Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File:                     WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier:          2mqDUhSpabKHgG2tfOy0FPUoSxsgxrlPqO36Kn72A+s=
Subject key identifier:   08:0E:1B:47:F6:20:27:42:BD:84:B9:2E:F3:F6:13:F7:37:6B:7D:0A
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer:       /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial:       01962F74E101180218EBF7B1F81E6D8CC3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number:          14CB
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
                          2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: ZpWk1zzPnL8rZ5Gs6X5BvI+/MyZPBrcG23zmsgQgT+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:01:18:02:18:eb:f7:b1:f8:1e:6d:8c:c3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=080e1b47f6202742bd84b92ef3f613f7376b7d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:d3:59:d9:f9:a6:bd:c5:75:b1:fb:6a:2a:
                    ee:6c:d0:61:49:61:8c:a0:bf:f9:d9:cb:19:90:ee:
                    84:e7:7b:7d:77:7c:7d:a4:e7:33:65:b9:73:cb:1a:
                    1f:02:6e:35:82:3f:0e:29:80:b5:08:bb:bc:04:f9:
                    94:ea:3c:ba:f9:52:45:3e:47:5c:8c:30:4a:2f:3d:
                    88:e3:df:05:d4:3c:4b:44:a0:47:42:be:7b:db:73:
                    2c:9e:30:4f:cc:96:97:ac:2f:c5:ca:92:b7:78:fc:
                    d0:da:49:2e:d0:1f:2a:7b:50:32:df:de:80:35:98:
                    ab:52:43:94:56:a4:3b:1f:32:aa:d8:7f:64:c6:ff:
                    50:e0:e6:31:2c:e7:70:64:ee:6b:8e:e7:6f:b8:8a:
                    41:6d:e3:6b:cf:41:5b:94:7e:61:bb:24:5c:9c:86:
                    9a:ca:c5:1c:c5:1d:f0:09:4b:71:59:95:7c:b2:4c:
                    02:26:af:90:50:96:62:38:9a:aa:17:4f:c0:37:6a:
                    92:d7:bf:8e:d9:f8:6b:1c:7f:be:77:91:2a:4a:cf:
                    83:2b:0a:13:70:79:b4:27:b8:c3:a8:3a:d2:f8:66:
                    5c:e0:cc:aa:19:ea:03:76:61:a7:a5:db:4b:19:5a:
                    ef:02:f8:35:04:cd:f7:e8:e0:ba:bd:19:21:20:bb:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:1B:47:F6:20:27:42:BD:84:B9:2E:F3:F6:13:F7:37:6B:7D:0A
            X509v3 Authority Key Identifier:
                keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:da:93:8f:24:18:17:7a:1d:8d:3e:8b:9f:4b:03:3a:80:13:
         aa:c0:13:73:51:03:c5:a7:1a:2e:01:6a:29:17:c9:28:d1:bb:
         36:5b:ae:82:f0:c3:e3:c2:b0:c0:94:86:e5:e3:8a:30:0e:25:
         06:c8:4a:b5:c6:e7:f9:4e:26:65:11:01:45:5d:15:88:84:11:
         34:4d:82:13:58:24:15:45:70:7f:6c:45:50:da:26:28:7e:ae:
         a0:f2:75:b1:b4:65:f4:1b:68:09:ae:8d:6f:47:86:b7:9d:34:
         f0:02:07:d8:e3:82:b4:cd:8e:be:bf:e6:be:55:58:63:fa:6b:
         f1:de:2e:08:fb:cd:11:80:db:f8:d2:ef:6d:62:ee:ce:de:56:
         b2:a1:69:a3:81:4c:1f:50:d9:f0:e6:4f:ec:75:c4:85:56:c7:
         16:e8:c5:ac:e8:d5:b4:be:03:0a:bb:62:6f:fa:2e:21:1e:f0:
         8a:32:cc:97:df:76:8d:49:54:76:f2:a0:e0:21:51:fa:5f:05:
         89:3d:83:8b:90:b4:4a:0e:f8:9c:a3:d6:2f:b3:8c:37:76:fd:
         80:f4:f9:4f:92:ba:32:86:78:66:fd:b6:3b:31:da:c9:d1:7f:
         6e:01:5a:2a:f7:0b:8a:47:6a:e9:3c:05:85:69:c2:27:02:34:
         5a:f1:e6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOEBGAIY6/ex+B5tjMPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2VkN2U5Zjk4YTFmMTk3NWVlOWZiY2IwOTVjM2FkZmEy
OGFlYzAwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
EygwODBlMWI0N2Y2MjAyNzQyYmQ4NGI5MmVmM2Y2MTNmNzM3NmI3ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoErTWdn5pr3FdbH7airubNBhSWGM
oL/52csZkO6E53t9d3x9pOczZblzyxofAm41gj8OKYC1CLu8BPmU6jy6+VJFPkdc
jDBKLz2I498F1DxLRKBHQr5723MsnjBPzJaXrC/FypK3ePzQ2kku0B8qe1Ay396A
NZirUkOUVqQ7HzKq2H9kxv9Q4OYxLOdwZO5rjudvuIpBbeNrz0FblH5huyRcnIaa
ysUcxR3wCUtxWZV8skwCJq+QUJZiOJqqF0/AN2qS17+O2fhrHH++d5EqSs+DKwoT
cHm0J7jDqDrS+GZc4MyqGeoDdmGnpdtLGVrvAvg1BM336OC6vRkhILty5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgOG0f2ICdCvYS5LvP2E/c3a30KMB8GA1UdIwQY
MBaAFFh+1+n5ih8Zde6fvLCVw636KK7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2Yzct
MGE5ZTNjYjRkYzEzLzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2YzctMGE5ZTNjYjRkYzEz
LzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltqTjyQY
F3odjT6Ln0sDOoATqsATc1EDxacaLgFqKRfJKNG7NluugvDD48KwwJSG5eOKMA4l
BshKtcbn+U4mZREBRV0ViIQRNE2CE1gkFUVwf2xFUNomKH6uoPJ1sbRl9BtoCa6N
b0eGt5008AIH2OOCtM2Ovr/mvlVYY/pr8d4uCPvNEYDb+NLvbWLuzt5WsqFpo4FM
H1DZ8OZP7HXEhVbHFujFrOjVtL4DCrtib/ouIR7wijLMl992jUlUdvKg4CFR+l8F
iT2Di5C0Sg74nKPWL7OMN3b9gPT5T5K6MoZ4Zv22OzHaydF/bgFaKvcLikdq6TwF
hWnCJwI0WvHmkA==
-----END CERTIFICATE-----