Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File:                     wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier:          S3IuPV1IGzKMx8NRNF0jyUSddNyR9ODnLmQvLjXRnQQ=
Subject key identifier:   58:E4:D9:5E:65:3E:8A:0B:9C:20:0B:1A:EA:C3:DC:4D:0F:6F:DC:84
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer:       /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial:       01962F3DD29621A9A16CDDB4D73387ED97BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
                          2: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
                          3: suBVFY86lLLNw-jyyfI-FYfhvNA.roa (hash: 81WEqdV7PNWoCGw6D45g6WF3xPhoMsG1WXe8GERJGtA=)
                          4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
                          5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: R/5SKJekti74TiM8SUwjjS+wfpyjakg3BxprxNS6vng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:96:21:a9:a1:6c:dd:b4:d7:33:87:ed:97:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=58e4d95e653e8a0b9c200b1aeac3dc4d0f6fdc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:41:a2:1a:9e:f8:a9:10:3b:c2:43:2a:66:
                    6c:9e:e6:3a:2c:4c:cb:77:0c:e2:1e:01:76:f6:4e:
                    68:52:35:ef:21:e0:0b:c8:23:25:33:6b:b2:6d:82:
                    3d:14:16:0e:69:ba:18:3f:61:0b:23:6c:84:74:b3:
                    90:e2:4a:73:45:77:95:13:a5:8b:64:7d:3b:91:f7:
                    72:fe:5b:05:f7:4e:1b:07:6c:89:aa:83:61:90:2f:
                    6b:a5:cd:5e:22:99:c7:96:ba:eb:b1:b2:d1:11:6a:
                    e7:4e:07:a5:35:a3:8d:22:6c:a6:e2:47:88:d1:44:
                    3c:17:9c:8c:73:4d:f5:3b:f3:08:f9:46:05:7c:d6:
                    1b:f7:b5:24:d0:1a:75:4e:ae:9e:65:b9:66:7a:a5:
                    3c:ac:27:3e:8d:df:ab:3f:22:be:d9:97:d5:89:0b:
                    94:59:9f:4c:d2:b5:77:17:10:2f:11:06:2c:82:8f:
                    94:59:01:ac:e0:6d:ae:e6:37:ef:02:2a:37:7d:8f:
                    6e:88:5e:a7:c0:7b:78:fe:f7:23:b4:a4:b9:fe:57:
                    32:75:3e:b5:f7:66:41:b8:48:55:61:7b:5d:39:1f:
                    95:28:82:1f:5b:e8:9f:89:4c:58:b7:12:7d:29:4b:
                    a2:41:97:ad:dc:46:37:5c:55:6d:0c:a7:7c:9d:f4:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:D9:5E:65:3E:8A:0B:9C:20:0B:1A:EA:C3:DC:4D:0F:6F:DC:84
            X509v3 Authority Key Identifier:
                keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:87:2f:58:05:2e:e8:0d:21:e7:69:4c:c7:5e:fa:49:fe:5d:
         df:8f:4b:04:67:44:b7:81:ed:73:e3:b2:2c:a9:62:3e:5f:b2:
         2e:a2:81:5a:32:5b:35:77:2f:36:0e:62:37:42:d4:0f:07:7e:
         64:b8:4c:23:73:b7:f3:ec:b2:27:9f:99:a8:ff:26:1c:b1:e0:
         49:2e:82:18:f5:bf:04:31:19:1c:11:86:0d:57:e4:59:73:cc:
         43:b3:53:78:4d:16:ae:b6:9d:8a:80:b5:f0:17:84:d0:3e:8c:
         f4:b4:8b:eb:dc:50:9c:90:a4:36:c6:6f:1f:8a:47:e3:3f:45:
         b5:3f:ac:71:e3:3b:88:bd:62:94:7e:fc:7c:bc:6c:8e:b5:20:
         81:a6:f5:c3:85:db:87:24:02:28:00:70:c4:8c:7c:cf:6b:0f:
         69:7b:eb:bc:46:da:ed:f0:52:37:1b:cd:3c:12:f6:06:1e:c3:
         b4:a3:eb:09:a6:d5:e7:c3:19:54:37:58:33:74:f7:49:99:36:
         f1:bc:4e:19:b6:f9:0e:42:6b:9d:3b:0b:ab:64:8a:af:ff:56:
         37:dc:39:fc:9d:e5:c1:cc:e0:22:95:fe:76:30:f6:f8:70:18:
         60:44:61:61:e6:35:12:c7:97:80:49:4e:f9:dd:ba:10:28:6f:
         54:ab:8a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdKWIamhbN201zOH7Ze8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm
MmM4NzMwHhcNMjUwNDEzMTMwMTQyWhcNMjUwNDE0MTMwMTQyWjAzMTEwLwYDVQQD
Eyg1OGU0ZDk1ZTY1M2U4YTBiOWMyMDBiMWFlYWMzZGM0ZDBmNmZkYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8lBohqe+KkQO8JDKmZsnuY6LEzL
dwziHgF29k5oUjXvIeALyCMlM2uybYI9FBYOaboYP2ELI2yEdLOQ4kpzRXeVE6WL
ZH07kfdy/lsF904bB2yJqoNhkC9rpc1eIpnHlrrrsbLREWrnTgelNaONImym4keI
0UQ8F5yMc031O/MI+UYFfNYb97Uk0Bp1Tq6eZblmeqU8rCc+jd+rPyK+2ZfViQuU
WZ9M0rV3FxAvEQYsgo+UWQGs4G2u5jfvAio3fY9uiF6nwHt4/vcjtKS5/lcydT61
92ZBuEhVYXtdOR+VKIIfW+ifiUxYtxJ9KUuiQZet3EY3XFVtDKd8nfQsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjk2V5lPooLnCALGurD3E0Pb9yEMB8GA1UdIwQY
MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt
NmMzMmE2YWIxZWYyLzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy
LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYcvWAUu
6A0h52lMx176Sf5d349LBGdEt4Htc+OyLKliPl+yLqKBWjJbNXcvNg5iN0LUDwd+
ZLhMI3O38+yyJ5+ZqP8mHLHgSS6CGPW/BDEZHBGGDVfkWXPMQ7NTeE0WrradioC1
8BeE0D6M9LSL69xQnJCkNsZvH4pH4z9FtT+sceM7iL1ilH78fLxsjrUggab1w4Xb
hyQCKABwxIx8z2sPaXvrvEba7fBSNxvNPBL2Bh7DtKPrCabV58MZVDdYM3T3SZk2
8bxOGbb5DkJrnTsLq2SKr/9WN9w5/J3lwczgIpX+djD2+HAYYERhYeY1EseXgElO
+d26EChvVKuKMg==
-----END CERTIFICATE-----