Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
File:                     Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft (raw, json)
Hash identifier:          D63u+SlZvYwPRUrOVuArtpfagHWs9JQCmQr82qqwxFg=
Subject key identifier:   EE:90:7F:39:8A:03:F4:1E:04:5F:63:2D:10:F3:F8:D4:42:7E:79:76
Authority key identifier: 5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B
Certificate issuer:       /CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
Certificate serial:       01962F06EA7DE204E1B32CCB14FDA34F2164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl (hash: bwCTDxKuq9WfkpYsYiZPgzuwe2iOIMNZ9WlvW1n9Aoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ea:7d:e2:04:e1:b3:2c:cb:14:fd:a3:4f:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=ee907f398a03f41e045f632d10f3f8d4427e7976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:8f:36:b4:a7:32:57:0c:99:86:3b:59:ca:
                    e4:ef:23:32:ad:b0:92:1c:d6:bd:7e:de:09:4f:75:
                    f3:94:db:f6:e9:78:9f:8e:22:81:08:bc:01:8d:b4:
                    82:9d:b0:65:84:62:8b:6b:ac:0d:d0:2e:d2:30:9d:
                    70:24:e5:17:4c:11:32:57:4a:35:17:8c:83:b3:ff:
                    6b:69:a7:35:9c:57:6c:76:7e:e9:2a:c2:5e:75:5b:
                    36:5e:1a:07:5a:5d:c7:68:ea:0d:e5:8a:83:10:0c:
                    eb:c6:d8:a0:b9:d4:b3:40:25:ab:d5:59:1c:21:a9:
                    3c:a1:6a:d8:23:38:79:89:c5:cf:e6:af:5b:43:81:
                    2f:a1:70:dd:03:75:cb:e8:00:5c:fe:17:30:75:94:
                    a0:29:ae:c5:f2:2f:8d:fe:3e:69:5f:8b:58:bd:18:
                    f1:08:70:36:f1:e5:43:bd:eb:28:91:a5:46:ea:6e:
                    d8:50:f5:9d:7c:db:9f:54:77:df:7c:92:d1:e1:04:
                    27:6c:e3:52:b2:e2:7d:fb:d0:77:62:94:4b:0b:63:
                    ea:4e:c2:4b:97:fa:07:da:95:6e:68:5b:dc:3f:bf:
                    c4:95:86:50:93:6d:98:45:f8:e5:d0:9d:3b:3b:ad:
                    7f:e9:73:1f:f7:3e:6b:ce:94:1a:e2:a1:7a:80:c7:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:7F:39:8A:03:F4:1E:04:5F:63:2D:10:F3:F8:D4:42:7E:79:76
            X509v3 Authority Key Identifier:
                keyid:5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:29:56:de:19:b8:51:d9:94:60:51:54:d2:a6:58:1c:3f:e8:
         3c:c4:ea:9b:da:78:e1:2e:bf:54:b3:88:c0:02:03:8a:8a:3a:
         c4:81:6f:89:ed:71:25:bb:6b:dc:10:fd:5f:12:fb:39:c4:32:
         1d:d2:e1:34:53:ad:14:63:90:ca:3b:ae:ff:72:ea:3b:e1:de:
         48:f9:a5:f7:e1:03:3a:bd:e1:4d:3c:1a:2b:c7:96:f5:16:6f:
         4f:66:ee:9d:c1:e6:1f:e9:1f:37:0f:15:bb:5f:9f:7f:52:e3:
         16:c1:6a:46:cf:98:87:fc:53:9b:32:eb:c0:d7:13:2a:06:e9:
         65:a0:01:51:6f:c4:c7:32:5a:a5:e8:c4:4b:3c:40:c7:3e:35:
         8a:a6:e2:d3:cb:67:50:39:45:5c:e4:cb:3c:f2:f9:53:cf:74:
         fb:07:ec:75:1d:bd:2f:06:e3:1c:98:36:78:d5:8d:fc:d5:e2:
         d0:1e:49:25:c8:40:c3:a5:4b:b8:c3:9c:9b:d2:52:c5:bc:47:
         4b:0e:00:b1:4e:ac:7c:be:30:f7:9f:32:a8:14:2e:a6:22:62:
         40:e7:a9:8c:cf:86:7b:b8:ba:84:d8:17:d1:b3:cc:96:95:03:
         9c:24:cb:81:85:a8:e4:1d:b1:31:c1:fd:3d:b8:bb:ff:0b:a4:
         4b:e7:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----