Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          mZZsBEKEuPahgZD/4oGlpLM35WHv7Ni5BWYj26EUZC0=
Subject key identifier:   9A:C7:70:D1:3F:62:78:FB:A6:88:00:57:E1:42:86:D4:FE:8D:4B:7B
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       0195E0469B79E6FE639DC3B172E7E4E44C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          04A2
Signing time:             Sat 29 Mar 2025 05:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:18 +0000
Files and hashes:         1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: whCWySqcThzgVTrSrT1LF53H/kA1puWemviCdYf7GzY=)
                          3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
                          4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:9b:79:e6:fe:63:9d:c3:b1:72:e7:e4:e4:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Mar 29 05:01:18 2025 GMT
            Not After : Mar 30 05:01:18 2025 GMT
        Subject: CN=9ac770d13f6278fba6880057e14286d4fe8d4b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:50:cb:e5:ff:68:53:69:0e:26:22:73:bc:
                    74:a6:76:62:7d:46:64:30:cb:81:c3:c3:93:68:33:
                    49:64:49:72:30:2d:ea:43:07:58:1b:4c:94:3e:46:
                    96:f3:c3:5b:82:8e:8b:fe:8e:2c:08:28:19:c1:f9:
                    89:0f:cd:4a:12:f6:57:75:80:71:8d:b7:27:4f:38:
                    75:a1:ca:29:30:74:86:8c:3c:5a:c2:ff:fd:20:da:
                    a2:f1:58:b7:78:e1:0d:6f:43:79:e4:77:19:2b:4d:
                    1c:62:80:f8:a1:fc:0f:51:36:72:cd:bd:05:e6:a2:
                    c0:e2:89:05:21:bf:29:1b:9b:c3:c8:2f:af:29:dc:
                    9e:3f:d8:4f:0f:f3:c9:66:13:bf:b8:92:3a:79:3b:
                    96:c1:98:f7:6d:8c:e9:cb:1e:ff:c0:cf:6a:9a:24:
                    5e:39:b4:3a:41:36:30:12:ad:ca:41:55:35:a3:e3:
                    f5:b7:32:ee:ab:c9:8d:da:3d:d5:5d:39:07:9b:ec:
                    26:65:d9:df:b0:1d:10:88:3f:58:ba:7e:13:c8:88:
                    36:83:39:c8:6b:50:0a:4d:49:1b:8f:e5:48:56:80:
                    ed:9d:22:d4:b6:43:aa:76:96:7c:ba:bd:ca:90:c9:
                    46:6e:c4:07:42:07:f7:f4:84:4b:32:be:ae:b7:7c:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C7:70:D1:3F:62:78:FB:A6:88:00:57:E1:42:86:D4:FE:8D:4B:7B
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:97:c1:72:91:31:17:96:4e:0e:62:2a:89:61:2a:41:b9:
         53:e8:de:17:8a:5f:3d:eb:5a:42:32:cc:5d:07:76:a2:48:74:
         a7:0a:e7:a2:b4:78:1e:99:30:e4:5e:18:fd:44:06:03:6e:4b:
         13:e1:95:19:ee:8b:38:8a:0b:96:72:f4:26:da:22:fe:24:f3:
         36:fa:31:a9:6a:e4:f7:e7:0b:42:25:f1:eb:a5:24:d6:bd:b3:
         72:9b:27:fe:be:83:73:64:bc:c1:67:7e:48:9b:68:3f:01:05:
         4a:87:3f:f7:2a:cd:95:8a:55:a0:9e:12:00:02:38:47:c5:a9:
         0a:02:29:cb:cf:ae:65:72:95:31:48:d3:81:47:51:dc:75:e9:
         f7:09:cc:27:21:26:b4:ee:67:33:3d:c8:c6:7f:5c:21:04:b5:
         e3:7e:03:cd:00:64:14:b0:51:69:91:1f:78:99:25:7f:01:c0:
         69:40:c9:e2:3f:66:40:a5:ff:1d:18:8d:d6:54:4a:f0:51:3d:
         66:1c:ef:0f:28:4b:31:7b:ea:34:40:22:cb:ef:37:7a:ee:a3:
         cd:1c:71:52:c1:fa:76:44:a3:c8:9c:33:c2:36:c2:89:54:2f:
         ce:26:c8:75:51:5f:4a:16:3d:20:2a:3c:54:72:e5:5c:65:b1:
         8c:7b:d6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRpt55v5jncOxcufk5ExqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl
ZmE1ZGIwHhcNMjUwMzI5MDUwMTE4WhcNMjUwMzMwMDUwMTE4WjAzMTEwLwYDVQQD
Eyg5YWM3NzBkMTNmNjI3OGZiYTY4ODAwNTdlMTQyODZkNGZlOGQ0YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZQy+X/aFNpDiYic7x0pnZifUZk
MMuBw8OTaDNJZElyMC3qQwdYG0yUPkaW88Nbgo6L/o4sCCgZwfmJD81KEvZXdYBx
jbcnTzh1ocopMHSGjDxawv/9INqi8Vi3eOENb0N55HcZK00cYoD4ofwPUTZyzb0F
5qLA4okFIb8pG5vDyC+vKdyeP9hPD/PJZhO/uJI6eTuWwZj3bYzpyx7/wM9qmiRe
ObQ6QTYwEq3KQVU1o+P1tzLuq8mN2j3VXTkHm+wmZdnfsB0QiD9Yun4TyIg2gznI
a1AKTUkbj+VIVoDtnSLUtkOqdpZ8ur3KkMlGbsQHQgf39IRLMr6ut3xUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrHcNE/Ynj7pogAV+FChtT+jUt7MB8GA1UdIwQY
MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt
YjIxN2E2OGNlYWY0LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0
LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHqXwXKR
MReWTg5iKolhKkG5U+jeF4pfPetaQjLMXQd2okh0pwrnorR4Hpkw5F4Y/UQGA25L
E+GVGe6LOIoLlnL0Jtoi/iTzNvoxqWrk9+cLQiXx66Uk1r2zcpsn/r6Dc2S8wWd+
SJtoPwEFSoc/9yrNlYpVoJ4SAAI4R8WpCgIpy8+uZXKVMUjTgUdR3HXp9wnMJyEm
tO5nMz3Ixn9cIQS1434DzQBkFLBRaZEfeJklfwHAaUDJ4j9mQKX/HRiN1lRK8FE9
ZhzvDyhLMXvqNEAiy+83eu6jzRxxUsH6dkSjyJwzwjbCiVQvzibIdVFfShY9ICo8
VHLlXGWxjHvWKw==
-----END CERTIFICATE-----