Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          vvwghAL76uUzw2/IlVTJE9bOgqafe2647m+sWevhEeA=
Subject key identifier:   70:EA:92:45:8E:C4:31:45:CE:97:9A:AA:88:DF:D2:81:2E:A5:4D:51
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       01962E61845199AFE38B81D04C5A6A261B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
                          2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
                          3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: IzQMI105jpyx3+uxJdpaCkxYOZEWeGdiFb5+4v8BMU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:51:99:af:e3:8b:81:d0:4c:5a:6a:26:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=70ea92458ec43145ce979aaa88dfd2812ea54d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:17:1a:49:d7:97:3c:f5:3f:f0:5e:bd:77:
                    a0:75:a6:91:6d:35:1a:34:20:3a:57:43:46:ee:8a:
                    cd:fc:63:0c:b5:3f:7d:73:f7:b5:cf:77:1a:46:04:
                    90:65:6f:d1:2b:dc:52:da:49:73:cd:a1:fc:d7:41:
                    b0:b7:00:30:66:5c:65:0f:0c:ee:c8:7b:30:f7:eb:
                    4e:4b:1a:ec:92:25:d7:92:24:6c:bb:0e:17:4c:61:
                    04:db:45:7d:78:b4:9d:d8:be:28:4d:b8:cf:8d:02:
                    49:87:7d:70:29:45:f6:3d:5e:98:43:b8:7d:6a:88:
                    ec:7b:fe:e4:02:c4:3d:26:1e:f8:37:83:18:24:1a:
                    f3:78:18:bc:65:8c:22:0c:80:4f:6b:19:36:ce:e7:
                    34:48:56:3b:bd:a0:ed:0d:b6:fd:db:36:06:41:de:
                    5e:dc:e5:b4:fc:49:0a:a0:4e:44:82:8a:04:a6:d6:
                    66:8a:9a:c4:58:1e:31:52:14:be:cf:ca:24:9c:db:
                    34:78:b0:9a:71:20:41:af:5c:c4:47:63:14:ed:6b:
                    34:5a:17:78:5e:e7:f6:de:ff:9d:28:38:b6:6c:1a:
                    54:f7:37:46:e7:0d:84:85:94:a7:5a:d5:d7:ec:e5:
                    4c:fa:40:dc:27:24:b6:f6:64:cd:69:a2:15:4b:e8:
                    f4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:92:45:8E:C4:31:45:CE:97:9A:AA:88:DF:D2:81:2E:A5:4D:51
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:ec:8d:88:6f:46:75:c1:ca:f2:91:bf:a3:b5:dc:ad:b4:
         e7:dc:f4:94:70:73:31:d3:e9:bc:fb:64:ff:3f:e8:6c:64:97:
         d6:3b:45:15:c8:c1:7f:85:38:d2:03:4c:cf:70:9f:3d:5c:9d:
         0a:fe:2f:5d:ae:e6:b5:c1:50:9a:7d:a1:7c:d6:fc:52:f3:94:
         52:2e:57:ed:fb:f4:9a:c5:28:c6:78:52:f0:de:c6:f5:6a:27:
         a4:9c:4e:00:25:62:39:a8:02:bd:74:ba:79:5b:1a:7a:11:97:
         6d:6a:f1:f4:5f:a5:f6:c8:9c:b1:d7:fa:f5:e0:f9:0f:4f:b7:
         cf:ae:16:b8:64:ce:2d:b3:80:b9:f7:01:be:72:c8:98:5e:d1:
         11:ff:21:67:fc:37:03:79:bd:ad:bb:83:2a:4a:87:6b:76:23:
         5e:37:3b:12:34:2c:6a:a8:c8:6c:9b:1f:01:68:10:91:41:75:
         c9:d1:1a:ee:03:45:6b:33:b3:4e:1f:a9:09:62:c4:b2:12:a8:
         16:a5:ab:32:26:d1:a1:6d:41:11:01:cb:1a:4a:61:61:14:cd:
         3d:f7:96:8c:11:1e:ca:92:91:73:31:16:43:d6:12:f0:d0:c1:
         bd:03:3c:d6:b9:e2:fb:b1:cc:49:99:81:9d:03:ee:cf:87:69:
         3e:6f:27:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYRRma/ji4HQTFpqJhs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5
NDgyY2IwHhcNMjUwNDEzMDkwMTA0WhcNMjUwNDE0MDkwMTA0WjAzMTEwLwYDVQQD
Eyg3MGVhOTI0NThlYzQzMTQ1Y2U5NzlhYWE4OGRmZDI4MTJlYTU0ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu40XGknXlzz1P/BevXegdaaRbTUa
NCA6V0NG7orN/GMMtT99c/e1z3caRgSQZW/RK9xS2klzzaH810GwtwAwZlxlDwzu
yHsw9+tOSxrskiXXkiRsuw4XTGEE20V9eLSd2L4oTbjPjQJJh31wKUX2PV6YQ7h9
aojse/7kAsQ9Jh74N4MYJBrzeBi8ZYwiDIBPaxk2zuc0SFY7vaDtDbb92zYGQd5e
3OW0/EkKoE5EgooEptZmiprEWB4xUhS+z8oknNs0eLCacSBBr1zER2MU7Ws0Whd4
Xuf23v+dKDi2bBpU9zdG5w2EhZSnWtXX7OVM+kDcJyS29mTNaaIVS+j0XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDqkkWOxDFFzpeaqojf0oEupU1RMB8GA1UdIwQY
MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt
ZTc3MTdiMjg3MDY2LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2
LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlLsjYhv
RnXByvKRv6O13K2059z0lHBzMdPpvPtk/z/obGSX1jtFFcjBf4U40gNMz3CfPVyd
Cv4vXa7mtcFQmn2hfNb8UvOUUi5X7fv0msUoxnhS8N7G9WonpJxOACViOagCvXS6
eVsaehGXbWrx9F+l9sicsdf69eD5D0+3z64WuGTOLbOAufcBvnLImF7REf8hZ/w3
A3m9rbuDKkqHa3YjXjc7EjQsaqjIbJsfAWgQkUF1ydEa7gNFazOzTh+pCWLEshKo
FqWrMibRoW1BEQHLGkphYRTNPfeWjBEeypKRczEWQ9YS8NDBvQM81rni+7HMSZmB
nQPuz4dpPm8nXQ==
-----END CERTIFICATE-----