Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          WmUfENxJe62bZCAAmKJytFtzVCIb7AJKCT44UU0HT64=
Subject key identifier:   A5:D8:15:BA:22:5C:34:8F:85:F0:89:15:BC:0B:24:11:D6:F9:6E:D0
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       01962F744C70DF488A0CCD6DC58E5DAA0822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          05BA
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: 6w/H5S/Uvm/rAwWnNJgTXvTZgkWhtNRcwrZDor+cEyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:70:df:48:8a:0c:cd:6d:c5:8e:5d:aa:08:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=a5d815ba225c348f85f08915bc0b2411d6f96ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:91:e1:62:01:86:78:05:b1:5c:fd:ad:16:
                    dc:a8:d5:05:13:5e:76:0f:a3:f4:c1:98:b0:cd:25:
                    9b:6d:38:b4:67:f3:2a:ed:bf:50:58:bd:5d:f2:0c:
                    61:fa:2c:0f:e9:0a:b1:98:0b:4d:c2:9a:ba:12:32:
                    e2:04:a3:93:dd:db:ee:38:05:74:f0:dc:04:5d:02:
                    73:61:2a:76:e7:57:4c:e6:23:17:8d:00:42:a9:6c:
                    1d:46:d4:ab:1c:99:9d:3f:b5:9b:a4:27:f8:e0:e5:
                    ea:8f:61:e1:67:02:8c:81:74:1e:74:c3:a8:be:cc:
                    60:6d:c2:23:90:1b:f5:59:68:7e:6a:6a:77:dc:8b:
                    68:4e:bc:49:fd:4b:12:85:fb:10:de:08:50:56:66:
                    62:3b:89:69:c4:58:a3:9b:c9:9a:9a:88:21:d4:3e:
                    9d:ea:fa:72:4e:78:0d:84:55:ed:29:2e:3e:11:e8:
                    d2:16:1c:49:f6:a8:6b:ff:23:b7:e2:8c:fe:0d:1c:
                    62:5e:86:8f:41:c6:3c:01:14:33:20:3f:e3:d7:32:
                    c8:4f:a1:08:5b:8a:7e:09:b2:a3:d1:fa:37:f1:5a:
                    ab:00:27:58:2f:dd:a6:8b:3b:69:9c:16:81:31:59:
                    35:e0:e7:93:db:f2:df:9b:f4:b2:7a:66:9e:fd:36:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:15:BA:22:5C:34:8F:85:F0:89:15:BC:0B:24:11:D6:F9:6E:D0
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:4d:80:9f:04:31:ea:94:fb:f6:93:9e:a8:22:7e:14:60:
         14:f4:23:c3:e2:a1:27:7f:89:79:6c:bd:c1:78:3a:d5:2b:73:
         46:3c:8c:9c:98:2a:ad:c2:e5:97:7c:b1:de:6c:1d:6e:2e:1f:
         61:3c:95:b4:68:e4:6c:40:26:0c:b5:bb:a7:83:d4:a2:72:b8:
         0f:c9:89:40:b9:0e:b6:1a:10:fc:f8:a2:b7:15:fe:a0:9b:23:
         19:da:0e:48:63:9f:38:61:f6:36:08:96:be:8d:d3:14:0f:fc:
         78:3c:33:cc:25:7e:5a:9d:b8:ec:aa:75:ba:85:08:40:dd:63:
         9f:1b:3b:44:92:5f:a4:f7:58:12:b4:0d:9e:75:53:a7:79:d3:
         a6:fa:bb:6c:a4:43:95:b5:d3:c8:77:48:eb:cb:fd:10:7a:ce:
         3b:a2:e3:cc:e2:b6:ab:a5:52:5e:08:a2:37:ca:1d:55:89:de:
         69:2e:7b:17:f6:ca:bb:f5:99:9b:76:2d:2b:f9:45:3d:ad:a5:
         a9:43:f1:a0:f0:b1:3e:2a:d2:75:bd:ee:f4:fc:f1:22:b7:a3:
         c7:08:74:b9:fd:28:66:cf:c0:cf:fc:6c:15:a7:be:31:4d:19:
         7e:45:31:ef:0c:87:07:b1:a2:f4:ad:82:c2:33:b8:e2:2e:01:
         9f:19:38:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdExw30iKDM1txY5dqggiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjUwNDEzMTQwMTEyWhcNMjUwNDE0MTQwMTEyWjAzMTEwLwYDVQQD
EyhhNWQ4MTViYTIyNWMzNDhmODVmMDg5MTViYzBiMjQxMWQ2Zjk2ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H6R4WIBhngFsVz9rRbcqNUFE152
D6P0wZiwzSWbbTi0Z/Mq7b9QWL1d8gxh+iwP6QqxmAtNwpq6EjLiBKOT3dvuOAV0
8NwEXQJzYSp251dM5iMXjQBCqWwdRtSrHJmdP7WbpCf44OXqj2HhZwKMgXQedMOo
vsxgbcIjkBv1WWh+amp33ItoTrxJ/UsShfsQ3ghQVmZiO4lpxFijm8mamogh1D6d
6vpyTngNhFXtKS4+EejSFhxJ9qhr/yO34oz+DRxiXoaPQcY8ARQzID/j1zLIT6EI
W4p+CbKj0fo38VqrACdYL92miztpnBaBMVk14OeT2/Lfm/Syemae/Tb+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXYFboiXDSPhfCJFbwLJBHW+W7QMB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYpNgJ8E
MeqU+/aTnqgifhRgFPQjw+KhJ3+JeWy9wXg61StzRjyMnJgqrcLll3yx3mwdbi4f
YTyVtGjkbEAmDLW7p4PUonK4D8mJQLkOthoQ/PiitxX+oJsjGdoOSGOfOGH2NgiW
vo3TFA/8eDwzzCV+Wp247Kp1uoUIQN1jnxs7RJJfpPdYErQNnnVTp3nTpvq7bKRD
lbXTyHdI68v9EHrOO6LjzOK2q6VSXgiiN8odVYneaS57F/bKu/WZm3YtK/lFPa2l
qUPxoPCxPirSdb3u9PzxIrejxwh0uf0oZs/Az/xsFae+MU0ZfkUx7wyHB7Gi9K2C
wjO44i4Bnxk49Q==
-----END CERTIFICATE-----