Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File:                     wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier:          l7TEJYOJV4V7qJZo7YF4jBp8tSX2Oy/0uEfBb8HDIzc=
Subject key identifier:   7B:41:B8:1C:11:77:15:B8:77:8A:33:4D:B8:44:7A:6C:02:20:11:8B
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer:       /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial:       01962F06E352B65861B2FDB7F0C7D10102A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number:          1277
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
                          2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: 57gtlP5k1XtzHqfTmOxcPUstKg7CxDmH/XjtcNmgndU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:52:b6:58:61:b2:fd:b7:f0:c7:d1:01:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=7b41b81c117715b8778a334db8447a6c0220118b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:43:0e:f9:7a:17:ea:c8:67:14:90:27:67:
                    a9:bb:fb:21:cd:17:f2:cd:d8:d9:90:5f:16:dc:18:
                    b7:8d:5c:27:39:9c:3a:c9:56:7b:59:c0:cf:8e:b8:
                    7f:a9:56:84:92:36:57:cf:d7:68:00:ca:0f:b2:79:
                    00:74:b0:96:bf:06:ff:54:6a:47:dc:6e:1e:03:94:
                    8e:44:4e:9d:52:66:31:41:d4:47:ea:0f:08:e1:65:
                    f7:f2:59:8d:f5:13:90:c4:bb:3f:1d:b6:b0:68:3b:
                    45:22:61:48:a8:e3:39:15:35:85:fd:a0:d8:26:9e:
                    8f:6c:b9:e8:30:0f:ba:35:ee:36:01:d9:9d:df:03:
                    29:6e:e4:51:44:04:55:8a:6b:d6:f1:33:c9:b9:0f:
                    b7:e8:8f:85:b7:d6:ed:bf:d7:fb:d2:ee:d5:bf:36:
                    2f:7f:b5:99:eb:c8:b2:b1:e0:1a:2c:d4:b6:2b:9a:
                    e9:5f:40:39:9b:19:24:7b:35:07:3e:8a:03:be:7d:
                    74:94:b2:d9:32:10:1c:3a:6d:42:45:cb:8d:47:fb:
                    e1:68:1c:46:3b:d2:dc:00:83:1a:ac:af:24:55:2b:
                    2a:aa:e0:d8:f6:e1:a4:31:8f:87:76:c0:f9:5d:af:
                    90:6e:44:66:d3:7b:89:02:37:61:db:2d:2c:7f:ec:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:B8:1C:11:77:15:B8:77:8A:33:4D:B8:44:7A:6C:02:20:11:8B
            X509v3 Authority Key Identifier:
                keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:f8:4a:65:be:bd:13:7e:80:53:74:d3:6f:2a:7f:9b:33:
         39:5d:4f:b4:fa:e6:bf:38:71:64:c1:96:e6:88:86:cd:d7:57:
         17:5c:e7:78:2c:3d:4a:bf:05:ed:5a:dc:aa:70:0b:55:f2:0d:
         5c:e1:09:25:9e:44:b7:18:4d:ff:6f:ed:93:3d:bd:84:0d:1b:
         88:8c:bc:82:26:ae:9c:3e:f4:dd:fe:68:98:d3:ee:7e:16:d5:
         65:71:f9:21:ef:5d:0d:65:b4:fa:c9:29:28:fd:d3:86:40:ea:
         cb:99:5b:3f:a2:e8:6e:90:2e:5a:95:20:93:69:df:28:f2:5e:
         eb:1f:fd:d9:cd:ec:e2:64:bd:89:24:72:d0:53:cb:68:95:73:
         22:24:ce:49:2a:1b:4a:54:c2:6a:db:53:b8:18:63:b2:0b:fd:
         af:87:62:e5:e2:24:57:4b:27:7a:4f:92:e9:d7:c0:4e:db:62:
         05:a0:db:07:ba:c3:02:95:f2:f4:24:b2:9b:e0:7f:73:12:e4:
         2e:30:ec:55:65:ca:b4:0c:68:72:7a:de:83:5a:87:5d:49:8c:
         6a:42:ae:31:c8:ae:05:ae:9c:29:3b:33:17:8c:53:9c:52:08:
         56:0c:43:df:bf:ce:d2:61:7b:cf:97:8e:e0:27:36:ce:fd:f1:
         31:f2:07:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuNStlhhsv238MfRAQKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx
ZmM4NDUwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
Eyg3YjQxYjgxYzExNzcxNWI4Nzc4YTMzNGRiODQ0N2E2YzAyMjAxMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBDDvl6F+rIZxSQJ2epu/shzRfy
zdjZkF8W3Bi3jVwnOZw6yVZ7WcDPjrh/qVaEkjZXz9doAMoPsnkAdLCWvwb/VGpH
3G4eA5SORE6dUmYxQdRH6g8I4WX38lmN9ROQxLs/HbawaDtFImFIqOM5FTWF/aDY
Jp6PbLnoMA+6Ne42Admd3wMpbuRRRARVimvW8TPJuQ+36I+Ft9btv9f70u7VvzYv
f7WZ68iyseAaLNS2K5rpX0A5mxkkezUHPooDvn10lLLZMhAcOm1CRcuNR/vhaBxG
O9LcAIMarK8kVSsqquDY9uGkMY+HdsD5Xa+QbkRm03uJAjdh2y0sf+x/awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtBuBwRdxW4d4ozTbhEemwCIBGLMB8GA1UdIwQY
MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt
NGYyMjVkMDg4NTY2LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2
LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4z4SmW+
vRN+gFN0028qf5szOV1PtPrmvzhxZMGW5oiGzddXF1zneCw9Sr8F7VrcqnALVfIN
XOEJJZ5EtxhN/2/tkz29hA0biIy8giaunD703f5omNPufhbVZXH5Ie9dDWW0+skp
KP3ThkDqy5lbP6LobpAuWpUgk2nfKPJe6x/92c3s4mS9iSRy0FPLaJVzIiTOSSob
SlTCattTuBhjsgv9r4di5eIkV0snek+S6dfATttiBaDbB7rDApXy9CSym+B/cxLk
LjDsVWXKtAxocnreg1qHXUmMakKuMciuBa6cKTszF4xTnFIIVgxD37/O0mF7z5eO
4Cc2zv3xMfIHug==
-----END CERTIFICATE-----