Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
File:                     WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft (raw, json)
Hash identifier:          LCXmsZ2fQITaTZYHX9jUWz3DPa94d5yd4bLT3R7NMFU=
Subject key identifier:   BF:48:AE:99:B7:CC:1C:5A:F3:1D:63:DF:22:1C:64:2D:AB:2C:01:BE
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Certificate issuer:       /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial:       01962F3D6E1A808274ED6DDECA949707942E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: WQIOJXHFculSf7VKNcTI4G1FzB0.roa (hash: 1m31qu3p2ND5PEv0/zfE1Skv8FXpx3eh76tg/GNUGqE=)
                          2: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl (hash: GRjRPdcCDzlwWEna3qsc65J8TeJDvlLaKUp6tbkPngA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:1a:80:82:74:ed:6d:de:ca:94:97:07:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=bf48ae99b7cc1c5af31d63df221c642dab2c01be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:da:f6:f5:93:b9:85:75:66:f2:81:6c:05:
                    9f:4a:63:42:56:4e:e0:10:f1:bd:f7:e1:70:3c:55:
                    41:9a:fa:ac:5b:ab:d2:9d:de:8d:58:84:fa:b3:49:
                    51:1a:1b:c9:9a:99:d9:66:cf:08:84:1e:f9:b9:57:
                    f8:90:6a:85:dc:62:d1:ec:1e:00:2f:0f:de:b4:65:
                    fd:91:96:41:cf:0e:1a:4b:0a:64:99:ec:98:30:ad:
                    2e:db:59:43:15:40:62:f1:ac:8c:95:78:2c:0b:28:
                    74:f8:d9:32:95:e8:48:af:53:b4:74:80:b2:00:dd:
                    be:a2:cb:0a:71:d0:95:33:5f:bc:70:ed:bf:99:7e:
                    6c:75:8d:d7:c7:09:88:50:ba:79:b5:3f:ad:9a:43:
                    3b:90:fc:9d:83:f8:f9:b6:ba:03:5b:ca:d9:b5:33:
                    97:87:2e:91:ae:cc:d5:e7:46:f4:0a:2e:8c:68:8c:
                    69:71:d8:df:0b:80:6c:21:8c:af:bd:59:26:7d:99:
                    85:e5:f0:7c:ab:82:c8:a5:22:a3:2e:f6:76:8a:44:
                    1d:f8:48:43:72:2a:f6:94:82:b7:64:0f:b7:88:d8:
                    c4:4a:8b:c5:d5:1a:69:37:50:68:68:de:97:02:51:
                    da:60:87:a7:a4:7d:85:c8:fe:f7:4e:0e:46:2f:62:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:AE:99:B7:CC:1C:5A:F3:1D:63:DF:22:1C:64:2D:AB:2C:01:BE
            X509v3 Authority Key Identifier:
                keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:f3:6c:45:4d:e0:90:86:f0:7b:a5:89:a5:8b:26:c9:19:
         ee:62:7b:50:05:0d:34:20:81:a3:5e:85:8c:51:45:92:7b:e0:
         b1:b5:61:7d:54:12:3e:bc:52:72:81:17:3c:04:79:a1:28:e1:
         25:f9:c3:44:94:04:4a:a1:e7:f3:3e:eb:3c:71:93:e5:4f:79:
         28:90:dc:6f:81:ba:6f:46:5c:94:63:41:7c:25:2a:e1:91:8d:
         22:1a:0a:30:50:56:a6:1c:07:ef:9c:91:b1:26:dd:87:a2:c3:
         db:75:09:79:54:b0:29:e8:fd:76:df:f4:94:1c:ca:f7:fe:5a:
         99:cc:e0:aa:91:17:23:8a:3e:a5:98:c2:52:97:4f:a7:6c:2b:
         68:05:17:15:a7:57:91:da:bd:3e:85:57:75:27:8c:d9:c7:9f:
         de:2a:c6:06:48:74:db:9b:84:36:a0:b7:cf:91:07:97:89:ff:
         45:18:8c:ef:27:13:6e:9e:1a:ee:74:9b:e1:ec:a2:5b:67:9e:
         51:02:fe:59:6c:84:19:56:5f:7d:85:96:03:7a:76:82:90:5e:
         c4:0f:5a:15:af:dd:e1:9a:43:96:ce:8b:5c:15:d2:6f:70:23:
         cf:e2:57:6a:7b:9a:e8:dd:d1:83:07:1a:b1:bf:8b:3a:53:d2:
         b4:d7:14:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPW4agIJ07W3eypSXB5QuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRjN2I3ZTZkZjc1Nzg0NjZkODJiNTI3MTVjYjIwOWY3
ZjIxYzUwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
EyhiZjQ4YWU5OWI3Y2MxYzVhZjMxZDYzZGYyMjFjNjQyZGFiMmMwMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpXa9vWTuYV1ZvKBbAWfSmNCVk7g
EPG99+FwPFVBmvqsW6vSnd6NWIT6s0lRGhvJmpnZZs8IhB75uVf4kGqF3GLR7B4A
Lw/etGX9kZZBzw4aSwpkmeyYMK0u21lDFUBi8ayMlXgsCyh0+NkylehIr1O0dICy
AN2+ossKcdCVM1+8cO2/mX5sdY3XxwmIULp5tT+tmkM7kPydg/j5troDW8rZtTOX
hy6RrszV50b0Ci6MaIxpcdjfC4BsIYyvvVkmfZmF5fB8q4LIpSKjLvZ2ikQd+EhD
cir2lIK3ZA+3iNjESovF1RppN1BoaN6XAlHaYIenpH2FyP73Tg5GL2K5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9Irpm3zBxa8x1j3yIcZC2rLAG+MB8GA1UdIwQY
MBaAFFlUx7fm33V4Rm2CtScVyyCffyHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0Mjct
OGIxMDUyZmZjZjZkLzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0MjctOGIxMDUyZmZjZjZk
LzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNbzbEVN
4JCG8HuliaWLJskZ7mJ7UAUNNCCBo16FjFFFknvgsbVhfVQSPrxScoEXPAR5oSjh
JfnDRJQESqHn8z7rPHGT5U95KJDcb4G6b0ZclGNBfCUq4ZGNIhoKMFBWphwH75yR
sSbdh6LD23UJeVSwKej9dt/0lBzK9/5amczgqpEXI4o+pZjCUpdPp2wraAUXFadX
kdq9PoVXdSeM2cef3irGBkh025uENqC3z5EHl4n/RRiM7ycTbp4a7nSb4eyiW2ee
UQL+WWyEGVZffYWWA3p2gpBexA9aFa/d4ZpDls6LXBXSb3Ajz+JXanua6N3Rgwca
sb+LOlPStNcUEA==
-----END CERTIFICATE-----