Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          WpfpxMKBMWl0MlDw/H33aW8dhtsdVt8bBTyT0hHtaZI=
Subject key identifier:   2B:56:DB:23:98:AB:48:31:61:6A:A8:B4:3B:28:63:D2:44:B9:7A:F5
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       01962F3D56EFB47A15042165B4C0EAD59034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          13F0
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: dR91BleCgMmLc3P0oYj0yE6ptlaoWUuxw96WpVrtygk=)
                          2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:ef:b4:7a:15:04:21:65:b4:c0:ea:d5:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=2b56db2398ab4831616aa8b43b2863d244b97af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:b4:0b:4b:0f:29:e5:95:26:8a:f7:08:32:
                    05:62:b6:bc:94:e4:ed:6d:c6:c4:30:9d:23:27:9b:
                    67:8b:95:b5:92:e1:64:dd:42:ca:b8:b2:f7:77:74:
                    bb:a6:41:9e:9b:40:17:23:7c:57:e2:29:34:8e:82:
                    68:40:50:1c:0d:a9:0a:ac:dc:bb:f7:12:0a:49:78:
                    59:4f:b1:8b:7f:78:2e:11:fe:66:0f:6e:ef:db:c3:
                    a5:a1:e7:91:cd:a8:12:f6:51:4a:8c:ff:19:49:ba:
                    76:54:34:e3:b7:ee:96:3b:5b:5d:f0:fd:7b:18:eb:
                    73:87:e0:32:68:4c:48:35:76:71:3d:fa:a7:02:4c:
                    8a:2e:f9:5b:31:79:ac:e6:2d:45:70:b0:4e:ef:08:
                    8c:df:ca:75:5d:dc:be:0c:da:fa:12:da:a0:44:1b:
                    e8:36:87:bf:84:99:06:36:56:aa:b9:59:40:39:74:
                    58:9b:df:86:bf:db:bf:ad:2e:1f:77:83:ac:92:80:
                    1c:93:73:9c:9b:6b:dd:dd:1c:66:6f:e2:9e:14:e3:
                    66:9d:51:b3:58:17:b8:1d:61:00:cc:01:ff:20:f9:
                    e4:5a:a9:d5:ff:c7:b1:d6:f8:12:a6:d3:35:13:56:
                    70:9c:a1:41:05:08:7e:1b:eb:8a:4a:16:ad:3f:63:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:56:DB:23:98:AB:48:31:61:6A:A8:B4:3B:28:63:D2:44:B9:7A:F5
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:ee:5c:a9:74:a1:42:0a:1e:8a:fe:ce:4d:cd:4d:c4:0d:
         5c:fd:68:3b:68:81:6d:c0:0e:87:05:54:83:83:f5:72:b5:42:
         e2:d2:e6:e0:0a:4a:c6:81:fc:fb:88:24:d4:eb:10:f5:44:ba:
         ff:49:97:67:ee:11:f4:41:c1:7c:ab:86:44:cb:ba:3d:99:31:
         54:f8:94:29:14:8d:99:3f:61:a5:24:3b:67:0a:ce:b4:a8:f8:
         64:8a:5f:6c:21:09:10:23:9b:85:0d:6c:e0:76:e5:e8:b3:4c:
         d2:23:fb:0d:2a:cb:31:17:46:26:c8:c0:97:22:30:a4:58:99:
         4f:f2:14:5d:9b:59:e1:f3:59:06:86:35:f9:07:98:d7:bc:da:
         2e:dd:0a:5d:6c:23:b3:cb:57:0f:a3:91:b7:e1:e1:85:e8:fa:
         07:32:b7:f8:c9:3a:8c:bd:e3:e0:43:b6:6d:ef:d5:26:5e:18:
         1e:03:42:2b:19:58:30:bb:51:2f:c9:32:4d:3c:02:5b:44:3d:
         58:38:52:9e:15:fb:40:44:75:5c:af:b7:79:eb:b7:5c:af:4a:
         c5:41:38:a6:0d:fa:da:0a:12:e8:e0:35:4d:ab:70:f9:25:73:
         4e:b3:84:02:fe:86:5f:25:36:03:47:8c:32:18:71:61:2e:1b:
         c8:94:b6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVbvtHoVBCFltMDq1ZA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTU4NTA5ZTFjMGVjMTYwZGUyZTA3NDE3NzIxM2RlMzA2
MTVkNmYwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EygyYjU2ZGIyMzk4YWI0ODMxNjE2YWE4YjQzYjI4NjNkMjQ0Yjk3YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj60C0sPKeWVJor3CDIFYra8lOTt
bcbEMJ0jJ5tni5W1kuFk3ULKuLL3d3S7pkGem0AXI3xX4ik0joJoQFAcDakKrNy7
9xIKSXhZT7GLf3guEf5mD27v28OloeeRzagS9lFKjP8ZSbp2VDTjt+6WO1td8P17
GOtzh+AyaExINXZxPfqnAkyKLvlbMXms5i1FcLBO7wiM38p1Xdy+DNr6EtqgRBvo
Noe/hJkGNlaquVlAOXRYm9+Gv9u/rS4fd4OskoAck3Ocm2vd3Rxmb+KeFONmnVGz
WBe4HWEAzAH/IPnkWqnV/8ex1vgSptM1E1ZwnKFBBQh+G+uKShatP2NNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtW2yOYq0gxYWqotDsoY9JEuXr1MB8GA1UdIwQY
MBaAFAJVhQnhwOwWDeLgdBdyE94wYV1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEt
N2FlNjkxMWNhMTI2LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEtN2FlNjkxMWNhMTI2
LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJXuXKl0
oUIKHor+zk3NTcQNXP1oO2iBbcAOhwVUg4P1crVC4tLm4ApKxoH8+4gk1OsQ9US6
/0mXZ+4R9EHBfKuGRMu6PZkxVPiUKRSNmT9hpSQ7ZwrOtKj4ZIpfbCEJECObhQ1s
4Hbl6LNM0iP7DSrLMRdGJsjAlyIwpFiZT/IUXZtZ4fNZBoY1+QeY17zaLt0KXWwj
s8tXD6ORt+Hhhej6BzK3+Mk6jL3j4EO2be/VJl4YHgNCKxlYMLtRL8kyTTwCW0Q9
WDhSnhX7QER1XK+3eeu3XK9KxUE4pg362goS6OA1Tatw+SVzTrOEAv6GXyU2A0eM
MhhxYS4byJS2ZQ==
-----END CERTIFICATE-----