Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          H9i6dlbvGjP/d8qeb6fzl038EvWiOJ2iNi1fs7mRnMQ=
Subject key identifier:   57:B8:8C:F3:77:B8:5D:EE:81:84:8A:A1:D1:10:F1:64:21:29:45:7A
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       01962E996FE99E781D047EE501D94B073A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          1335
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: 76U6onq9xUj3r7A1NmhyBqKOaabybiU0QRl7yN0aMPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:e9:9e:78:1d:04:7e:e5:01:d9:4b:07:3a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=57b88cf377b85dee81848aa1d110f1642129457a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:1e:9c:0b:a8:86:36:88:c4:62:e7:b9:80:
                    65:55:bb:ec:0c:ec:85:17:75:f5:87:ce:8f:1b:2f:
                    f5:6b:5c:df:9c:e6:5a:bf:75:25:31:79:58:46:b3:
                    98:60:22:f2:4c:99:62:04:01:bd:3b:bf:bc:10:9d:
                    49:e1:08:bd:de:b3:bf:18:1d:5c:2d:2f:d0:e1:1c:
                    38:8d:94:f6:7c:2a:ad:46:0f:3e:02:05:86:25:db:
                    e5:1e:c4:22:b6:9e:76:dd:2e:e6:96:4a:42:ae:f8:
                    a5:ad:28:25:ec:69:77:13:8d:24:3d:ec:b2:94:e6:
                    5e:23:de:a3:4e:fc:30:cd:b2:ec:fe:74:c5:4d:a1:
                    ed:61:f2:7e:3a:66:56:49:de:25:f6:4c:81:18:5b:
                    47:fb:b9:66:4f:df:e3:b3:ef:68:cd:0c:11:34:fd:
                    80:f9:00:56:1e:42:ba:79:70:73:8c:ae:9a:02:a0:
                    cd:03:70:6e:45:3f:c2:24:76:f2:23:4f:c5:72:a1:
                    37:46:84:d3:74:62:ad:cd:bb:3c:5c:40:26:4d:98:
                    be:f2:c9:ff:40:91:15:0a:32:cb:ae:ea:b9:0b:9b:
                    59:ed:cf:3b:18:1f:37:47:d4:c0:ed:70:52:30:bb:
                    7b:45:ba:cd:cc:79:5b:93:72:5c:4e:3c:bd:18:f6:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:8C:F3:77:B8:5D:EE:81:84:8A:A1:D1:10:F1:64:21:29:45:7A
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:3e:ee:11:e5:fb:5f:d5:03:fd:0b:34:3c:e7:06:9e:32:
         66:f4:0c:67:a9:8d:99:09:ec:8c:f9:bd:91:08:49:c6:43:7d:
         da:20:4e:c4:9c:4a:2a:9d:74:58:cd:42:b9:9b:7f:69:10:be:
         bb:27:10:9a:74:eb:bf:f0:1b:7f:31:90:53:a9:7a:35:18:be:
         59:08:ff:97:bf:c6:3e:81:17:69:97:22:75:af:8a:ed:3e:fd:
         08:97:dd:e7:20:ad:2a:d8:db:28:60:27:0c:e7:f1:bd:42:44:
         b9:3e:89:cc:91:df:9f:14:11:12:0e:f1:06:c0:ac:2e:37:69:
         d3:15:4d:84:70:73:c7:a7:0a:64:64:ae:6a:e4:11:ed:5d:1b:
         86:32:ab:a3:bd:83:08:5c:45:a1:85:ea:cb:30:1c:21:4e:24:
         bd:29:03:d8:1d:37:d3:10:45:04:46:3b:33:65:d8:59:47:44:
         b0:99:0f:87:f1:6d:aa:7e:c7:0d:11:e8:d6:4d:60:ce:d8:0a:
         24:e4:9b:d2:47:84:bf:25:c1:8f:9e:9f:96:b4:6e:cb:76:a6:
         61:4b:8e:1b:fa:6e:96:77:0f:a5:01:5b:28:ba:d3:97:46:86:
         82:b2:f5:0c:b2:63:89:09:43:0e:93:21:c5:26:96:40:cb:4d:
         41:55:dc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumW/pnngdBH7lAdlLBzqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOGExNjUyMmVjMzRiMWM1YmM0NzA4MjA2Y2MxOTYzYTE1
YmJkYjEwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
Eyg1N2I4OGNmMzc3Yjg1ZGVlODE4NDhhYTFkMTEwZjE2NDIxMjk0NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfIenAuohjaIxGLnuYBlVbvsDOyF
F3X1h86PGy/1a1zfnOZav3UlMXlYRrOYYCLyTJliBAG9O7+8EJ1J4Qi93rO/GB1c
LS/Q4Rw4jZT2fCqtRg8+AgWGJdvlHsQitp523S7mlkpCrvilrSgl7Gl3E40kPeyy
lOZeI96jTvwwzbLs/nTFTaHtYfJ+OmZWSd4l9kyBGFtH+7lmT9/js+9ozQwRNP2A
+QBWHkK6eXBzjK6aAqDNA3BuRT/CJHbyI0/FcqE3RoTTdGKtzbs8XEAmTZi+8sn/
QJEVCjLLruq5C5tZ7c87GB83R9TA7XBSMLt7RbrNzHlbk3JcTjy9GPbRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe4jPN3uF3ugYSKodEQ8WQhKUV6MB8GA1UdIwQY
MBaAFFuKFlIuw0scW8RwggbMGWOhW72xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQt
Y2FjOGVkNzZhODQ0LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQtY2FjOGVkNzZhODQ0
LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8Q+7hHl
+1/VA/0LNDznBp4yZvQMZ6mNmQnsjPm9kQhJxkN92iBOxJxKKp10WM1CuZt/aRC+
uycQmnTrv/AbfzGQU6l6NRi+WQj/l7/GPoEXaZcida+K7T79CJfd5yCtKtjbKGAn
DOfxvUJEuT6JzJHfnxQREg7xBsCsLjdp0xVNhHBzx6cKZGSuauQR7V0bhjKro72D
CFxFoYXqyzAcIU4kvSkD2B030xBFBEY7M2XYWUdEsJkPh/Ftqn7HDRHo1k1gztgK
JOSb0keEvyXBj56flrRuy3amYUuOG/pulncPpQFbKLrTl0aGgrL1DLJjiQlDDpMh
xSaWQMtNQVXc5w==
-----END CERTIFICATE-----