Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          DxDyLBTKRvwo0Csv6i7KwdVTk3oyFJvUHldIJ5DFxTA=
Subject key identifier:   DF:E1:92:68:C0:E1:1B:2F:0E:E8:D8:1C:98:CA:86:CA:A5:00:CC:3D
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       01962F06D89E8E1C6FCA48F6D4B587FA00E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          1388
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
                          2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: j32M7irRIrEkq71kx5fsnDer04CoxgQKv2lw82BFfes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:9e:8e:1c:6f:ca:48:f6:d4:b5:87:fa:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=dfe19268c0e11b2f0ee8d81c98ca86caa500cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:e9:bd:f1:50:92:ad:9f:3e:94:5d:3c:f5:
                    45:e0:4a:a1:0b:0a:e0:b5:bf:81:51:c2:6b:39:a8:
                    74:de:61:81:16:36:54:ac:fe:bd:da:0c:45:cc:51:
                    5d:3c:5c:fd:40:d6:89:66:49:07:08:7a:ca:88:81:
                    91:f7:e1:4f:57:d1:7c:fd:e0:09:36:97:c3:4c:d9:
                    ce:29:b3:c6:85:f3:8e:66:98:c9:59:43:90:ec:b8:
                    9b:52:aa:ef:a2:d0:77:64:6c:d1:ee:57:d5:22:cc:
                    20:46:33:0f:9b:0f:83:81:2d:09:c2:e8:4d:e5:d8:
                    22:04:3a:e0:06:3d:36:56:a5:40:12:87:36:b5:d0:
                    cf:fd:92:ff:5b:db:05:64:f9:af:f6:9c:c4:05:74:
                    74:53:4b:a7:aa:39:3a:22:eb:36:33:86:f8:84:76:
                    ba:b5:fa:59:c1:57:8d:3f:ae:b0:66:52:6c:eb:27:
                    7f:d3:3d:e4:78:55:48:54:cb:3b:93:5c:8c:75:54:
                    9a:60:43:48:4f:60:3c:13:4c:b7:51:90:42:dc:37:
                    2b:47:50:39:9c:13:65:67:fa:64:09:e2:3f:02:0f:
                    7a:d6:9e:56:d0:1d:4d:50:51:a0:06:c2:9d:07:8c:
                    e1:1d:de:b1:6d:53:e3:88:f4:62:fe:c6:87:ab:d2:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:92:68:C0:E1:1B:2F:0E:E8:D8:1C:98:CA:86:CA:A5:00:CC:3D
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:74:7b:17:78:16:97:64:f0:2d:f6:f0:ca:d2:3e:0b:c3:
         03:7c:43:5b:28:b5:a1:1c:2f:de:4e:e5:09:0d:15:b4:11:aa:
         73:00:6e:f8:b1:38:7b:b8:6a:89:aa:1e:da:73:81:1b:c3:56:
         04:09:e0:70:83:3b:e2:df:d1:45:ee:a4:d0:d2:bf:8b:4a:c7:
         68:b5:22:79:ac:64:dc:2d:75:f3:88:e4:04:cd:a8:4d:f3:e7:
         62:74:38:be:a8:6d:f0:67:a4:75:b4:15:2d:65:f5:c4:d6:ea:
         f2:f6:d5:38:55:a8:ec:b3:aa:9d:85:96:a0:b7:fd:5e:38:dd:
         6a:76:b6:df:d5:9c:9b:0c:b3:d1:2c:5f:92:94:b8:39:b4:02:
         04:bc:a6:a8:c0:da:0c:01:57:b5:eb:bb:c4:d2:f9:3c:02:99:
         4d:4f:3d:fa:f1:08:34:05:82:14:f4:f4:ef:ba:8b:07:f3:dc:
         1f:87:aa:59:52:03:f7:ec:32:bc:bf:c7:6e:34:41:7a:28:2b:
         ac:11:9f:3b:21:db:eb:38:be:03:72:3c:96:71:a8:a5:1d:dd:
         3e:ee:b3:a1:84:00:a0:5d:c9:6b:97:27:4f:bd:d7:01:83:9c:
         6b:18:de:0d:78:a9:a2:ba:56:a1:ea:3b:bf:ad:16:9a:66:85:
         41:88:55:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtiejhxvykj21LWH+gDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
EyhkZmUxOTI2OGMwZTExYjJmMGVlOGQ4MWM5OGNhODZjYWE1MDBjYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFbpvfFQkq2fPpRdPPVF4EqhCwrg
tb+BUcJrOah03mGBFjZUrP692gxFzFFdPFz9QNaJZkkHCHrKiIGR9+FPV9F8/eAJ
NpfDTNnOKbPGhfOOZpjJWUOQ7LibUqrvotB3ZGzR7lfVIswgRjMPmw+DgS0JwuhN
5dgiBDrgBj02VqVAEoc2tdDP/ZL/W9sFZPmv9pzEBXR0U0unqjk6Ius2M4b4hHa6
tfpZwVeNP66wZlJs6yd/0z3keFVIVMs7k1yMdVSaYENIT2A8E0y3UZBC3DcrR1A5
nBNlZ/pkCeI/Ag961p5W0B1NUFGgBsKdB4zhHd6xbVPjiPRi/saHq9JLQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/hkmjA4RsvDujYHJjKhsqlAMw9MB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUJ0exd4
Fpdk8C328MrSPgvDA3xDWyi1oRwv3k7lCQ0VtBGqcwBu+LE4e7hqiaoe2nOBG8NW
BAngcIM74t/RRe6k0NK/i0rHaLUieaxk3C1184jkBM2oTfPnYnQ4vqht8GekdbQV
LWX1xNbq8vbVOFWo7LOqnYWWoLf9Xjjdana239Wcmwyz0SxfkpS4ObQCBLymqMDa
DAFXteu7xNL5PAKZTU89+vEINAWCFPT077qLB/PcH4eqWVID9+wyvL/HbjRBeigr
rBGfOyHb6zi+A3I8lnGopR3dPu6zoYQAoF3Ja5cnT73XAYOcaxjeDXiporpWoeo7
v60WmmaFQYhVcQ==
-----END CERTIFICATE-----