:31:99:
         c0:c6:03:36:fc:b7:db:36:ad:87:00:5b:11:67:19:95:05:1c:
         10:9d:26:10:f5:4c:5b:c3:f2:8a:9e:53:03:f0:61:83:ad:f8:
         7c:dd:7f:1c:7b:af:6b:1b:1a:49:e5:95:94:7b:6b:4f:f1:87:
         8d:89:62:6b:c7:b5:3c:8c:d7:94:62:61:48:66:95:5f:b5:6a:
         c7:32:36:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuUVhDYMfE6RmkX9G8Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5
MDBhZDUwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
Eyg1YWE2MWMxZDI1NzA2NzdjYjI2NjIxMjlhYjUxYjFiYzNjZThiMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprOzmhtB1vDoDvuVSowiW0tFtUE
YL6m4yFG0nWz5N6Ka5uBdB4A1UUVun7xd5uG+XBb9Xk77cItxlRFBu5pjK0ZF+8s
Wis6i2Mvf69QV3alKTP5gBmBdbjGq6eT7vUXG44mgt+ARt5xSmgvUGSygTKeMYrC
OJgzIXjvaPgVFfUyM3Xo/akRJLju54jT6B32mq5CNPOfvTFir166rmkqVw2T+C6H
ZSbKpIZxnHyGPFXOqt4BhpC0rEgv0Gt/FrbU0uGd6PzTVJlei7QSHr5xWyhink+o
GPbsvedc4L2u3VgQ2Vpcv0khxH6VpX73dBbyse/blUlsqi9ZNG+nn8JtTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqmHB0lcGd8smYhKatRsbw86LK7MB8GA1UdIwQY
MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt
YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2
LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFy7h5vz
BDa2Ra8xgHo3dk2S4vGOd0AmYO9vfzr3GgG172uyeZJM3L7NeDpj2S/7aaqegGh6
U/ehjO2Bho+Rbf5Vjq3n8w8zrztieCS/+kpnEXxumN55oJ5pp/+iCRPvOJ5pCjnT
bgzsSbd505ZlQgRo7QnN8SDwhb1QINvTnvdGUiwlONBzfoN91BSCBIO1b02IntNM
xCF72GksYpEIc0E0l1E/TWdhFjn2vBiJT92kTTGZwMYDNvy32zathwBbEWcZlQUc
EJ0mEPVMW8Pyip5TA/Bhg634fN1/HHuvaxsaSeWVlHtrT/GHjYlia8e1PIzXlGJh
SGaVX7VqxzI2sw==
-----END CERTIFICATE-----