Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
File:                     wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft (raw, json)
Hash identifier:          elP9xcYKoGjLsdqc4SkDlS2tCriLGrFpnC8kmttAp+Y=
Subject key identifier:   53:F1:5D:A9:49:80:5D:2A:73:9C:EC:B5:5C:B8:89:7E:27:5A:8C:40
Authority key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Certificate issuer:       /CN=c29cc9d3c496f8a92204d40a665edf538190d539
Certificate serial:       01962E61FF959F7382B3F25F8F4B9012DFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
Manifest number:          0222
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: c3GX2BFKDEhmANmZ86G-emEKbTk.roa (hash: mk77AQBdXW18vflWaTb98uk+eKpn+5cvtwdROZ1ovY0=)
                          2: wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl (hash: dVee4g88beL0/fGR5QXZsHXr9b6EtX40dQu1OKSBG84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:95:9f:73:82:b3:f2:5f:8f:4b:90:12:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29cc9d3c496f8a92204d40a665edf538190d539
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=53f15da949805d2a739cecb55cb8897e275a8c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:3c:49:5f:2b:d0:75:e1:6b:7a:05:6e:95:
                    d9:e9:35:5c:5e:9c:9a:47:2e:52:73:77:46:08:fc:
                    d5:1b:7c:69:12:3e:bf:96:b1:be:9b:50:49:5a:ab:
                    b0:bf:9e:6d:a5:d3:8d:76:f7:06:6e:27:23:89:89:
                    ca:26:d7:a7:b0:d0:3d:17:a2:fc:36:a5:11:c5:92:
                    5a:62:78:74:d6:cf:7c:2b:09:81:b0:11:0e:a6:ed:
                    5a:55:4f:35:5e:5c:d8:19:d5:9e:bd:27:4d:15:52:
                    7d:4c:50:45:db:c7:f0:12:6f:b1:ec:4c:87:67:9a:
                    f0:a1:17:c9:01:26:91:f4:21:24:3f:1d:43:f2:b8:
                    6e:1b:72:b0:09:c0:27:0b:7a:7c:e2:3e:e6:fe:d6:
                    d9:b3:39:25:c7:3b:f2:8b:dd:3a:32:e8:f2:2a:c1:
                    14:94:1c:3e:83:b1:38:5a:42:13:3f:13:98:20:c2:
                    27:f8:c1:f8:81:43:f6:22:4e:ba:b8:06:91:6e:a8:
                    2a:1e:28:8a:dd:7e:3e:fe:9a:30:0c:01:53:3e:4c:
                    b3:67:ed:1b:c1:72:d5:e5:4b:1d:34:56:6c:e3:9f:
                    23:38:1c:ed:2f:9a:8b:84:b0:f5:3f:b0:7b:0d:9b:
                    06:2f:70:19:ba:1d:53:cc:33:22:e0:fc:1e:f3:76:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:5D:A9:49:80:5D:2A:73:9C:EC:B5:5C:B8:89:7E:27:5A:8C:40
            X509v3 Authority Key Identifier:
                keyid:C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:d1:04:b2:05:ec:7a:28:ee:de:37:86:5f:f4:21:22:38:
         24:f1:c5:0b:ed:5a:f6:1f:07:ad:ff:b4:27:d8:8c:2c:9a:2d:
         cf:80:8c:b6:45:59:e9:47:9e:7b:6c:d7:85:4e:e0:86:1f:c5:
         f0:81:a6:df:d2:69:a9:c8:09:24:d0:15:c6:a5:7c:27:64:be:
         3b:15:42:70:db:39:76:58:64:c4:fc:ee:0a:9e:59:55:34:ef:
         d6:81:b3:5d:34:c7:7e:51:90:ac:b9:ca:7d:51:ad:d4:08:8d:
         55:a7:79:4d:c6:31:f6:17:12:f5:d1:3a:91:bf:c8:18:a5:87:
         d6:0f:a6:9a:9e:ce:5e:73:44:70:bb:19:e0:b3:71:4b:5b:7b:
         aa:82:b9:28:05:b2:e9:5f:bd:6d:7d:7e:98:60:b3:de:a3:73:
         03:49:f4:e1:d5:40:54:e2:8c:89:24:23:e8:4e:0b:86:7d:a4:
         47:41:ab:ba:0b:16:88:a3:4c:0a:94:1b:43:75:8f:9f:d4:5f:
         f9:72:e1:92:6a:a9:e4:08:9e:76:c9:55:4a:48:e4:e7:8d:bd:
         db:e3:73:83:01:ac:f8:e9:22:97:19:2f:fa:f2:ed:47:1f:39:
         19:a9:00:02:fc:dd:16:cf:f1:ce:6a:bd:f3:a7:43:f5:13:7d:
         03:e2:20:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYf+Vn3OCs/Jfj0uQEt+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWNjOWQzYzQ5NmY4YTkyMjA0ZDQwYTY2NWVkZjUzODE5
MGQ1MzkwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
Eyg1M2YxNWRhOTQ5ODA1ZDJhNzM5Y2VjYjU1Y2I4ODk3ZTI3NWE4YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSU8SV8r0HXha3oFbpXZ6TVcXpya
Ry5Sc3dGCPzVG3xpEj6/lrG+m1BJWquwv55tpdONdvcGbicjiYnKJtensNA9F6L8
NqURxZJaYnh01s98KwmBsBEOpu1aVU81XlzYGdWevSdNFVJ9TFBF28fwEm+x7EyH
Z5rwoRfJASaR9CEkPx1D8rhuG3KwCcAnC3p84j7m/tbZszklxzvyi906MujyKsEU
lBw+g7E4WkITPxOYIMIn+MH4gUP2Ik66uAaRbqgqHiiK3X4+/powDAFTPkyzZ+0b
wXLV5UsdNFZs458jOBztL5qLhLD1P7B7DZsGL3AZuh1TzDMi4Pwe83a/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPxXalJgF0qc5zstVy4iX4nWoxAMB8GA1UdIwQY
MBaAFMKcydPElvipIgTUCmZe31OBkNU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAt
MDZiOWNhMmY2MGM3LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAtMDZiOWNhMmY2MGM3
LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb/RBLIF
7Hoo7t43hl/0ISI4JPHFC+1a9h8Hrf+0J9iMLJotz4CMtkVZ6Ueee2zXhU7ghh/F
8IGm39JpqcgJJNAVxqV8J2S+OxVCcNs5dlhkxPzuCp5ZVTTv1oGzXTTHflGQrLnK
fVGt1AiNVad5TcYx9hcS9dE6kb/IGKWH1g+mmp7OXnNEcLsZ4LNxS1t7qoK5KAWy
6V+9bX1+mGCz3qNzA0n04dVAVOKMiSQj6E4Lhn2kR0GrugsWiKNMCpQbQ3WPn9Rf
+XLhkmqp5AiedslVSkjk54292+NzgwGs+Okilxkv+vLtRx85GakAAvzdFs/xzmq9
86dD9RN9A+Igww==
-----END CERTIFICATE-----