Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File:                     wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier:          yt+To2IDJvDlTVtFG0jVg6iqZR+45qMLwGsoOHmshvU=
Subject key identifier:   A5:C5:04:F3:3F:56:2D:BC:C5:43:F1:9A:4C:DE:2D:E9:A8:20:E6:C7
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer:       /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial:       01962F7450D03BEC1AE96D039D69965B52B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number:          1349
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=)
                          2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: sbc432OJRpF/Ag2cr6jsrSViHmOZe4xIwtQVGnzKw30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:d0:3b:ec:1a:e9:6d:03:9d:69:96:5b:52:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=a5c504f33f562dbcc543f19a4cde2de9a820e6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:fd:8e:42:24:43:73:8f:36:cd:d4:1c:ce:
                    ff:0a:0d:c4:68:4f:d3:c8:57:b8:eb:88:22:4d:78:
                    d2:4f:d2:80:fd:90:f8:c8:f0:1d:7e:cc:41:3a:1a:
                    18:07:1e:11:56:cf:4b:16:04:6d:a4:6d:19:de:1a:
                    e0:68:64:29:4b:00:5b:a6:8f:30:0f:9e:e5:2e:d7:
                    0b:cd:3c:c7:ca:aa:bc:61:c5:94:76:6a:7b:66:69:
                    4f:ca:4c:78:2e:64:43:ae:df:25:74:17:3f:52:b6:
                    c4:1e:d8:d4:b7:90:49:40:08:d0:86:0e:23:c4:ad:
                    8b:6f:27:c5:5c:de:83:14:91:a0:d9:c2:ec:00:50:
                    5f:f3:21:84:e8:1e:87:71:08:2e:05:69:3a:4d:bd:
                    e6:5f:00:6e:ad:63:cf:3e:c7:51:94:0b:6b:ae:d1:
                    69:52:76:ad:70:21:54:b0:1b:e8:d0:21:bd:d5:a7:
                    4f:9e:12:20:fb:fc:ce:07:ee:97:08:62:c9:3e:5c:
                    50:10:cd:51:55:8b:56:1c:1f:0a:24:f8:1d:0e:fc:
                    4b:c1:19:92:d3:47:95:b6:76:c2:c7:e2:9f:2c:12:
                    22:42:9d:91:df:b8:cd:d2:8b:16:79:b6:bc:a3:fa:
                    42:33:96:ed:c9:87:f6:6f:f6:8c:e5:dc:e8:d6:ef:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C5:04:F3:3F:56:2D:BC:C5:43:F1:9A:4C:DE:2D:E9:A8:20:E6:C7
            X509v3 Authority Key Identifier:
                keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:18:8a:7b:44:b2:61:d6:fb:cc:73:2d:69:3c:b8:10:b1:
         97:af:55:ee:83:0f:1e:42:cf:1d:12:a7:e7:86:08:db:57:64:
         5d:52:38:44:43:67:3c:60:97:cc:33:6a:d5:59:b9:1c:2c:44:
         16:d6:5a:ea:ef:db:93:1a:bd:18:32:1c:54:b9:07:4d:ce:03:
         08:61:cc:c2:22:1c:a6:6f:55:2e:95:b0:33:54:d6:21:2d:4d:
         5d:79:7b:5e:eb:d0:23:97:b1:84:bb:68:6d:6d:74:12:1b:70:
         a6:29:29:2c:1a:75:d2:45:b2:f9:04:e1:0b:2f:21:56:88:b3:
         4b:86:33:0a:7f:a0:e9:2c:bc:12:62:1e:8e:25:9e:68:38:97:
         98:e6:c2:64:a4:53:d8:2a:80:19:37:70:03:a7:d9:87:1d:4f:
         10:f4:c6:3c:aa:65:1e:31:40:0c:a0:45:3f:0e:f5:41:b3:bf:
         02:98:3c:9d:6f:f5:d9:03:68:5f:b8:70:ff:b7:d6:4b:8d:f5:
         7d:69:83:d1:0f:c1:d8:dd:41:3c:0c:cd:18:01:d6:f1:1f:5a:
         38:70:7a:c0:59:fc:75:a4:90:94:1f:8c:7c:f8:a4:36:52:ef:
         5b:3b:3a:a1:a9:65:f6:34:11:9c:f1:d2:0a:f7:80:1e:11:eb:
         1e:9f:cb:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFDQO+wa6W0DnWmWW1K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMzFkNDY1NjE3NDRhNjgxMDE2YzhkNmY5YTYxYjljMTdj
YjdmMGYwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EyhhNWM1MDRmMzNmNTYyZGJjYzU0M2YxOWE0Y2RlMmRlOWE4MjBlNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pz9jkIkQ3OPNs3UHM7/Cg3EaE/T
yFe464giTXjST9KA/ZD4yPAdfsxBOhoYBx4RVs9LFgRtpG0Z3hrgaGQpSwBbpo8w
D57lLtcLzTzHyqq8YcWUdmp7ZmlPykx4LmRDrt8ldBc/UrbEHtjUt5BJQAjQhg4j
xK2LbyfFXN6DFJGg2cLsAFBf8yGE6B6HcQguBWk6Tb3mXwBurWPPPsdRlAtrrtFp
UnatcCFUsBvo0CG91adPnhIg+/zOB+6XCGLJPlxQEM1RVYtWHB8KJPgdDvxLwRmS
00eVtnbCx+KfLBIiQp2R37jN0osWeba8o/pCM5btyYf2b/aM5dzo1u85dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXFBPM/Vi28xUPxmkzeLemoIObHMB8GA1UdIwQY
MBaAFMEx1GVhdEpoEBbI1vmmG5wXy38PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUt
NGI3ZTVjNWE5ZDRiLzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUtNGI3ZTVjNWE5ZDRi
LzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCkYintE
smHW+8xzLWk8uBCxl69V7oMPHkLPHRKn54YI21dkXVI4RENnPGCXzDNq1Vm5HCxE
FtZa6u/bkxq9GDIcVLkHTc4DCGHMwiIcpm9VLpWwM1TWIS1NXXl7XuvQI5exhLto
bW10EhtwpikpLBp10kWy+QThCy8hVoizS4YzCn+g6Sy8EmIejiWeaDiXmObCZKRT
2CqAGTdwA6fZhx1PEPTGPKplHjFADKBFPw71QbO/Apg8nW/12QNoX7hw/7fWS431
fWmD0Q/B2N1BPAzNGAHW8R9aOHB6wFn8daSQlB+MfPikNlLvWzs6oall9jQRnPHS
CveAHhHrHp/LFw==
-----END CERTIFICATE-----