Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
File:                     WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json)
Hash identifier:          yKWPzt6ufvyVs3QvwApUgQZy3hWmWIEcOblr6R6x/gc=
Subject key identifier:   40:B2:0A:A0:04:EC:77:1A:20:33:A6:21:AF:0F:C0:65:F7:AC:0C:B7
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Certificate issuer:       /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial:       01962DF3D11F38BD34203F19609CB0F9E5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
Manifest number:          0C08
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: VdnPwqBL8iM5FS+KIuLeH15gKWIo4MPa9txjh+prE/A=)
                          2: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (hash: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:1f:38:bd:34:20:3f:19:60:9c:b0:f9:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=40b20aa004ec771a2033a621af0fc065f7ac0cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:93:85:66:12:46:87:77:02:96:8a:5c:59:
                    4e:35:4c:7f:f9:c0:41:2d:46:65:63:a6:52:ec:a7:
                    c2:ac:32:23:24:4e:74:a5:a8:e1:36:bb:0a:e0:22:
                    cc:57:b4:c1:c3:78:94:a1:44:4a:21:4b:14:57:cb:
                    d6:32:8b:c0:84:63:95:25:89:73:0e:ed:fa:cd:18:
                    b5:cb:98:3d:4f:b9:5f:3a:fe:21:a6:4c:4b:c7:76:
                    b3:51:98:a7:9e:29:3a:4b:b3:9c:0c:24:2c:98:30:
                    86:11:e6:2c:5b:39:3d:81:e8:38:86:9a:27:b2:63:
                    32:2d:d7:e0:da:26:59:7a:50:c1:97:cc:f6:69:8f:
                    db:5f:54:59:9e:c8:09:bc:d2:51:81:3c:6c:02:08:
                    fb:e8:fe:46:69:1d:f1:66:c4:ee:56:5d:76:c9:f2:
                    ea:da:f5:10:4c:3c:85:d2:5e:dc:24:6d:e1:18:2c:
                    82:95:3d:5d:2a:d1:1e:e9:11:fa:a7:26:75:03:54:
                    57:a0:14:3e:ae:c0:79:f4:85:cc:a2:0c:9f:b4:90:
                    93:5d:12:76:39:02:74:22:46:ef:43:80:7d:a1:ae:
                    97:b6:bc:4d:e8:e3:a8:2f:b5:b7:d7:b8:92:ae:fd:
                    83:b4:8a:94:c6:de:fe:5f:a5:39:a8:b1:e5:56:7b:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:0A:A0:04:EC:77:1A:20:33:A6:21:AF:0F:C0:65:F7:AC:0C:B7
            X509v3 Authority Key Identifier:
                keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:9b:8a:fe:96:88:fb:c5:f3:9d:b4:4a:52:ba:0c:fe:1f:
         cb:66:7e:2d:d6:9e:cc:8a:e8:83:62:c1:73:b7:85:2c:40:dc:
         17:b8:5a:80:ac:35:69:7c:51:93:27:b6:48:08:3c:6c:75:05:
         11:16:43:c5:cc:58:cc:20:03:82:4d:36:99:8b:ab:e4:fe:4e:
         b1:1b:02:7a:05:5d:1c:0f:96:76:f5:5b:00:ec:cb:36:93:b8:
         a5:0f:c8:46:ed:c6:64:a0:82:1c:de:ac:96:08:a6:29:2d:9f:
         62:86:0d:c1:31:6a:fa:0e:f5:8d:8d:f2:23:dd:bc:69:2f:3d:
         c8:b3:32:2a:26:16:e9:d2:30:b4:a8:65:f8:24:7d:67:42:79:
         5f:41:b1:bd:e4:fc:20:87:f9:8d:9a:5d:5a:1b:54:b9:23:ab:
         3d:f5:80:3d:92:62:c8:33:70:48:b8:04:de:f0:cc:45:71:23:
         c8:69:18:a6:cb:13:66:92:63:94:37:79:2b:d0:ef:1c:b6:c4:
         03:c8:04:bf:5b:89:1f:74:62:e0:6c:33:b8:5f:9a:5f:92:40:
         14:84:01:b7:11:38:7e:65:2c:19:b8:a6:45:d8:ed:69:8b:bf:
         1f:c2:fb:2b:74:34:80:ed:b6:cb:47:94:62:17:85:d5:47:7b:
         63:c9:46:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89EfOL00ID8ZYJyw+eWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmYyZTE1MzMxNjRlYmI4ZDg3MWNmNmYyYzQ5YTU2N2Vh
MjY2MzUwHhcNMjUwNDEzMDcwMTE1WhcNMjUwNDE0MDcwMTE1WjAzMTEwLwYDVQQD
Eyg0MGIyMGFhMDA0ZWM3NzFhMjAzM2E2MjFhZjBmYzA2NWY3YWMwY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybWThWYSRod3ApaKXFlONUx/+cBB
LUZlY6ZS7KfCrDIjJE50pajhNrsK4CLMV7TBw3iUoURKIUsUV8vWMovAhGOVJYlz
Du36zRi1y5g9T7lfOv4hpkxLx3azUZinnik6S7OcDCQsmDCGEeYsWzk9geg4hpon
smMyLdfg2iZZelDBl8z2aY/bX1RZnsgJvNJRgTxsAgj76P5GaR3xZsTuVl12yfLq
2vUQTDyF0l7cJG3hGCyClT1dKtEe6RH6pyZ1A1RXoBQ+rsB59IXMogyftJCTXRJ2
OQJ0IkbvQ4B9oa6XtrxN6OOoL7W317iSrv2DtIqUxt7+X6U5qLHlVnsi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECyCqAE7HcaIDOmIa8PwGX3rAy3MB8GA1UdIwQY
MBaAFFgvLhUzFk67jYcc9vLEmlZ+omY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEt
MDE5Y2Y3N2U0Nzg4LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEtMDE5Y2Y3N2U0Nzg4
LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCKbiv6W
iPvF8520SlK6DP4fy2Z+LdaezIrog2LBc7eFLEDcF7hagKw1aXxRkye2SAg8bHUF
ERZDxcxYzCADgk02mYur5P5OsRsCegVdHA+WdvVbAOzLNpO4pQ/IRu3GZKCCHN6s
lgimKS2fYoYNwTFq+g71jY3yI928aS89yLMyKiYW6dIwtKhl+CR9Z0J5X0GxveT8
IIf5jZpdWhtUuSOrPfWAPZJiyDNwSLgE3vDMRXEjyGkYpssTZpJjlDd5K9DvHLbE
A8gEv1uJH3Ri4GwzuF+aX5JAFIQBtxE4fmUsGbimRdjtaYu/H8L7K3Q0gO22y0eU
YheF1Ud7Y8lGuQ==
-----END CERTIFICATE-----