Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          XxNhVIYSxCl9/s6n0OlPmqeEO1CAFHTzveMPj66H3C0=
Subject key identifier:   4D:DD:AF:35:5F:1D:E6:B8:32:9E:69:7B:86:46:BA:C7:1D:8A:C4:89
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       01962F3DA121B4FC7FFFE9320418FFABFE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: /xSmZNp7x46rV1KBGIXgOOBUKcH0P/zB9naAn6AYArM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:21:b4:fc:7f:ff:e9:32:04:18:ff:ab:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=4dddaf355f1de6b8329e697b8646bac71d8ac489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:de:32:30:c4:95:98:73:36:b9:09:fa:ad:
                    a4:e6:36:a2:2a:75:7e:89:a5:38:21:cf:6e:e1:0a:
                    f1:a5:5b:83:e9:b6:04:09:51:ea:5d:e5:c1:71:ec:
                    87:59:75:cd:aa:06:a7:b5:88:6b:44:b6:fe:db:83:
                    a1:ca:68:f7:e6:c9:00:ed:00:f5:4e:05:67:e8:8e:
                    d9:b7:51:3e:92:43:c9:ff:e1:a1:d3:d8:f6:d9:ca:
                    1d:09:f6:b1:b6:8a:90:9b:94:02:f1:23:3d:e0:11:
                    53:8c:70:ee:0d:00:ea:a5:04:52:36:bd:21:66:65:
                    37:38:c8:00:13:ec:26:61:4a:ca:c1:3f:36:8b:e5:
                    52:2f:5d:52:43:3b:bc:9f:0d:50:33:41:cf:a8:17:
                    09:9f:2a:c3:b5:42:96:68:0a:9e:3e:13:b2:45:9a:
                    eb:7a:60:09:f4:b8:04:73:e3:60:fb:9a:5b:09:14:
                    2f:7a:3d:00:9f:a0:04:ed:36:0c:50:45:cd:5e:f3:
                    a3:55:98:7d:19:44:37:ce:69:b2:b5:bc:69:68:89:
                    4b:1f:94:96:58:65:9a:cc:2a:0d:34:d2:c7:bc:87:
                    c0:7f:6e:3f:67:45:65:2c:00:10:73:f1:50:ca:a0:
                    49:21:c4:d7:0c:e7:af:fe:c0:12:8d:a7:56:c3:25:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DD:AF:35:5F:1D:E6:B8:32:9E:69:7B:86:46:BA:C7:1D:8A:C4:89
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:0c:76:87:4a:5d:1c:b1:80:7c:1a:e6:3e:ba:d7:55:d2:
         60:3d:e0:98:c3:40:b1:e7:25:ed:45:a9:5a:f4:d6:fb:56:73:
         12:9f:30:2c:c5:f1:4d:a9:00:54:51:07:dd:04:64:75:ac:bd:
         71:a1:18:e4:5c:e1:c3:1c:1c:7a:b9:ed:d0:39:55:35:6e:c7:
         a5:5b:41:a1:92:0b:e7:ce:93:e0:48:67:92:2e:80:e6:9e:7c:
         69:d2:f2:d1:1e:38:df:48:14:fa:6a:76:71:24:3a:67:a9:c9:
         cf:65:7b:b0:0b:a5:3f:d2:36:6c:3c:f7:2e:d2:60:bc:d6:da:
         f3:dc:03:9f:79:7c:27:78:ce:55:8c:8a:d6:35:fb:3a:1f:de:
         09:77:e4:b1:82:da:d4:aa:47:ac:2d:5e:1a:77:14:7b:26:0d:
         84:f6:3c:ab:89:f3:59:7d:39:b1:d6:dc:c5:dc:4a:52:82:e8:
         94:97:ae:0f:e7:fd:ca:a6:b2:3c:3c:9e:fa:dd:0f:b0:87:68:
         0d:6e:54:c6:4b:3c:c0:36:5f:ce:b3:49:43:01:d6:b9:8b:84:
         00:79:ff:82:13:66:2d:3f:26:d1:f9:1d:19:71:82:ba:ac:31:
         0d:92:a6:39:95:c9:10:cd:0f:28:84:58:94:0f:d0:f8:28:57:
         fa:54:be:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaEhtPx//+kyBBj/q/6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi
ZGE4M2IwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
Eyg0ZGRkYWYzNTVmMWRlNmI4MzI5ZTY5N2I4NjQ2YmFjNzFkOGFjNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSreMjDElZhzNrkJ+q2k5jaiKnV+
iaU4Ic9u4QrxpVuD6bYECVHqXeXBceyHWXXNqgantYhrRLb+24Ohymj35skA7QD1
TgVn6I7Zt1E+kkPJ/+Gh09j22codCfaxtoqQm5QC8SM94BFTjHDuDQDqpQRSNr0h
ZmU3OMgAE+wmYUrKwT82i+VSL11SQzu8nw1QM0HPqBcJnyrDtUKWaAqePhOyRZrr
emAJ9LgEc+Ng+5pbCRQvej0An6AE7TYMUEXNXvOjVZh9GUQ3zmmytbxpaIlLH5SW
WGWazCoNNNLHvIfAf24/Z0VlLAAQc/FQyqBJIcTXDOev/sASjadWwyX0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3drzVfHea4Mp5pe4ZGuscdisSJMB8GA1UdIwQY
MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt
MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2
LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4MMdodK
XRyxgHwa5j6611XSYD3gmMNAsecl7UWpWvTW+1ZzEp8wLMXxTakAVFEH3QRkday9
caEY5Fzhwxwcernt0DlVNW7HpVtBoZIL586T4Ehnki6A5p58adLy0R4430gU+mp2
cSQ6Z6nJz2V7sAulP9I2bDz3LtJgvNba89wDn3l8J3jOVYyK1jX7Oh/eCXfksYLa
1KpHrC1eGncUeyYNhPY8q4nzWX05sdbcxdxKUoLolJeuD+f9yqayPDye+t0PsIdo
DW5Uxks8wDZfzrNJQwHWuYuEAHn/ghNmLT8m0fkdGXGCuqwxDZKmOZXJEM0PKIRY
lA/Q+ChX+lS+4A==
-----END CERTIFICATE-----