Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
File:                     _WWGk-wyfq1P6DpXuCYBzCVSqr0.mft (raw, json)
Hash identifier:          RgkbLfACw85Su4uBNUGwAsOPD2fow04aODCeFomuzHw=
Subject key identifier:   D9:76:70:E1:0C:22:96:E4:8C:3B:1D:5E:5A:90:9A:68:64:76:01:4A
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Certificate issuer:       /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial:       01962E98E200A62C38FE2D90D458556F40E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
Manifest number:          04B5
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: G42ckstKb-ubKY07LPZzjX8vOm4.roa (hash: DcUBBQM4AgPddgy39mvsGVunPNK2vS9jB8dnqEwQEpo=)
                          2: _WWGk-wyfq1P6DpXuCYBzCVSqr0.crl (hash: ohfE1WrIDjLm3g8IcQ286Tq1v7CX611gPTqZMUXf9sA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:00:a6:2c:38:fe:2d:90:d4:58:55:6f:40:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=d97670e10c2296e48c3b1d5e5a909a686476014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:e1:1c:60:8e:df:b9:75:ec:75:09:a6:a5:
                    6d:ab:6d:2a:09:55:a6:26:8b:4f:45:90:14:27:17:
                    be:01:f2:bb:29:e3:2f:16:0d:ae:b6:62:11:ee:68:
                    76:a0:3a:5f:aa:7e:6c:a0:b1:01:3c:08:fc:15:be:
                    26:33:9a:2f:8e:8d:d3:e2:d8:ad:02:bc:d0:4f:da:
                    24:2c:b5:6d:6e:6b:61:71:90:fb:3a:1f:0e:1e:7d:
                    53:47:c6:f2:fc:52:31:ec:26:0e:7a:93:66:ff:bd:
                    80:a1:e3:69:9b:b9:b4:54:3c:f7:37:94:5b:16:d4:
                    15:54:06:83:58:4d:69:f2:d9:19:8e:78:93:88:4a:
                    31:2e:c1:46:ab:cc:a4:ce:e4:dc:61:8d:6b:b7:16:
                    2f:ae:6c:c6:bd:f8:ff:bb:e5:35:35:9b:5c:97:b0:
                    eb:b4:0b:a4:ec:d8:7b:c3:0e:6d:a8:df:bc:f9:f1:
                    40:94:98:ea:24:86:bb:9c:83:9e:d1:38:c1:0c:65:
                    e0:fd:18:69:bc:28:31:99:d3:f0:57:8b:d1:4f:32:
                    11:2b:61:5f:9a:c9:fa:e9:20:8b:90:c9:5b:67:4b:
                    8c:37:76:93:42:44:e7:ad:db:cd:52:ba:c9:9d:53:
                    a2:3d:15:e2:b6:0c:49:0a:1b:61:68:b5:31:1f:63:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:76:70:E1:0C:22:96:E4:8C:3B:1D:5E:5A:90:9A:68:64:76:01:4A
            X509v3 Authority Key Identifier:
                keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:44:60:70:66:c6:f6:30:e7:74:e3:23:a5:97:36:10:28:5e:
         53:81:4d:29:40:3d:bc:fe:46:f3:86:71:df:fd:21:bf:e8:48:
         45:9c:1f:56:73:f0:c5:88:75:d0:72:69:77:de:db:f0:c9:8d:
         45:6a:6c:5a:1a:62:19:8e:57:f9:ad:22:ed:a8:d2:ff:9c:c1:
         dc:73:6b:49:54:59:71:86:e2:22:b3:d3:1e:83:2e:c2:0a:87:
         7a:70:07:f3:87:12:f8:b3:c8:64:8a:88:b2:d8:33:7f:f1:da:
         a4:2e:33:f1:0e:e7:70:ef:af:47:1f:09:b1:ef:d6:bf:3b:73:
         5f:42:fb:35:5f:1a:9b:22:ec:8a:95:33:9a:f8:c5:8b:ea:dc:
         43:4b:1e:4b:ba:fc:77:9d:a8:87:30:5c:c4:da:c1:bc:4a:74:
         8f:a0:5d:4f:78:9c:75:67:45:ef:94:1b:8d:a2:5f:9d:48:90:
         a5:f9:9d:92:6d:d6:d7:fd:d8:5c:62:66:02:0a:a9:62:b2:2b:
         ec:d4:7e:ff:d8:f8:0d:39:ba:69:90:d1:b2:23:87:49:f2:f7:
         05:f0:29:b9:42:4e:e3:ef:39:64:cc:5e:16:b2:6e:2d:39:05:
         3c:2a:7c:ca:c1:7f:cc:97:41:d7:f1:99:a1:e6:37:c2:a8:e8:
         e9:1f:d7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOIApiw4/i2Q1FhVb0DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjU4NjkzZWMzMjdlYWQ0ZmU4M2E1N2I4MjYwMWNjMjU1
MmFhYmQwHhcNMjUwNDEzMTAwMTMzWhcNMjUwNDE0MTAwMTMzWjAzMTEwLwYDVQQD
EyhkOTc2NzBlMTBjMjI5NmU0OGMzYjFkNWU1YTkwOWE2ODY0NzYwMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rnhHGCO37l17HUJpqVtq20qCVWm
JotPRZAUJxe+AfK7KeMvFg2utmIR7mh2oDpfqn5soLEBPAj8Fb4mM5ovjo3T4tit
ArzQT9okLLVtbmthcZD7Oh8OHn1TR8by/FIx7CYOepNm/72AoeNpm7m0VDz3N5Rb
FtQVVAaDWE1p8tkZjniTiEoxLsFGq8ykzuTcYY1rtxYvrmzGvfj/u+U1NZtcl7Dr
tAuk7Nh7ww5tqN+8+fFAlJjqJIa7nIOe0TjBDGXg/RhpvCgxmdPwV4vRTzIRK2Ff
msn66SCLkMlbZ0uMN3aTQkTnrdvNUrrJnVOiPRXitgxJChthaLUxH2Nw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl2cOEMIpbkjDsdXlqQmmhkdgFKMB8GA1UdIwQY
MBaAFP1lhpPsMn6tT+g6V7gmAcwlUqq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dXR2std3lmcTFQNkRwWHVDWUJ6Q1ZTcXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wNzVkMmYtNDZiZC00YmRlLTk4MzUt
OTVmZjVjNWRiYjUwLzEvX1dXR2std3lmcTFQNkRwWHVDWUJ6Q1ZTcXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wNzVkMmYtNDZiZC00YmRlLTk4MzUtOTVmZjVjNWRiYjUw
LzEvX1dXR2std3lmcTFQNkRwWHVDWUJ6Q1ZTcXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0RgcGbG
9jDndOMjpZc2ECheU4FNKUA9vP5G84Zx3/0hv+hIRZwfVnPwxYh10HJpd97b8MmN
RWpsWhpiGY5X+a0i7ajS/5zB3HNrSVRZcYbiIrPTHoMuwgqHenAH84cS+LPIZIqI
stgzf/HapC4z8Q7ncO+vRx8Jse/WvztzX0L7NV8amyLsipUzmvjFi+rcQ0seS7r8
d52ohzBcxNrBvEp0j6BdT3icdWdF75QbjaJfnUiQpfmdkm3W1/3YXGJmAgqpYrIr
7NR+/9j4DTm6aZDRsiOHSfL3BfApuUJO4+85ZMxeFrJuLTkFPCp8ysF/zJdB1/GZ
oeY3wqjo6R/XNA==
-----END CERTIFICATE-----