Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File:                     wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier:          el0rPQo3CBY0znbkQzl8pZG2Mh1W2JVGwAEVkv/Hvs8=
Subject key identifier:   43:D9:41:63:A1:B9:CF:38:36:F4:75:65:4F:3F:F4:0E:48:06:41:76
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer:       /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial:       01962E98C589491DAF1378CDF3C63134D4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
                          2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: 875eYuZUgYk/+DxnXe6MjMOLTE3jOcSzHWyaXluT3iA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:89:49:1d:af:13:78:cd:f3:c6:31:34:d4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=43d94163a1b9cf3836f475654f3ff40e48064176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:63:7c:39:ae:b0:93:d2:8d:8c:2d:f9:41:
                    7a:a6:4a:68:37:9f:44:d0:32:6d:82:a5:6e:6b:07:
                    99:00:b1:a4:35:1e:00:a2:71:c8:8a:f6:6e:3e:3d:
                    c3:ce:a6:f6:f9:7f:b2:2a:cc:0d:e1:1d:20:58:cf:
                    2e:4e:1d:1a:60:de:55:dc:e3:01:76:cb:eb:e7:b3:
                    28:9c:3c:fa:11:1c:d9:59:1a:1a:d8:1d:fa:8f:de:
                    9c:d3:b9:00:d5:c7:a3:ef:68:95:9f:5a:4e:71:c8:
                    a0:95:29:bf:b6:14:fc:f2:d4:64:03:47:c6:e5:fb:
                    11:ed:4b:c8:a5:b6:08:b9:f9:2b:b6:3d:2a:e9:ad:
                    c2:60:74:f9:41:e1:b5:fc:40:20:b4:63:ce:8e:b6:
                    0f:82:7f:ee:00:d9:9a:45:b2:a5:45:8c:52:85:39:
                    a1:c1:0c:88:93:06:e3:1a:a4:19:89:5a:0b:54:f9:
                    f5:81:51:83:10:fa:a1:a2:55:5e:f4:44:b9:39:ce:
                    f9:e0:73:02:7e:c7:37:1b:bc:5d:33:94:2c:43:1f:
                    b3:b1:18:cc:43:fc:f8:7f:b6:93:c9:1a:3e:54:9a:
                    ac:d4:82:17:98:0a:c2:1b:c7:b0:00:7c:b4:30:70:
                    16:5d:c6:ab:84:ba:0d:f0:15:72:0a:3f:6a:88:be:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:41:63:A1:B9:CF:38:36:F4:75:65:4F:3F:F4:0E:48:06:41:76
            X509v3 Authority Key Identifier:
                keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:79:9c:68:4d:c9:3c:34:3e:af:3c:4d:05:95:f4:33:3f:15:
         75:d6:e0:50:09:b1:6e:b0:ca:8c:fe:41:80:b9:3c:26:bb:e3:
         ca:62:bc:87:1f:9f:fe:e8:22:03:10:9b:ca:c3:84:ee:18:06:
         b2:df:46:93:52:ce:91:d5:d1:82:ee:9e:f0:ed:da:03:d0:e6:
         fd:29:a7:2c:f0:fd:bb:14:f2:75:af:d1:b8:f6:db:ab:e2:aa:
         97:c3:0d:7b:6d:cf:5b:d2:88:33:46:cc:70:bf:14:ea:da:59:
         3b:04:db:5e:4e:18:bd:bd:5f:b0:f4:02:ee:eb:5b:80:f1:4e:
         dd:fc:b6:c3:11:d2:69:8b:92:5f:c6:59:16:50:88:20:6a:fe:
         47:89:42:9d:09:4d:20:1f:d2:75:17:f5:ab:c1:be:55:fe:1f:
         cc:a4:64:85:d2:8a:97:8e:09:81:86:07:4f:eb:dc:60:77:7b:
         a6:14:9c:01:a4:8c:d0:50:6b:82:e3:71:42:d7:e4:09:69:fb:
         03:6b:98:2d:30:62:2c:7d:a4:4c:b3:65:f6:f7:a7:51:e2:38:
         13:6a:18:40:16:f6:2a:a4:13:7c:f7:57:04:5c:2a:09:77:37:
         d7:8a:63:3c:7a:d4:7b:03:4b:7f:dc:85:c6:23:9f:1f:7d:9c:
         4d:73:96:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----