Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          h1688kBPrbR+wfavjCdPXZMwb2bVYqbYbQEwXnbZ5YM=
Subject key identifier:   69:68:05:FF:C8:CE:2E:EC:ED:B5:A5:A8:26:94:AD:26:1D:B8:AD:90
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       01962F0700A3444DA4327A9E3D2CA2024EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          1283
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: OpC4PQXLLgpvZkKTJrCn53ZNcN5j2W3z99A6kDlAIeE=)
                          2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:00:a3:44:4d:a4:32:7a:9e:3d:2c:a2:02:4e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=696805ffc8ce2eecedb5a5a82694ad261db8ad90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:cc:d1:ba:da:c4:a0:20:79:ec:27:01:f7:
                    e2:ed:c3:80:c3:48:a6:f8:e2:2a:cd:55:52:44:9e:
                    26:a7:90:75:49:fb:6d:ec:fb:c4:78:ed:a1:5a:e0:
                    2a:22:ec:bf:c7:8d:92:f0:e9:3c:4d:4f:f8:d3:8c:
                    44:c0:6c:01:21:a7:da:a4:a8:ab:49:52:74:b8:89:
                    56:e5:7e:11:d5:1f:3a:15:8e:2b:48:d8:df:80:7c:
                    10:c9:33:59:17:54:0f:e0:76:35:ed:15:7e:20:54:
                    cd:8a:90:b9:cf:d1:aa:c9:9e:b6:14:78:e9:21:cc:
                    04:7b:86:07:27:5d:35:cc:e1:b1:02:12:59:4c:14:
                    6e:fd:c0:33:7d:d2:9f:41:f7:f1:03:ee:94:1a:d7:
                    10:fa:1a:c1:6a:5a:1a:2b:85:be:f3:d3:33:1a:d2:
                    c9:72:f6:b0:35:8e:84:86:a2:e5:ef:4e:6f:27:d4:
                    11:b1:b3:b9:9f:e3:16:7b:98:8c:f7:d5:b8:2e:ab:
                    ef:0b:a7:05:d3:42:79:83:b1:d8:0d:ef:9c:3e:c4:
                    f4:d6:dd:81:9a:17:41:64:f5:40:b5:a6:59:42:08:
                    84:fc:10:6a:88:c0:80:9f:a6:8e:9c:41:20:c8:74:
                    66:28:69:01:08:bf:11:26:ca:e7:dc:43:f8:83:d5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:05:FF:C8:CE:2E:EC:ED:B5:A5:A8:26:94:AD:26:1D:B8:AD:90
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:39:b8:29:e9:a8:19:07:a7:e7:04:e5:68:7b:28:97:d5:a2:
         48:d7:a0:1a:66:fc:02:b9:55:a5:6f:30:4c:87:bd:1e:b2:a8:
         12:14:f2:1e:62:c8:f4:87:ae:19:71:ac:06:c4:09:d3:51:0e:
         fc:c0:8d:fe:8c:da:14:dd:e4:0b:d0:92:e2:9d:5e:72:af:9a:
         2b:22:bc:b1:3e:4b:2f:e9:dd:32:fe:63:7f:d9:0f:39:de:41:
         eb:ed:4a:55:36:c8:98:fa:de:ce:de:29:7e:e0:e7:16:d1:b8:
         60:5e:ad:51:79:30:23:49:0c:6b:ab:57:06:a9:61:08:42:0f:
         40:42:a6:f9:cd:99:53:65:26:42:7b:5a:10:ba:2e:b4:b6:cb:
         cb:49:d5:4e:bd:18:06:fd:62:e4:97:4a:79:d5:40:02:0d:ff:
         09:3e:9b:17:7f:1d:e8:c6:eb:c6:5d:99:00:56:2d:fa:8c:13:
         34:f6:56:7c:4a:39:aa:33:86:44:3b:2d:f0:e9:45:c2:07:3f:
         e7:a1:fc:d3:c6:eb:04:94:77:04:3b:f2:bb:73:3e:37:ec:14:
         e9:50:8d:75:0f:5e:5e:25:69:6d:fe:91:d6:c5:b4:86:59:1e:
         e8:29:a3:3e:04:fc:2c:3e:d1:16:da:83:79:3a:5e:5b:89:de:
         32:bd:c6:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwCjRE2kMnqePSyiAk6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTVmMTk1M2UwMzFkMjc5ODY0ZjNjM2JlZmYwYmM2NzVh
MDBlZTQwHhcNMjUwNDEzMTIwMTUwWhcNMjUwNDE0MTIwMTUwWjAzMTEwLwYDVQQD
Eyg2OTY4MDVmZmM4Y2UyZWVjZWRiNWE1YTgyNjk0YWQyNjFkYjhhZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnLM0braxKAgeewnAffi7cOAw0im
+OIqzVVSRJ4mp5B1Sftt7PvEeO2hWuAqIuy/x42S8Ok8TU/404xEwGwBIafapKir
SVJ0uIlW5X4R1R86FY4rSNjfgHwQyTNZF1QP4HY17RV+IFTNipC5z9GqyZ62FHjp
IcwEe4YHJ101zOGxAhJZTBRu/cAzfdKfQffxA+6UGtcQ+hrBaloaK4W+89MzGtLJ
cvawNY6EhqLl705vJ9QRsbO5n+MWe5iM99W4LqvvC6cF00J5g7HYDe+cPsT01t2B
mhdBZPVAtaZZQgiE/BBqiMCAn6aOnEEgyHRmKGkBCL8RJsrn3EP4g9XNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGloBf/Izi7s7bWlqCaUrSYduK2QMB8GA1UdIwQY
MBaAFFvl8ZU+Ax0nmGTzw77/C8Z1oA7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjct
OGM2MDBlYWU3ZDgwLzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjctOGM2MDBlYWU3ZDgw
LzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDm4Kemo
GQen5wTlaHsol9WiSNegGmb8ArlVpW8wTIe9HrKoEhTyHmLI9IeuGXGsBsQJ01EO
/MCN/ozaFN3kC9CS4p1ecq+aKyK8sT5LL+ndMv5jf9kPOd5B6+1KVTbImPrezt4p
fuDnFtG4YF6tUXkwI0kMa6tXBqlhCEIPQEKm+c2ZU2UmQntaELoutLbLy0nVTr0Y
Bv1i5JdKedVAAg3/CT6bF38d6Mbrxl2ZAFYt+owTNPZWfEo5qjOGRDst8OlFwgc/
56H808brBJR3BDvyu3M+N+wU6VCNdQ9eXiVpbf6R1sW0hlke6CmjPgT8LD7RFtqD
eTpeW4neMr3GcA==
-----END CERTIFICATE-----