Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
File:                     wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json)
Hash identifier:          TgloteH0Ue0xwCH5KAYKO1MZzIKYEzGDzYVuy7tnEmU=
Subject key identifier:   5B:84:D5:A3:E7:66:4A:55:0B:44:42:30:45:A4:54:B5:75:DC:E4:33
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Certificate issuer:       /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial:       01962E997BBB6AD4BE19BDAF4C9E8465CC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
Manifest number:          1508
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=)
                          2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=)
                          3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=)
                          4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=)
                          5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=)
                          6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=)
                          7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=)
                          8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=)
                          9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=)
                          10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=)
                          11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=)
                          12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=)
                          13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=)
                          14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=)
                          15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: FUWpfQ/cleMRoFYiENlUi6sr4D53FT0vlQNsqs0ARdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7b:bb:6a:d4:be:19:bd:af:4c:9e:84:65:cc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=5b84d5a3e7664a550b44423045a454b575dce433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:91:55:46:47:0a:f0:88:61:93:24:23:a1:
                    85:e7:17:72:57:19:66:48:3a:b6:5b:1b:8c:2e:8c:
                    8d:b1:c7:2a:82:6c:9c:7a:dc:b4:ed:60:44:41:50:
                    4e:58:3e:20:d5:0c:09:34:1f:01:95:cb:a4:f6:69:
                    16:49:05:81:77:69:32:17:5d:af:b7:c6:a8:6e:5e:
                    63:7d:58:2d:54:be:6b:63:de:fd:a6:53:bd:4a:80:
                    5c:0d:2c:10:1c:c6:a7:46:e0:36:5f:2b:b1:dc:51:
                    ca:ae:cf:36:10:61:b1:d5:e9:0a:da:6e:b7:34:7b:
                    90:3a:1f:73:f1:e5:9c:0d:fe:14:9e:ca:c4:6c:db:
                    60:8d:75:df:90:61:27:87:09:f3:73:36:b2:e7:26:
                    ba:a2:c7:d9:73:12:22:b1:cb:35:b8:e1:3e:81:bf:
                    91:b5:8c:17:96:db:61:ba:12:14:af:5f:46:27:7c:
                    35:7a:6b:25:2f:86:39:d3:09:93:99:df:ab:4a:06:
                    5c:e7:c4:96:bb:bc:88:cf:c2:48:a7:8e:11:47:17:
                    5e:cc:5b:a4:e0:76:85:b6:dc:e5:3f:3c:bf:5b:44:
                    8f:42:ed:7a:e2:0a:4c:87:8b:97:fc:76:f8:33:23:
                    43:96:86:c1:68:83:17:80:42:80:fc:ec:f3:55:f1:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:84:D5:A3:E7:66:4A:55:0B:44:42:30:45:A4:54:B5:75:DC:E4:33
            X509v3 Authority Key Identifier:
                keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:84:38:83:20:b0:33:8a:d7:4e:1b:24:e1:2e:2e:e7:0e:
         4f:e4:0c:31:e4:41:f0:45:8a:c4:51:e3:f4:ee:6a:65:21:c6:
         ba:e1:fd:b3:17:b1:65:ad:1f:88:7c:1b:e0:6f:f0:a0:6a:fd:
         2f:b1:dd:79:5c:e0:bf:2b:a5:75:57:57:ca:08:bc:61:cd:d7:
         1f:80:20:6f:0b:88:dc:bd:38:99:70:c6:2e:60:4c:08:8c:d7:
         fd:eb:5a:a4:6c:e1:4c:c1:71:78:9b:a9:05:b7:fa:14:87:a3:
         97:bc:32:d8:33:b8:51:24:f6:72:68:4f:d3:68:e9:e7:6a:cd:
         9c:7c:44:5a:b3:e1:b2:1a:18:e9:d5:30:e1:4c:17:03:60:40:
         3f:dd:a0:24:aa:3d:21:17:27:8f:84:1a:95:23:86:33:5b:fe:
         23:a7:be:91:de:a3:d2:99:9a:3a:42:b0:56:74:46:c8:a4:ed:
         98:0a:68:36:2c:ff:29:b6:50:6f:50:1f:3c:07:6a:9f:2a:b6:
         5e:94:40:d2:f0:da:c0:ce:47:00:ff:31:fe:1b:60:d0:7f:0b:
         7a:33:7e:3c:cf:b2:f3:8d:3d:1b:b0:3e:6b:a2:2b:cf:a2:1b:
         a6:f9:15:f9:93:89:8c:66:9f:b9:09:0b:ce:d8:9d:d3:ea:c9:
         bb:24:d0:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXu7atS+Gb2vTJ6EZcwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjUwNDEzMTAwMjEyWhcNMjUwNDE0MTAwMjEyWjAzMTEwLwYDVQQD
Eyg1Yjg0ZDVhM2U3NjY0YTU1MGI0NDQyMzA0NWE0NTRiNTc1ZGNlNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAyRVUZHCvCIYZMkI6GF5xdyVxlm
SDq2WxuMLoyNsccqgmycety07WBEQVBOWD4g1QwJNB8Blcuk9mkWSQWBd2kyF12v
t8aobl5jfVgtVL5rY979plO9SoBcDSwQHManRuA2Xyux3FHKrs82EGGx1ekK2m63
NHuQOh9z8eWcDf4UnsrEbNtgjXXfkGEnhwnzczay5ya6osfZcxIiscs1uOE+gb+R
tYwXltthuhIUr19GJ3w1emslL4Y50wmTmd+rSgZc58SWu7yIz8JIp44RRxdezFuk
4HaFttzlPzy/W0SPQu164gpMh4uX/Hb4MyNDlobBaIMXgEKA/OzzVfHnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuE1aPnZkpVC0RCMEWkVLV13OQzMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBCEOIMg
sDOK104bJOEuLucOT+QMMeRB8EWKxFHj9O5qZSHGuuH9sxexZa0fiHwb4G/woGr9
L7HdeVzgvyuldVdXygi8Yc3XH4AgbwuI3L04mXDGLmBMCIzX/etapGzhTMFxeJup
Bbf6FIejl7wy2DO4UST2cmhP02jp52rNnHxEWrPhshoY6dUw4UwXA2BAP92gJKo9
IRcnj4QalSOGM1v+I6e+kd6j0pmaOkKwVnRGyKTtmApoNiz/KbZQb1AfPAdqnyq2
XpRA0vDawM5HAP8x/htg0H8LejN+PM+y8409G7A+a6Irz6IbpvkV+ZOJjGafuQkL
ztid0+rJuyTQug==
-----END CERTIFICATE-----