Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File:                     wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier:          jlorJaAKdIYgvoYfaffz2qvWVC7gysT5C52pL4srRXQ=
Subject key identifier:   4E:12:11:22:3C:32:07:59:42:82:D6:2B:C8:ED:2A:5C:C6:86:C9:1E
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer:       /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial:       01962E61BADAD8152867D9A6D41F5D55262A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: V--AvBDy8CKLSulHA8-MpxkBUSk.roa (hash: 4mujn1g+vPNyUt+JT8wCWk11qrPBifj0bVJGlCn3/10=)
                          2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: 7cr0LmxVUj8qqbR9Zy5RHSztsU1qM7EPZo2oHylH5/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ba:da:d8:15:28:67:d9:a6:d4:1f:5d:55:26:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=4e1211223c3207594282d62bc8ed2a5cc686c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:a9:d4:fc:28:5f:7e:2a:81:bd:60:c7:39:
                    0d:f6:8c:81:f4:5b:14:bc:05:fd:8f:6b:2a:29:b5:
                    7a:3f:6e:78:fa:9d:7d:f2:18:94:56:e2:72:a5:4a:
                    e8:cd:6a:37:60:98:92:d5:11:f6:3e:34:ff:a4:a8:
                    ea:36:e0:da:bc:f4:a7:98:b7:33:99:e8:61:75:c1:
                    25:02:f1:bd:4b:05:3c:a9:ca:7c:96:e0:29:51:26:
                    59:ab:bf:90:e3:52:ad:fd:9c:74:fc:ec:e4:5f:7f:
                    80:5e:38:8d:1f:b6:0d:ba:3b:88:cf:c0:c6:bb:9b:
                    64:2c:eb:86:cb:7c:e5:bb:88:f8:97:f4:d1:b3:d5:
                    ff:65:9d:e7:76:d5:34:73:8d:0b:ac:9d:ef:62:4e:
                    ad:bf:12:94:52:11:d6:bc:ba:69:2b:b2:82:40:e9:
                    28:fe:99:fa:8f:86:c0:ea:04:a9:56:f3:95:3a:b3:
                    9c:80:fe:f3:9f:89:18:10:e1:bf:66:ec:a7:96:30:
                    5f:41:2d:fe:d8:ce:00:0c:81:2b:82:89:a7:71:da:
                    23:ac:f1:78:3b:d7:ec:7c:be:bd:44:9e:12:8b:f2:
                    47:55:ac:25:65:db:62:b0:5f:18:0b:47:e9:c8:ff:
                    ee:18:35:89:ca:b1:15:2c:c7:3f:f7:25:98:28:1c:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:12:11:22:3C:32:07:59:42:82:D6:2B:C8:ED:2A:5C:C6:86:C9:1E
            X509v3 Authority Key Identifier:
                keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9c:5d:68:97:dd:3d:cd:d4:5f:b3:eb:d9:44:8c:da:5f:63:
         75:c6:64:64:1e:31:dd:03:8a:f1:df:42:cd:fb:b0:8a:2d:b7:
         82:01:3e:66:84:69:66:2a:8e:a3:8f:36:3f:67:99:7c:35:ae:
         97:e2:02:67:00:3e:07:9f:85:a7:6f:6c:24:b9:d2:8b:4e:88:
         b4:b6:25:37:6f:36:0f:a0:76:8a:12:b3:5a:32:24:94:90:af:
         c1:bb:1f:b6:19:d7:86:9e:18:e3:bf:9f:09:9f:1f:13:09:d7:
         0b:7d:fe:10:30:2d:7f:b7:e3:cc:20:1b:97:81:38:05:cb:f4:
         15:aa:eb:1b:45:af:5e:19:05:4b:fe:b7:9c:ff:4d:5c:13:ca:
         72:aa:5a:40:bb:ea:a6:2e:3a:cd:60:64:a5:7a:99:4c:2e:7f:
         c4:5f:3b:3e:86:be:fa:b7:9a:66:a7:c5:0b:2e:1b:2a:00:d5:
         de:3b:a5:4c:c4:d2:e9:44:5d:46:d8:51:65:9b:91:5d:db:b3:
         06:e2:29:d2:c7:88:e0:1a:2f:1c:20:54:e3:49:60:6e:23:25:
         19:10:3f:30:1c:f7:e3:8e:98:21:89:9e:5f:e7:09:24:5f:7c:
         c4:fd:1b:9d:ea:75:44:32:60:97:54:c6:63:65:1b:8e:26:a2:
         44:62:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----