Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File:                     W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier:          y5M7cdtyaHx6nwR2JMkvIadFMJjX1IGQ8W5kukD3yYs=
Subject key identifier:   9C:04:1F:DB:40:3C:78:61:B9:EB:5B:7F:5B:BB:25:8E:28:03:DE:12
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer:       /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial:       01962F74F006F98C4289A28167EE3A203D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number:          1109
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
                          2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: BapKxSt2RYI5q45f7QrCWPRam9ERYWwCoCOVgUeVbsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f0:06:f9:8c:42:89:a2:81:67:ee:3a:20:3d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=9c041fdb403c7861b9eb5b7f5bbb258e2803de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:31:24:15:64:74:00:5c:5f:d8:e9:59:c6:
                    7b:1e:f4:8b:9e:2d:6b:d7:6c:e9:86:64:79:ed:b2:
                    ff:88:55:83:b6:94:6e:51:f3:7d:79:d7:d6:3c:75:
                    45:8f:fe:7c:7a:ef:87:1e:8f:4c:d2:96:bf:ba:a8:
                    94:60:6b:f1:cb:09:97:cf:9d:32:63:9c:ad:23:24:
                    5a:99:fc:ea:70:c1:c2:58:28:ed:be:73:37:97:50:
                    0a:4c:1f:bc:47:bc:4d:f4:60:d4:b7:82:58:67:20:
                    46:27:a5:4c:74:eb:c0:a3:b8:3d:e2:75:9f:d0:18:
                    78:18:3d:44:5a:7f:92:fa:c5:a8:14:c4:08:37:78:
                    e7:55:99:23:13:21:49:3a:97:fb:13:48:3f:e6:fa:
                    29:10:9c:e4:87:86:10:0f:8f:ac:6f:f0:33:f3:16:
                    47:53:15:c4:6b:c6:f0:e3:40:18:d6:29:a6:88:e1:
                    03:4e:02:92:c0:52:53:71:8c:56:11:15:ac:21:dc:
                    bc:ce:24:71:af:f4:3c:67:4a:d7:05:eb:16:b6:59:
                    db:61:21:fd:1d:4d:ce:a5:c1:9b:89:10:44:5c:30:
                    36:bc:7c:f9:da:11:dd:0a:0e:09:4c:fc:83:16:b5:
                    bd:15:89:a5:bb:ad:e1:7b:1d:fc:94:7b:3d:21:a0:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:1F:DB:40:3C:78:61:B9:EB:5B:7F:5B:BB:25:8E:28:03:DE:12
            X509v3 Authority Key Identifier:
                keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:0d:e5:7f:8c:3f:90:59:4e:ba:f8:ab:05:fd:bf:b3:59:
         c4:9c:88:42:16:bb:3d:d5:87:05:d7:90:fa:c5:e3:f8:08:ec:
         3a:ed:cc:5f:b8:36:c7:ec:90:f0:1d:f1:77:11:96:31:c6:01:
         a9:cf:63:72:3d:82:19:63:4c:d8:7b:7c:d3:f3:16:fb:14:3b:
         96:6c:35:cf:13:5b:2a:a9:9d:08:c2:b4:52:49:05:b2:0e:50:
         3e:ea:fb:f3:92:6c:04:71:c9:59:a7:d9:f2:fc:4c:b8:fe:4b:
         7d:71:62:a0:05:94:2e:c2:e2:a9:19:40:c9:65:9d:9b:63:c3:
         1e:e7:56:37:06:72:7a:fc:24:f6:86:e4:d2:2f:f2:7b:c4:d8:
         f8:d1:a7:32:03:94:18:e1:a0:6c:fa:e3:d4:9a:c0:88:7e:fb:
         e2:a1:56:9b:7c:ed:23:a0:08:8a:a9:a1:12:87:ae:1b:b0:09:
         9b:ab:96:f5:02:f1:29:2d:09:76:e1:c0:6d:22:46:aa:c0:c4:
         83:fe:2d:e0:5d:4b:69:a4:38:e7:a2:bf:d4:92:75:15:16:02:
         6e:42:94:71:fe:e9:87:d9:ec:1f:33:99:a3:8b:b3:48:c6:d7:
         f9:b1:93:3d:6c:ac:f5:2f:70:19:66:54:3b:23:db:b8:80:a4:
         54:11:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----