Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File:                     W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier:          hpWFeIjXs5NLdHf5JWAfZ4339HlV5tWrZ0BrYSFnonM=
Subject key identifier:   C9:8D:9B:A1:94:55:9E:6B:9F:44:9B:6F:E1:D8:FE:47:7C:1F:7D:D0
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer:       /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial:       01962DF43D1BBB35F5509BA335963087D8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number:          0294
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
                          2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: Sg9uN2TCuVQn9KHbwgJnhyY4Tq+qwh8naxNXYPAfs1k=)
                          3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:1b:bb:35:f5:50:9b:a3:35:96:30:87:d8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=c98d9ba194559e6b9f449b6fe1d8fe477c1f7dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:68:1b:a8:f2:0c:9a:da:81:0b:63:db:76:
                    33:61:94:1e:0e:80:05:e8:d6:63:1e:68:ec:ee:eb:
                    23:5c:ff:f6:53:a9:cc:6b:17:eb:97:cd:93:14:f5:
                    7b:89:eb:e7:91:63:7f:a0:6f:73:eb:5b:0f:8a:39:
                    7f:6f:0e:8e:3f:41:86:72:da:37:c0:3e:da:50:f5:
                    e4:b4:62:cb:4b:01:41:47:28:3c:31:d8:a3:39:34:
                    33:e3:8e:f0:74:f1:bb:b7:59:34:11:f2:42:eb:08:
                    42:69:8c:ec:b1:79:dd:1a:b2:d7:6f:d1:30:c5:1b:
                    91:04:1a:61:a9:ed:52:b6:26:03:51:f6:d1:96:3b:
                    64:7d:fc:f9:b1:40:77:50:f3:c5:f5:c3:70:57:84:
                    fa:23:c3:89:e2:77:ba:49:21:d7:b6:d5:bb:c4:05:
                    64:68:00:6e:de:d4:51:13:d3:2a:a7:58:99:e6:c2:
                    1b:9a:b5:fe:a5:96:18:de:1e:4b:47:51:30:92:c2:
                    f4:98:b0:98:81:54:d1:78:94:f2:89:e6:98:2d:18:
                    77:ee:e0:6b:43:fa:98:bb:2a:ae:ca:fd:8c:7e:3e:
                    6f:b0:5e:c4:d5:5b:ca:ac:f1:89:04:44:6a:6e:e9:
                    26:15:9c:5d:d2:e1:b1:06:9d:da:cb:c8:ab:c6:59:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:9B:A1:94:55:9E:6B:9F:44:9B:6F:E1:D8:FE:47:7C:1F:7D:D0
            X509v3 Authority Key Identifier:
                keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:24:85:52:52:2a:cd:80:f4:1b:97:37:9a:31:3d:18:57:
         8f:5f:99:50:08:26:02:cb:ec:a0:80:09:d1:fa:b2:40:44:a5:
         0c:95:4a:33:48:8e:7b:a6:4f:a1:b5:2f:23:06:9a:ca:c6:b9:
         7b:65:c1:da:12:c9:fc:01:b8:6f:f1:cb:d1:c6:61:d6:c0:35:
         ee:96:ce:25:43:01:b0:96:0c:f3:c8:b9:2a:f0:53:0a:08:2c:
         00:e0:13:f5:07:c6:d5:20:d3:c4:ea:38:40:97:8a:98:9a:53:
         58:80:a4:24:5d:1f:8a:61:61:9d:e2:d2:ec:d9:24:c5:6d:35:
         75:ab:ea:81:d1:0b:73:69:81:8c:ef:61:b8:1d:97:a0:e8:89:
         11:29:4d:88:17:49:e8:ed:9b:a9:69:5d:5a:77:38:9f:55:5f:
         72:48:a0:1d:d6:dd:83:a6:4e:6c:a6:07:3b:80:2e:7b:16:62:
         74:39:75:62:fc:c5:78:24:97:67:dc:2d:54:8a:ac:dd:71:0b:
         43:08:3d:88:2e:dc:b7:ad:80:fe:c4:33:e8:c7:d9:c6:4d:52:
         a9:33:ff:95:5d:24:54:6d:bd:00:ee:79:8c:62:f6:9d:9c:bd:
         40:4c:b7:5d:98:0d:7b:77:fc:9b:a5:e5:48:aa:c6:79:78:35:
         e0:9c:fd:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D0buzX1UJujNZYwh9i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4
ZjFmNzgwHhcNMjUwNDEzMDcwMTQyWhcNMjUwNDE0MDcwMTQyWjAzMTEwLwYDVQQD
EyhjOThkOWJhMTk0NTU5ZTZiOWY0NDliNmZlMWQ4ZmU0NzdjMWY3ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wNoG6jyDJragQtj23YzYZQeDoAF
6NZjHmjs7usjXP/2U6nMaxfrl82TFPV7ievnkWN/oG9z61sPijl/bw6OP0GGcto3
wD7aUPXktGLLSwFBRyg8MdijOTQz447wdPG7t1k0EfJC6whCaYzssXndGrLXb9Ew
xRuRBBphqe1StiYDUfbRljtkffz5sUB3UPPF9cNwV4T6I8OJ4ne6SSHXttW7xAVk
aABu3tRRE9Mqp1iZ5sIbmrX+pZYY3h5LR1EwksL0mLCYgVTReJTyieaYLRh37uBr
Q/qYuyquyv2Mfj5vsF7E1VvKrPGJBERqbukmFZxd0uGxBp3ay8irxllNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmNm6GUVZ5rn0Sbb+HY/kd8H33QMB8GA1UdIwQY
MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt
MmE3OWU1ZDIyYWUxLzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx
LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8MkhVJS
Ks2A9BuXN5oxPRhXj1+ZUAgmAsvsoIAJ0fqyQESlDJVKM0iOe6ZPobUvIwaaysa5
e2XB2hLJ/AG4b/HL0cZh1sA17pbOJUMBsJYM88i5KvBTCggsAOAT9QfG1SDTxOo4
QJeKmJpTWICkJF0fimFhneLS7NkkxW01davqgdELc2mBjO9huB2XoOiJESlNiBdJ
6O2bqWldWnc4n1VfckigHdbdg6ZObKYHO4AuexZidDl1YvzFeCSXZ9wtVIqs3XEL
Qwg9iC7ct62A/sQz6MfZxk1SqTP/lV0kVG29AO55jGL2nZy9QEy3XZgNe3f8m6Xl
SKrGeXg14Jz9wQ==
-----END CERTIFICATE-----