Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File:                     W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier:          FCkPF8DJxPRwVqr3affQmiie+pxy3EV134l/cTzJSSc=
Subject key identifier:   C1:95:5E:09:BA:BE:E3:F1:A9:1A:CF:00:69:4E:12:48:A7:E6:4D:10
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer:       /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial:       01962E61E31055874888FE779D39C9DD62F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number:          13E9
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
                          2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: T6/MnU9yEDPcJ1rp6ZSfbH62e7hUXe1uc4yY6fv7DlQ=)
                          3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e3:10:55:87:48:88:fe:77:9d:39:c9:dd:62:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=c1955e09babee3f1a91acf00694e1248a7e64d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:e3:2e:b0:d3:ba:85:91:05:1a:d3:3d:7b:
                    95:d6:66:6a:1e:66:ae:f3:e8:4a:1d:70:bd:d1:a2:
                    55:6e:f2:d6:47:7d:27:a1:5e:fe:5b:83:86:49:cb:
                    9d:ff:65:46:38:3e:24:ae:1b:fe:4f:87:47:20:f4:
                    3e:62:2c:c2:88:5c:30:8d:6c:f3:1c:7b:7f:8f:6b:
                    6f:e5:7c:c2:3c:3b:bc:41:fc:03:8b:e1:4c:86:07:
                    34:3b:e0:52:28:ff:ed:29:69:0a:fa:09:78:73:dd:
                    bc:ae:5a:75:b2:ea:0b:ad:4d:43:fa:51:20:71:d2:
                    5a:e4:92:05:8d:25:6b:90:77:01:d4:f6:24:f4:f0:
                    a2:9e:84:3c:18:d9:1b:93:2c:ab:ee:55:6f:63:b0:
                    6e:42:d9:08:81:04:a0:82:07:af:d6:7f:f0:60:36:
                    48:ba:de:1c:ca:70:8d:da:4c:ba:b3:4b:35:f4:1c:
                    ae:73:0a:63:b7:b0:29:5f:78:3d:34:fb:a9:07:c6:
                    f4:ea:92:05:2a:68:2f:92:20:f4:77:94:fa:0a:2e:
                    3a:4d:c7:94:0a:e9:70:e1:d3:82:23:30:65:b3:82:
                    82:4e:29:30:8f:38:48:0e:b9:eb:b8:c0:25:98:88:
                    ac:58:71:3a:57:a3:66:a9:81:99:3d:8c:3b:a9:30:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:5E:09:BA:BE:E3:F1:A9:1A:CF:00:69:4E:12:48:A7:E6:4D:10
            X509v3 Authority Key Identifier:
                keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:95:48:c8:f0:0a:e1:3d:d6:77:75:67:c4:63:d1:92:62:f7:
         b7:2c:ec:e4:21:ed:49:9e:4f:16:27:d6:a1:b3:14:86:04:a4:
         d8:b2:3b:d7:4f:64:46:c6:05:48:f6:0e:59:3e:c2:c6:0d:5c:
         11:2b:13:58:04:a4:92:3d:46:8e:98:b7:75:6f:37:19:8e:96:
         10:a3:43:76:d2:cd:c2:4a:49:6d:cb:45:84:60:c7:a0:3f:c4:
         02:32:69:e2:9a:34:75:67:1b:58:b1:92:33:d5:ee:5d:1a:0c:
         5e:63:9c:93:14:f8:9e:66:88:6d:1a:30:a8:56:38:87:30:78:
         a0:ed:d1:9c:41:8b:c6:af:b5:c2:27:08:15:e8:b6:ae:8c:41:
         72:12:2e:28:3d:cf:7b:a2:c8:71:01:98:b7:00:63:99:ac:28:
         42:d7:28:56:c9:bf:cf:65:bb:a2:a5:cb:23:b5:b3:67:c7:f5:
         bc:9c:0e:12:55:e6:48:13:94:cf:7a:68:e4:0d:bc:18:29:15:
         60:cf:bc:97:90:1c:40:8c:bb:68:94:e9:f5:a5:0f:fc:a1:ee:
         85:b1:07:9c:bb:06:d6:fa:f5:74:41:2f:b4:97:6c:00:e2:12:
         f4:71:2d:66:77:cd:02:bf:ae:a7:f4:72:6b:c3:35:90:e1:c6:
         b1:d4:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----