Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File:                     Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier:          Me9CHkiN7Vv0oUDjXB+ZN9rMO+tdOyHwnIui012Bjso=
Subject key identifier:   99:EF:28:09:F4:4B:D3:54:2E:14:A1:79:2D:5C:4E:76:64:B5:36:B5
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       01962E2AC97FAC630EFB4C18C9CFEE4E4FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=)
                          2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: /9eMBU3Z9kdSHoH0DMYc6nkeoKJAXbPXmDF/LYvVxcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:7f:ac:63:0e:fb:4c:18:c9:cf:ee:4e:4f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=99ef2809f44bd3542e14a1792d5c4e7664b536b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:f8:bb:bc:65:1e:8f:ac:b9:b0:10:09:4c:
                    1f:21:67:d3:b7:4d:d4:9e:14:b2:ab:38:1f:6e:05:
                    f7:94:b8:48:19:95:3f:f2:29:12:01:2a:09:0b:e3:
                    8b:c8:53:77:70:5c:79:22:b5:7a:1d:11:7d:a5:2a:
                    0f:97:3c:db:04:15:9a:5f:9a:93:0b:64:7d:7a:2e:
                    04:8a:ac:d9:6b:fb:21:84:d2:58:c8:d4:89:16:52:
                    1c:83:99:d7:62:92:76:fd:4e:4f:83:94:eb:c4:2b:
                    0c:66:0b:3d:77:b5:35:6f:1c:05:85:dd:1b:f0:09:
                    05:77:e2:5a:82:ee:ec:41:b0:64:ae:f0:90:9a:cd:
                    3d:b3:eb:87:67:ad:12:11:2b:9c:27:46:9a:bd:e4:
                    ab:23:c7:d5:5d:97:75:d3:53:7f:7d:0c:34:6b:a9:
                    09:cd:0f:08:21:5e:01:a9:67:23:0f:b4:07:7d:a9:
                    91:4c:0e:e9:fe:2d:95:27:d6:65:ec:19:d8:60:c8:
                    42:6f:74:33:c8:24:e4:95:a7:1f:4c:77:ff:1c:96:
                    ec:8b:16:43:dd:a4:c4:76:7a:fa:a8:dc:78:12:ef:
                    ab:b9:c1:30:b9:3d:24:b8:b0:53:19:b0:be:d1:16:
                    3e:10:84:45:51:85:c1:8c:54:8f:e6:0c:84:9e:1a:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EF:28:09:F4:4B:D3:54:2E:14:A1:79:2D:5C:4E:76:64:B5:36:B5
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:dd:fe:44:cc:bb:7d:aa:5a:06:d8:de:1a:09:62:7e:fd:
         d1:2d:f2:53:4b:b2:39:88:e0:8a:4d:47:a0:2d:f0:ad:92:c4:
         8f:2e:36:e4:35:11:f0:27:10:b8:41:5d:48:68:c7:d7:5b:18:
         87:33:c1:c6:32:0b:c1:63:00:27:7f:5d:0e:77:8d:a9:4c:47:
         26:f0:80:46:db:68:15:58:33:99:00:27:b6:2b:6a:eb:a0:b1:
         06:76:4e:24:3c:a1:55:3d:76:27:4d:7f:5f:38:a4:0e:ac:4e:
         51:0e:01:21:01:9d:87:45:4e:ab:4f:09:d2:76:30:4f:46:a5:
         14:93:d7:2b:ac:61:75:33:a7:03:7c:41:c2:f0:bc:3b:c6:84:
         50:f3:19:5e:d8:55:ab:20:4e:6b:ee:d0:13:ad:1f:0d:cb:15:
         fd:d7:c9:a8:25:93:d4:8b:1f:89:e4:b0:d5:5b:f6:02:9e:b2:
         18:eb:9a:15:50:75:87:55:66:c8:c7:d8:26:01:ca:7d:7f:4e:
         41:d3:73:57:1c:ca:52:96:e3:07:bb:bf:e4:c0:c6:6e:fa:f5:
         c2:d1:6b:4c:06:d3:41:90:84:38:ed:be:0c:0d:61:a4:e2:47:
         f8:21:f1:f6:ed:c7:bf:a9:d9:37:36:96:75:58:b8:da:a8:5d:
         e1:83:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----