Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File:                     woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier:          EjeiuVew6FyfWnQGKFdhSgQq5BqsURFWrs8/bJov1OM=
Subject key identifier:   93:5A:AC:9F:15:12:31:CB:76:80:5D:28:24:4D:FD:AD:A4:75:65:31
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer:       /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial:       01962F064575E8914189A6072B0817B6EB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
                          2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
                          3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: VDcdcG8ophblH6LkpmbVKmGqNGfMrfGJ1tUvFjbQdyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:45:75:e8:91:41:89:a6:07:2b:08:17:b6:eb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=935aac9f151231cb76805d28244dfdada4756531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:3d:26:4a:43:b6:12:3d:02:b8:6f:3f:5e:
                    c1:b5:69:d0:98:10:cf:fc:3e:a2:1f:33:4d:82:23:
                    f6:09:db:31:6e:c9:53:da:fc:02:1d:99:4b:78:27:
                    fb:0d:33:1c:02:e8:2a:ad:e4:5e:bd:89:29:e7:03:
                    1f:94:12:8f:11:b5:81:e4:6b:cb:4b:d9:8e:63:2c:
                    61:a6:56:66:09:22:9b:90:f5:33:7e:9d:12:2c:cc:
                    ea:10:28:24:2d:b6:3f:6a:51:db:79:0d:7c:df:73:
                    fc:91:13:da:fb:e1:6b:e9:8b:13:79:e0:c0:8e:d1:
                    8e:14:60:b1:08:2e:21:98:2f:d7:fc:de:9a:b1:b4:
                    be:29:56:5f:65:85:a6:c6:a0:00:8e:67:a9:40:59:
                    d8:80:21:bd:4e:f5:96:a4:41:6d:89:25:69:90:74:
                    69:eb:b6:99:58:02:0e:11:2a:2f:d5:78:90:97:8a:
                    3c:27:de:f5:6b:00:c9:96:d4:cf:8b:9d:e0:76:74:
                    59:4e:6b:50:89:87:c3:3e:7c:f6:13:c2:26:14:8d:
                    91:08:91:47:4f:4b:49:5e:a7:06:ab:4f:fc:a9:c6:
                    f6:3f:58:cd:7a:42:a4:2e:cf:08:db:04:a3:f0:3c:
                    d1:60:57:5e:de:43:e6:13:68:c4:38:6a:45:43:e5:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:AC:9F:15:12:31:CB:76:80:5D:28:24:4D:FD:AD:A4:75:65:31
            X509v3 Authority Key Identifier:
                keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:24:62:64:3d:20:09:fc:83:0b:04:59:52:d2:ad:6e:4b:15:
         dd:06:29:a3:47:52:91:7e:c4:5f:50:12:0f:55:15:70:b8:4d:
         46:1f:1d:7c:26:4b:90:58:8e:eb:6b:1e:35:ff:2b:9c:c1:f9:
         32:e7:02:59:dc:cd:61:57:6f:30:dd:fd:c8:f0:1d:da:e6:6d:
         a3:97:7c:42:03:32:b0:60:59:ed:9d:05:ae:05:9b:58:24:6b:
         7a:06:ca:3a:7f:97:e7:80:59:63:b7:2d:f4:6f:a3:4c:b3:7b:
         5b:9a:a1:82:7b:4e:a8:d2:41:86:8e:39:cd:26:71:a6:2e:fa:
         44:21:24:0a:2b:dd:c3:02:c5:44:25:32:c6:59:f6:b7:43:a5:
         14:71:f9:94:cf:bf:4c:57:c1:22:20:ec:cb:3f:96:62:37:a0:
         4a:a3:d9:bc:5d:b6:08:93:97:83:1e:a1:bf:87:60:ab:93:bc:
         d2:73:a0:79:1c:8d:57:e5:30:0f:c5:8c:f1:c5:e2:7c:fe:33:
         37:f2:1c:7f:d0:a1:e7:49:13:7e:73:81:fd:f6:8c:73:8e:02:
         9f:ab:ce:a6:05:6b:bc:40:ca:cd:8e:02:41:23:6c:a9:5f:48:
         4a:ba:49:dc:fe:66:dd:da:d8:1e:b3:cf:82:f4:94:5e:db:40:
         38:53:42:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBkV16JFBiaYHKwgXtuufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODVhMTQ3NGUzODYyN2UzMDFhNTUxYmUzNGVmYTQ1ODJh
NWNmMzkwHhcNMjUwNDEzMTIwMTAyWhcNMjUwNDE0MTIwMTAyWjAzMTEwLwYDVQQD
Eyg5MzVhYWM5ZjE1MTIzMWNiNzY4MDVkMjgyNDRkZmRhZGE0NzU2NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNc9JkpDthI9ArhvP17BtWnQmBDP
/D6iHzNNgiP2CdsxbslT2vwCHZlLeCf7DTMcAugqreRevYkp5wMflBKPEbWB5GvL
S9mOYyxhplZmCSKbkPUzfp0SLMzqECgkLbY/alHbeQ1833P8kRPa++Fr6YsTeeDA
jtGOFGCxCC4hmC/X/N6asbS+KVZfZYWmxqAAjmepQFnYgCG9TvWWpEFtiSVpkHRp
67aZWAIOESov1XiQl4o8J971awDJltTPi53gdnRZTmtQiYfDPnz2E8ImFI2RCJFH
T0tJXqcGq0/8qcb2P1jNekKkLs8I2wSj8DzRYFde3kPmE2jEOGpFQ+XFGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNarJ8VEjHLdoBdKCRN/a2kdWUxMB8GA1UdIwQY
MBaAFMKFoUdOOGJ+MBpVG+NO+kWCpc85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYt
ZDVlNjM4NTZkNTVkLzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYtZDVlNjM4NTZkNTVk
LzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCRiZD0g
CfyDCwRZUtKtbksV3QYpo0dSkX7EX1ASD1UVcLhNRh8dfCZLkFiO62seNf8rnMH5
MucCWdzNYVdvMN39yPAd2uZto5d8QgMysGBZ7Z0FrgWbWCRregbKOn+X54BZY7ct
9G+jTLN7W5qhgntOqNJBho45zSZxpi76RCEkCivdwwLFRCUyxln2t0OlFHH5lM+/
TFfBIiDsyz+WYjegSqPZvF22CJOXgx6hv4dgq5O80nOgeRyNV+UwD8WM8cXifP4z
N/Icf9Ch50kTfnOB/faMc44Cn6vOpgVrvEDKzY4CQSNsqV9ISrpJ3P5m3drYHrPP
gvSUXttAOFNCKg==
-----END CERTIFICATE-----