Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File:                     wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier:          JNWZLABkwVVTAyP6Nc9Lq1F3RSXJBCj+scmKX1Kfcsc=
Subject key identifier:   31:D0:70:F7:1D:B0:BA:11:B3:75:C7:2C:7E:85:1F:19:84:D8:B8:4C
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer:       /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial:       01962E98C7E3DAF1EA9EF6F96D9CFCB11902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number:          0151
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (hash: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=)
                          2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: PekPIQkTxwh+zS3bXmJk70ppWcUKv+1HMlqqul5Jg4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:e3:da:f1:ea:9e:f6:f9:6d:9c:fc:b1:19:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=31d070f71db0ba11b375c72c7e851f1984d8b84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:c5:51:04:55:f4:d7:de:c8:fa:e1:05:84:
                    f8:0d:e2:04:73:ee:fd:9b:f8:8e:a3:a7:e5:db:d5:
                    ea:5d:bc:9c:f4:b1:b4:99:6b:12:d4:6b:f3:1d:1a:
                    18:04:f4:51:77:75:86:24:dc:cc:ef:f3:0f:01:5d:
                    78:19:5e:61:39:aa:ce:fb:ca:d3:0b:c4:f9:6c:4a:
                    5f:cc:be:28:08:7e:b4:09:fd:65:60:d9:9a:7c:7f:
                    ff:f5:0e:28:39:22:b7:2b:d1:01:34:28:03:58:aa:
                    54:8f:3d:04:6b:bb:28:3b:a5:cf:2f:c0:58:b2:9e:
                    ff:a8:da:01:b8:83:aa:da:3c:a2:b2:bd:67:bb:b3:
                    31:e1:bc:db:73:0f:5d:c1:9c:bb:02:17:34:12:0d:
                    f2:f3:8f:8e:ae:1d:42:fd:78:ed:10:04:ce:24:54:
                    97:b2:54:f6:81:9d:83:7c:9c:f3:c7:7f:59:b0:bb:
                    e7:d4:4a:b6:a5:de:e5:84:69:5e:8f:05:72:57:81:
                    29:40:e6:1a:d5:c2:f8:02:55:c9:4f:b3:67:1e:6d:
                    97:d3:7b:70:9c:ac:59:ae:f5:d5:4b:c2:64:90:ea:
                    ea:8c:d4:f0:a1:28:ba:10:8f:92:75:b0:dc:57:72:
                    b9:04:7b:46:82:5f:a9:45:e8:99:6b:2e:14:ba:65:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D0:70:F7:1D:B0:BA:11:B3:75:C7:2C:7E:85:1F:19:84:D8:B8:4C
            X509v3 Authority Key Identifier:
                keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:3b:3c:f7:af:58:c9:b0:20:47:f9:18:74:5e:0c:28:7d:
         31:0c:7e:ee:ad:07:99:a8:83:0e:9b:3e:db:9a:c9:5a:c1:27:
         7b:47:c6:9d:20:5a:73:af:69:2d:e4:00:c8:09:ef:b4:75:5e:
         54:ad:80:57:aa:8b:03:76:54:74:f2:82:f9:7c:c2:c5:a1:aa:
         2c:65:6c:29:9f:9b:f1:e4:7c:16:25:62:60:3b:ab:7e:09:25:
         27:fa:37:24:0e:97:d0:b2:18:5a:ec:ab:80:4c:41:44:c4:c9:
         ad:bd:1c:dc:30:5e:4e:18:11:d4:c1:6e:82:b3:c3:6f:39:f6:
         9b:a7:3d:2d:90:25:17:15:f5:3b:91:c1:50:b2:33:96:e8:50:
         43:6b:5d:58:7f:8a:2b:48:93:a5:18:0f:7f:91:83:0b:43:17:
         5d:a6:54:20:89:47:2c:4f:6b:bf:c0:5b:c9:27:13:e5:f3:5b:
         0b:ad:2c:89:55:b6:cc:70:31:38:11:3b:6e:c0:9e:a7:a2:94:
         ae:41:5c:c9:60:84:14:37:e7:a9:6d:21:75:9d:e2:2b:68:32:
         e8:ea:ad:fd:57:8c:98:67:e5:a3:f2:db:95:9c:83:ba:42:82:
         f7:0c:e1:ab:7a:25:3e:b8:89:17:ee:1e:e2:c7:c9:84:ba:cd:
         23:e7:b0:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMfj2vHqnvb5bZz8sRkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDk3YjRlZmRiOGJjY2E1NDYwZDE4OWQ3NjE4ZjZiOGFj
NjhiMDkwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EygzMWQwNzBmNzFkYjBiYTExYjM3NWM3MmM3ZTg1MWYxOTg0ZDhiODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4djFUQRV9NfeyPrhBYT4DeIEc+79
m/iOo6fl29XqXbyc9LG0mWsS1GvzHRoYBPRRd3WGJNzM7/MPAV14GV5hOarO+8rT
C8T5bEpfzL4oCH60Cf1lYNmafH//9Q4oOSK3K9EBNCgDWKpUjz0Ea7soO6XPL8BY
sp7/qNoBuIOq2jyisr1nu7Mx4bzbcw9dwZy7Ahc0Eg3y84+Orh1C/XjtEATOJFSX
slT2gZ2DfJzzx39ZsLvn1Eq2pd7lhGlejwVyV4EpQOYa1cL4AlXJT7NnHm2X03tw
nKxZrvXVS8JkkOrqjNTwoSi6EI+SdbDcV3K5BHtGgl+pReiZay4UumVZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHQcPcdsLoRs3XHLH6FHxmE2LhMMB8GA1UdIwQY
MBaAFMFJe079uLzKVGDRiddhj2uKxosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTkt
YzRjZGVjMTA0NjY3LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTktYzRjZGVjMTA0NjY3
LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh307PPev
WMmwIEf5GHReDCh9MQx+7q0HmaiDDps+25rJWsEne0fGnSBac69pLeQAyAnvtHVe
VK2AV6qLA3ZUdPKC+XzCxaGqLGVsKZ+b8eR8FiViYDurfgklJ/o3JA6X0LIYWuyr
gExBRMTJrb0c3DBeThgR1MFugrPDbzn2m6c9LZAlFxX1O5HBULIzluhQQ2tdWH+K
K0iTpRgPf5GDC0MXXaZUIIlHLE9rv8BbyScT5fNbC60siVW2zHAxOBE7bsCep6KU
rkFcyWCEFDfnqW0hdZ3iK2gy6Oqt/VeMmGflo/LblZyDukKC9wzhq3olPriJF+4e
4sfJhLrNI+ew2A==
-----END CERTIFICATE-----