Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          foa1+UfeWBzzmVi8GixMmVE9YzCdFjuZSoDimzQiWBs=
Subject key identifier:   46:CE:FF:EC:5A:0A:64:51:5C:8D:72:1D:79:21:D7:A6:5A:83:87:97
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       0194BC3C36BB78C5B0827FB75B1371DFF9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:50 +0000
Files and hashes:         1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
                          2: MrwCb1VshNGuSjy8-ZcrQ_jjBz4.roa (hash: RL8Yc0SUjE/2UAMDk7eU+CcumrO0VbncY+6nMnTALA4=)
                          3: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: +Sp8aE9pYqIdgyX87i+ZWZXGTj9+qi5Yo37sDsuSqx4=)
                          5: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
                          6: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
                          7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
                          8: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (hash: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=)
                          9: txKA05gc1PNEhcuQ9gw4JRL4SOg.roa (hash: ZxoTI5LHLJfIjBc6aAlc7tJn+4E9R4JWht3d4AMJtIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:36:bb:78:c5:b0:82:7f:b7:5b:13:71:df:f9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jan 31 12:00:50 2025 GMT
            Not After : Feb  1 12:00:50 2025 GMT
        Subject: CN=46ceffec5a0a64515c8d721d7921d7a65a838797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:63:dc:55:fd:ed:26:06:78:6a:4b:4c:77:
                    79:a3:ab:db:55:ce:91:de:72:3a:58:3b:d8:6f:80:
                    c6:32:1f:2c:da:ae:3d:a8:c6:87:9c:86:29:24:3e:
                    ad:83:9a:a2:b0:15:13:ca:3d:55:b0:67:89:65:df:
                    72:d6:64:22:10:9f:7d:a7:a1:00:d0:ec:06:3b:4d:
                    12:98:44:91:85:76:68:8d:18:83:eb:30:7d:10:a2:
                    59:80:44:ab:17:5c:13:f8:e5:ca:f5:63:41:6b:ba:
                    7b:89:4f:06:dc:d7:8f:51:c4:c7:67:e5:fb:d9:00:
                    a2:38:e2:fb:b8:de:b3:8e:50:36:27:48:f8:7a:ff:
                    52:78:e2:32:34:6e:31:47:8f:b5:1b:e8:37:8d:22:
                    17:46:77:17:8c:d8:a1:e3:c3:13:7f:9c:07:2e:16:
                    42:7f:08:b3:4b:e9:fb:b2:0e:97:e4:2f:40:ed:e7:
                    ce:0a:9f:11:a4:12:60:29:7a:62:b3:92:fe:12:7a:
                    bd:48:ae:8c:c6:e4:85:97:e3:a8:70:7c:52:03:e5:
                    aa:28:42:ab:1e:4e:6d:7c:c7:31:2e:aa:f7:56:22:
                    cd:79:d2:a5:60:68:fa:99:ee:ef:be:3d:ca:18:0f:
                    c3:c3:f2:2f:ed:c0:45:5f:6c:f2:9e:21:30:1d:0a:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:FF:EC:5A:0A:64:51:5C:8D:72:1D:79:21:D7:A6:5A:83:87:97
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:8d:3b:6c:c4:d2:9c:3f:1b:bb:a2:00:b5:28:93:ee:6d:
         e4:7a:11:b5:d4:21:14:b1:ca:2b:a0:f3:36:fe:51:be:06:0f:
         12:bc:16:fe:f3:44:3a:f8:13:20:ca:0e:f8:f8:3b:90:3e:08:
         fb:87:db:a1:2c:8c:b4:45:fa:5a:46:fe:a2:86:be:d5:9a:f4:
         3a:29:b2:3b:d3:59:d8:5e:7a:a0:be:69:d7:6c:2f:4e:8a:3f:
         c7:0d:e0:ae:e1:c0:dd:39:b5:07:31:9e:dc:e4:b5:13:d7:e4:
         c8:17:3a:d9:4b:97:ef:4f:cc:3b:06:94:9d:55:29:7e:2e:8b:
         3e:aa:35:fc:ea:40:3b:e6:33:62:df:c3:b4:88:88:3c:cd:c3:
         5a:e9:ad:00:96:07:02:21:e3:85:07:cb:ce:fe:a4:b9:e8:9b:
         4e:9c:e5:81:6b:9d:11:5f:b1:27:bc:0a:df:e4:50:6b:e6:ad:
         8a:02:a9:ef:49:20:db:31:1c:e0:e9:ff:36:48:ca:1c:e0:f5:
         72:66:30:99:ec:f8:87:f7:51:5d:52:5e:55:ba:c3:56:a5:18:
         6f:88:70:af:30:95:60:81:67:3a:0c:fc:10:15:7b:9c:e6:36:
         43:44:0d:44:6a:bf:a8:25:42:ef:63:f1:b1:02:54:b3:20:9b:
         9a:59:54:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDa7eMWwgn+3WxNx3/mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjUwMTMxMTIwMDUwWhcNMjUwMjAxMTIwMDUwWjAzMTEwLwYDVQQD
Eyg0NmNlZmZlYzVhMGE2NDUxNWM4ZDcyMWQ3OTIxZDdhNjVhODM4Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0otj3FX97SYGeGpLTHd5o6vbVc6R
3nI6WDvYb4DGMh8s2q49qMaHnIYpJD6tg5qisBUTyj1VsGeJZd9y1mQiEJ99p6EA
0OwGO00SmESRhXZojRiD6zB9EKJZgESrF1wT+OXK9WNBa7p7iU8G3NePUcTHZ+X7
2QCiOOL7uN6zjlA2J0j4ev9SeOIyNG4xR4+1G+g3jSIXRncXjNih48MTf5wHLhZC
fwizS+n7sg6X5C9A7efOCp8RpBJgKXpis5L+Enq9SK6MxuSFl+OocHxSA+WqKEKr
Hk5tfMcxLqr3ViLNedKlYGj6me7vvj3KGA/Dw/Iv7cBFX2zyniEwHQrOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbO/+xaCmRRXI1yHXkh16Zag4eXMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSqNO2zE
0pw/G7uiALUok+5t5HoRtdQhFLHKK6DzNv5RvgYPErwW/vNEOvgTIMoO+Pg7kD4I
+4fboSyMtEX6Wkb+ooa+1Zr0OimyO9NZ2F56oL5p12wvToo/xw3gruHA3Tm1BzGe
3OS1E9fkyBc62UuX70/MOwaUnVUpfi6LPqo1/OpAO+YzYt/DtIiIPM3DWumtAJYH
AiHjhQfLzv6kueibTpzlgWudEV+xJ7wK3+RQa+atigKp70kg2zEc4On/NkjKHOD1
cmYwmez4h/dRXVJeVbrDVqUYb4hwrzCVYIFnOgz8EBV7nOY2Q0QNRGq/qCVC72Px
sQJUsyCbmllU7g==
-----END CERTIFICATE-----