Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File:                     wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier:          CvGJa69Wd/z+8iHzrbjjYPbfw7i1MEJy0UtLuoe1ags=
Subject key identifier:   04:41:A1:F6:CD:02:CE:77:43:A8:06:06:BA:3D:69:31:A4:5B:5A:55
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer:       /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial:       01962F0718CC9E0ABC8FB96646E176C45B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number:          125F
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: T/McnO3l+Wa0j68c/dLnFQdd3VGrF2e7rfo+0GvN9CI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:cc:9e:0a:bc:8f:b9:66:46:e1:76:c4:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=0441a1f6cd02ce7743a80606ba3d6931a45b5a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:a7:bd:1d:c7:81:4b:7f:ba:b5:31:88:9b:
                    df:a8:b4:76:5c:8b:d1:77:4f:75:af:fd:e6:66:66:
                    82:1b:9d:13:40:7b:98:1b:88:92:fb:e1:e4:ab:20:
                    37:e5:88:80:45:c8:76:81:ff:59:af:05:6c:0d:46:
                    08:ed:a4:31:43:04:2a:db:12:b8:11:af:60:9d:1c:
                    50:ec:0d:6d:c4:ff:ef:af:39:21:57:4e:84:ad:85:
                    23:68:db:9e:d3:8c:be:8c:ac:fd:96:7c:85:bb:ee:
                    06:55:ee:a1:06:43:06:ab:d2:96:07:90:65:4e:7e:
                    12:46:01:a5:b8:67:99:39:e4:be:f9:df:41:9c:75:
                    a2:4f:b8:75:0c:3f:94:e0:18:92:36:b1:31:d4:d4:
                    aa:59:88:18:0d:cf:7c:ec:00:cd:46:ac:9d:30:45:
                    11:34:c6:40:c4:27:41:e2:ea:f2:d2:89:65:1f:49:
                    89:8e:66:d4:76:74:57:de:fb:8b:30:a5:dc:a1:c9:
                    86:d1:bd:a9:68:b1:f5:c4:21:e1:f2:52:1b:03:69:
                    41:74:e8:88:0e:5f:c2:40:1d:12:64:7f:24:f4:db:
                    f3:a9:be:03:05:4a:4b:98:89:de:92:21:45:fd:24:
                    57:10:66:c6:ea:54:c7:61:95:4d:c9:e0:3a:db:4f:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:A1:F6:CD:02:CE:77:43:A8:06:06:BA:3D:69:31:A4:5B:5A:55
            X509v3 Authority Key Identifier:
                keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:74:44:ff:4c:35:cd:3e:fd:eb:31:dc:f4:a9:8c:3c:4a:3d:
         b6:d4:4e:89:41:ee:f0:f5:dc:35:b0:81:e1:08:d0:77:ff:5c:
         5f:3f:21:e8:92:2e:13:e9:09:cd:02:39:1a:31:02:32:2b:04:
         a2:b4:28:1d:f8:65:e8:ed:ae:ef:3e:0e:66:9d:61:c4:10:d2:
         85:79:e7:44:c0:9f:21:04:0f:ef:0b:56:c6:b8:76:e5:45:98:
         f4:ce:9c:76:72:3e:46:fa:fd:e7:c8:8b:a1:8c:35:99:36:47:
         ec:16:2e:a3:10:d7:46:14:52:54:f3:1d:5c:1d:3a:2b:ef:30:
         41:0c:b1:9d:ee:d6:d0:9d:37:4b:07:be:32:b1:0f:32:2d:88:
         b9:01:58:33:94:c0:2f:af:fb:c1:84:62:28:0d:67:5f:19:a4:
         e0:34:36:6c:f8:30:8d:92:06:70:0c:86:b9:92:f3:bb:08:01:
         b9:37:95:bb:3a:ca:06:e0:6a:95:5f:f9:79:9b:7d:6f:7a:ea:
         30:3c:32:21:f0:cc:f9:38:01:12:e7:55:ba:dc:96:6f:56:b5:
         82:40:f3:d3:b2:33:4a:95:48:10:85:57:ae:6e:a2:ad:14:85:
         8a:aa:c5:7c:c2:4f:7c:b4:cd:74:75:21:d5:0a:b8:8a:e3:68:
         f9:0d:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----