Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          hEF2mpOKoLJG7Yi963w5Gks6XVRSFup7kapB7IYC/68=
Subject key identifier:   86:71:1D:1A:4A:04:BF:D3:5C:DC:C9:19:DD:57:34:0E:8C:D4:E3:15
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       01962E996B6FFEB42FA008D07BCCB29592C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: 6sYVaEXcppgcoPJcHnSM5rnZq83JZnNe59r5LErlZVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:6f:fe:b4:2f:a0:08:d0:7b:cc:b2:95:92:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=86711d1a4a04bfd35cdcc919dd57340e8cd4e315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:f7:3c:1d:4d:76:c2:9a:0a:bc:ce:e0:ba:
                    42:1a:47:3b:dd:e3:da:bf:b6:12:70:67:55:ab:c2:
                    fd:9c:26:73:ae:b9:c3:03:4b:10:00:09:72:67:0d:
                    67:09:71:c5:dd:78:ad:91:3c:22:b9:69:0a:41:fe:
                    fc:fc:fa:9b:ee:63:8c:9e:d1:0f:80:97:f7:f0:dc:
                    87:d2:ce:d7:aa:44:0b:25:c1:b0:03:00:e4:45:ba:
                    c1:43:15:f7:74:b1:ff:18:9f:69:93:0f:e1:d3:00:
                    6d:1f:50:8d:11:29:68:c3:e6:67:c0:63:f7:62:b6:
                    f5:be:c5:41:fc:95:57:06:52:11:e7:af:00:13:67:
                    0b:ee:81:a7:76:01:30:5d:fe:37:86:bb:91:b8:36:
                    e3:98:48:27:7b:b6:02:bf:e3:d5:dc:f6:b5:8d:da:
                    da:20:de:76:f3:e2:f2:63:94:f5:99:d7:ea:7f:fc:
                    77:a5:eb:8b:1e:3e:59:bf:29:c4:4d:59:93:14:f6:
                    2b:b2:4d:04:66:fd:f8:e0:2c:59:c6:2f:30:52:d2:
                    36:bb:7c:3b:47:f7:8b:a2:6d:d9:99:6d:36:4f:12:
                    b4:4f:92:a2:68:c7:a9:d4:6c:4c:8d:97:49:94:cc:
                    07:6a:58:f3:3c:0a:3d:13:a9:d9:d8:ff:88:5a:f7:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:1D:1A:4A:04:BF:D3:5C:DC:C9:19:DD:57:34:0E:8C:D4:E3:15
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:df:ba:33:d9:72:e6:7f:5b:b7:15:dc:cd:67:5c:0c:09:
         c5:8c:49:a3:c3:7e:5f:3c:fb:63:8d:18:d4:70:f3:a8:d5:02:
         bd:63:25:d0:44:1a:7a:36:3e:f7:d5:c5:bb:83:2c:99:99:f2:
         77:58:43:c6:b6:83:5e:06:b1:eb:68:04:f3:de:30:c4:32:4a:
         ae:a7:dd:01:2c:a9:a6:87:87:7b:a5:68:06:26:36:ff:bd:f4:
         98:cc:68:22:e9:c9:97:d6:b1:8b:77:55:77:4f:07:95:b7:8b:
         fd:2f:01:96:7c:87:87:08:82:72:70:c8:2e:d7:a9:4b:6f:c0:
         00:1c:b1:75:59:63:a7:9b:43:a4:32:2d:58:43:61:66:33:ba:
         3a:7e:f7:c2:ca:c3:03:90:dc:2a:6f:68:1c:d4:7b:2a:49:c2:
         8e:bd:fb:14:6f:4a:5a:5c:0e:a9:a8:04:92:48:9d:74:92:c5:
         37:81:a1:71:5c:07:27:65:45:9e:7a:76:e9:d4:96:c8:49:25:
         79:27:93:7b:2d:47:93:2a:b2:65:57:0e:23:15:ab:cf:45:da:
         fc:23:48:7b:11:70:84:66:e3:95:84:e3:72:d1:79:86:82:43:
         8c:04:d1:20:b5:63:2e:31:e8:91:a8:1b:bf:86:a9:db:35:4a:
         c2:ef:63:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWtv/rQvoAjQe8yylZLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODMzZjgzMDNhMjgzOTkzNjkwNjEwYTkxODVhNWM5YjY4
MmJmZmIwHhcNMjUwNDEzMTAwMjA4WhcNMjUwNDE0MTAwMjA4WjAzMTEwLwYDVQQD
Eyg4NjcxMWQxYTRhMDRiZmQzNWNkY2M5MTlkZDU3MzQwZThjZDRlMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZL3PB1NdsKaCrzO4LpCGkc73ePa
v7YScGdVq8L9nCZzrrnDA0sQAAlyZw1nCXHF3XitkTwiuWkKQf78/Pqb7mOMntEP
gJf38NyH0s7XqkQLJcGwAwDkRbrBQxX3dLH/GJ9pkw/h0wBtH1CNESlow+ZnwGP3
Yrb1vsVB/JVXBlIR568AE2cL7oGndgEwXf43hruRuDbjmEgne7YCv+PV3Pa1jdra
IN528+LyY5T1mdfqf/x3peuLHj5ZvynETVmTFPYrsk0EZv344CxZxi8wUtI2u3w7
R/eLom3ZmW02TxK0T5KiaMep1GxMjZdJlMwHaljzPAo9E6nZ2P+IWvemAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZxHRpKBL/TXNzJGd1XNA6M1OMVMB8GA1UdIwQY
MBaAFFuDP4MDooOZNpBhCpGFpcm2gr/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMt
YzEyOGYyN2NjYzc4LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMtYzEyOGYyN2NjYzc4
LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo/fujPZ
cuZ/W7cV3M1nXAwJxYxJo8N+Xzz7Y40Y1HDzqNUCvWMl0EQaejY+99XFu4MsmZny
d1hDxraDXgax62gE894wxDJKrqfdASyppoeHe6VoBiY2/730mMxoIunJl9axi3dV
d08HlbeL/S8BlnyHhwiCcnDILtepS2/AAByxdVljp5tDpDItWENhZjO6On73wsrD
A5DcKm9oHNR7KknCjr37FG9KWlwOqagEkkiddJLFN4GhcVwHJ2VFnnp26dSWyEkl
eSeTey1HkyqyZVcOIxWrz0Xa/CNIexFwhGbjlYTjctF5hoJDjATRILVjLjHokagb
v4ap2zVKwu9jwg==
-----END CERTIFICATE-----