Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          wUj8OQTqV0pEVGXkY6Fq2mbniH++hd6OuyvHJAVO4UQ=
Subject key identifier:   25:44:86:1A:38:58:2E:9D:9E:74:FD:CC:D1:66:89:3B:BA:51:FC:42
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       01962E2B0D84F870E0B57D0046BA47CB3558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0A0C
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: THjGQAeNJPBtPCUTy4-J94YQkPc.roa (hash: F+YBL5AUhg2W6omBaT2Kp3w7xlj8utNYDQNQuh7FdXU=)
                          2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: UkTtz2ndom8xhIAC140SJj41+OaUdktlEV27+fK0bVE=)
                          3: bHWPrUheTISW_XZwqIKxaRaFivE.roa (hash: ek7H7pyvxLeP4/K0w5pzvcUQRE5xOhHM0k+4ZCxv0OA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:84:f8:70:e0:b5:7d:00:46:ba:47:cb:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=2544861a38582e9d9e74fdccd166893bba51fc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:0e:0a:82:65:7c:fe:40:59:ec:b3:fd:82:
                    3e:66:0d:cc:9e:c4:1b:65:57:1d:1d:b3:4c:05:72:
                    97:c3:f1:e5:8d:0f:7a:47:f2:42:56:85:02:b1:46:
                    71:4c:2a:19:6d:c4:14:72:c0:c9:1e:8a:96:a6:b2:
                    64:90:43:4f:6f:e5:ca:f1:43:35:74:13:bc:d2:ff:
                    3d:dc:e9:de:a5:ef:3d:db:71:4a:ea:f8:53:be:29:
                    09:37:1e:b5:83:a5:b2:7c:b2:68:ab:31:ea:50:88:
                    87:f4:38:ab:c3:f5:c6:fe:85:b5:a5:d3:c0:76:5d:
                    36:ad:ac:12:e0:bd:e8:cd:25:2c:76:66:21:c9:a6:
                    d5:e5:ef:04:af:80:40:73:99:5e:6a:da:9d:64:0e:
                    58:c8:99:78:cc:5f:b2:7d:7c:df:c4:c3:59:a2:a2:
                    73:83:da:5e:58:89:a9:e0:eb:a9:a4:86:46:df:1f:
                    e1:95:26:68:df:5f:04:f8:c8:e7:d0:d5:70:df:65:
                    d2:49:b6:5b:69:a7:63:32:f6:d2:5f:11:98:fd:8f:
                    5f:db:79:c8:96:33:df:6a:38:a1:bc:38:5c:ee:49:
                    f7:3b:9a:60:d2:53:80:85:e4:66:d5:8b:bf:ec:45:
                    ba:70:13:df:a5:93:13:72:1e:01:16:37:a9:61:07:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:86:1A:38:58:2E:9D:9E:74:FD:CC:D1:66:89:3B:BA:51:FC:42
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:9c:6c:d5:a9:2c:df:bb:a2:79:18:8d:c7:c2:73:2d:10:
         38:be:44:25:ac:ee:e2:ba:b6:1d:11:c3:fc:97:1f:0e:00:7c:
         db:f2:d1:71:38:75:e4:bd:b4:c8:2c:e6:7c:33:58:3f:9c:5b:
         33:51:db:7a:e0:7e:3c:12:0c:6a:ee:69:3a:59:e8:11:e1:cd:
         2d:55:fe:05:fb:84:18:a1:9d:44:b3:94:5c:06:73:72:f5:e4:
         e3:a5:15:dc:95:af:75:f7:4e:8b:0d:89:fd:6e:0d:d3:9d:7e:
         55:41:7e:f3:9e:70:e9:67:19:ae:00:c7:6e:82:60:2f:71:53:
         76:f2:d6:aa:22:8a:2f:42:6e:f2:d8:1f:9e:c9:05:fe:28:6a:
         93:b3:ab:63:d5:52:aa:75:3b:e6:52:39:fe:97:ad:e3:d9:1d:
         50:ac:d1:a4:c3:12:32:30:79:c6:05:1c:06:46:d8:aa:56:48:
         69:83:77:74:8f:a7:3a:0b:ca:21:b0:52:7b:8d:2b:f9:96:36:
         8a:df:8b:47:b1:f5:d5:82:c5:19:37:f5:90:89:b9:6b:c1:f9:
         1e:e7:33:a9:47:ab:91:e1:de:15:e9:3b:e5:f7:1a:60:51:13:
         39:0b:01:14:ec:13:da:13:81:db:df:52:07:18:15:da:d6:6b:
         c7:f1:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----