Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File:                     WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier:          nAIxz8MyR1Fxw81O4cx/6oWTOvm7Z2LejRPmSDCbZxk=
Subject key identifier:   26:8A:3E:90:FB:5B:7E:43:E3:0F:EC:EC:F6:66:6A:79:76:50:ED:F0
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer:       /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial:       01962ECFDAAEDE7895661699055BA4E0814C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number:          0A85
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: /yj9aAPAbAdEOHJX9TRU4PkPKC2/a65/ybzJgctGYSM=)
                          2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
                          3: xlkkoDtcxpoL9470SYUwdesBd0U.roa (hash: E5i1JoD4+1v4NgDajZkbyhzpzTtWx/xCOYZCaaoJ38U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:ae:de:78:95:66:16:99:05:5b:a4:e0:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=268a3e90fb5b7e43e30fececf6666a797650edf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:1d:47:e5:d2:d8:6c:93:99:d2:27:02:f7:
                    4c:5a:4f:32:bd:9f:51:dd:9b:16:ea:b3:ad:14:cd:
                    16:bf:b3:a1:71:22:f3:8f:13:52:dd:90:97:2d:ed:
                    05:c7:a3:01:b6:85:4c:81:f0:14:a4:7d:e0:31:9b:
                    44:d7:d1:44:ae:be:c1:7f:53:fa:66:2f:5e:09:f8:
                    f5:2e:44:4c:62:cd:ce:80:d8:6c:97:ad:ab:e0:23:
                    9e:52:40:08:66:23:1c:22:3b:a4:44:7d:ed:5c:e9:
                    78:5f:13:89:90:b1:71:1f:83:23:cc:6e:5a:84:3c:
                    df:a8:28:70:de:6b:6e:71:65:f6:07:4c:7b:d4:22:
                    09:bc:99:bf:42:72:01:25:cd:33:b7:d0:0e:a9:cd:
                    22:9d:da:5e:d7:46:e1:ef:89:e0:cf:41:f0:5b:6e:
                    13:6f:ad:1a:72:0d:fc:1b:b3:02:bc:c5:34:2d:7d:
                    50:1e:61:42:77:f2:de:48:cd:85:1c:1e:75:0c:91:
                    df:06:8c:b3:f0:1c:62:84:31:15:24:a8:7d:24:92:
                    79:ee:3f:f7:6f:b0:76:3f:c9:3e:01:20:1f:e4:25:
                    9e:41:95:82:ed:5e:a0:6c:e3:5a:21:ed:5b:63:95:
                    cf:1a:bd:90:a4:a2:0f:b2:93:6d:2b:c1:9f:99:cc:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:3E:90:FB:5B:7E:43:E3:0F:EC:EC:F6:66:6A:79:76:50:ED:F0
            X509v3 Authority Key Identifier:
                keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:30:fd:83:89:5f:1a:53:9f:7c:fc:0e:a2:c1:c0:d7:1c:42:
         4d:92:3c:16:68:4f:ee:b8:62:cc:ef:68:69:c6:f1:22:0b:46:
         cc:80:c0:66:21:bd:ba:1c:01:05:f9:b3:31:e3:56:ac:66:cc:
         ce:0b:10:db:03:c1:e3:af:68:fd:b0:0d:f9:87:06:87:da:fe:
         12:58:c7:dd:b8:c4:a8:76:a1:e7:35:c7:9e:ea:92:57:df:c7:
         3e:0e:58:2a:bb:97:cb:dc:0a:f5:9c:43:9c:79:60:38:b7:8d:
         a2:8d:dc:57:62:74:23:fe:b2:0a:96:83:e6:ba:43:1f:3d:9e:
         dd:86:cf:42:dc:a5:e3:e8:5f:cc:f0:75:cc:39:7e:28:74:cd:
         dd:30:cc:28:a9:f5:15:53:ae:cf:32:f8:fa:35:2a:c2:d2:a7:
         00:ce:98:f2:62:11:36:c3:a0:03:3e:7a:37:c9:74:fe:8d:4d:
         88:76:f9:31:6d:ae:3e:3e:da:77:40:e5:59:b0:88:57:69:29:
         ef:13:92:26:46:4a:65:af:6b:67:84:72:1d:de:e6:df:2b:df:
         32:10:4c:89:51:fa:aa:8c:f6:24:f5:89:a7:a6:9d:a9:3e:73:
         a0:69:d4:fd:60:91:4f:65:9e:33:92:1a:0a:10:71:0a:e0:ac:
         18:a2:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----