Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File:                     WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier:          9JsLHFAr5Hg1/WcPvU8d9KS17371GvhJmf+Lyg8gq24=
Subject key identifier:   82:11:60:27:0D:46:FA:F0:8A:1E:8E:09:5D:D0:6B:86:21:6C:25:67
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer:       /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial:       01962DF3BB46A868CEABBF34334BBC2D838B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number:          0F21
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: n7G9lQrLimKAwP0lPbpkEOw9e7S7RtrfiOXTwYhVbIw=)
                          2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
                          3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:46:a8:68:ce:ab:bf:34:33:4b:bc:2d:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=821160270d46faf08a1e8e095dd06b86216c2567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:65:d1:98:20:6a:c3:12:71:07:52:c3:0b:db:
                    1e:18:ea:67:3e:dd:e7:93:b0:54:75:55:c1:9e:7c:
                    26:3f:9a:de:7c:2d:d9:df:18:40:50:74:a4:f0:79:
                    3a:26:c3:54:99:31:ea:bc:c8:49:a4:05:59:a2:74:
                    a3:db:b0:42:7f:6d:92:16:31:58:d4:ce:a7:09:9e:
                    28:77:a1:3b:06:e0:0f:c6:9d:a5:5b:a2:4b:54:19:
                    68:fd:11:9a:41:8c:da:66:cc:0a:fc:a1:df:b2:a0:
                    4e:ac:e0:92:88:7d:3c:51:c0:96:7d:78:6b:0a:0e:
                    53:9b:31:af:ef:62:d6:d5:4e:f8:09:3a:62:33:b8:
                    ff:d0:64:f1:bd:c0:d7:e7:0a:72:47:66:14:a1:5a:
                    69:0c:86:24:37:29:a7:1a:76:0d:80:5c:f7:1b:3e:
                    2b:e8:d7:01:9f:cd:ea:ec:1b:c9:c0:bf:69:01:ca:
                    8a:c4:f0:6a:ed:2d:dd:38:d6:b0:26:a8:92:ea:64:
                    0e:b9:c5:d3:04:1e:3b:79:f9:40:f3:af:e1:32:bd:
                    60:8e:e7:fc:84:e6:e6:34:7a:97:71:06:65:73:a2:
                    4a:4d:23:4c:d6:05:07:4c:be:84:f7:b6:6b:eb:cb:
                    a0:ea:a6:00:8c:96:d7:6a:c2:db:bc:f3:05:67:58:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:11:60:27:0D:46:FA:F0:8A:1E:8E:09:5D:D0:6B:86:21:6C:25:67
            X509v3 Authority Key Identifier:
                keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:cc:37:da:fa:35:21:ff:cd:21:a1:26:37:d4:90:12:e4:
         22:79:40:c2:89:28:d6:cf:bd:ab:89:d8:3d:7a:9f:0d:4e:91:
         d9:a8:07:04:47:19:e4:93:00:67:09:da:5a:b0:c8:a2:ae:e8:
         2e:98:e6:a6:e1:dd:85:a4:4e:43:d2:91:5c:67:00:30:b3:3b:
         4e:c1:b4:28:ae:90:ae:e1:b5:47:5c:cd:df:d1:5e:c7:6a:91:
         5f:df:90:5e:54:57:80:e1:14:bb:87:fe:5b:8f:13:1c:a3:5b:
         70:7d:50:70:73:e0:44:5c:66:20:f6:ad:2e:45:7e:21:bc:d1:
         1c:82:76:0d:7e:de:68:99:62:5b:f9:fb:24:0b:99:fc:7f:c3:
         05:e2:64:53:f2:39:f5:13:3d:4c:a5:42:c9:54:6f:d1:5e:08:
         53:dd:fd:f2:9a:85:05:3a:56:26:83:56:af:07:15:71:b3:50:
         be:24:99:4d:d5:a6:57:7a:1c:0b:23:e9:da:44:01:97:90:36:
         54:b9:6a:a2:db:4b:3b:4c:ed:0d:86:18:e3:9d:ef:1d:90:0f:
         17:ff:44:db:74:7f:c4:3d:f7:35:05:c7:56:35:6e:43:ad:14:
         8a:73:92:01:92:b2:a6:ff:fb:6c:3d:67:cc:23:a0:63:71:9c:
         5e:b0:e5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87tGqGjOq780M0u8LYOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzNlMmJkYjYzMjk2ZDVmMGYzYWZlOTViZDE1NDUxMTdh
NWIxNDkwHhcNMjUwNDEzMDcwMTA5WhcNMjUwNDE0MDcwMTA5WjAzMTEwLwYDVQQD
Eyg4MjExNjAyNzBkNDZmYWYwOGExZThlMDk1ZGQwNmI4NjIxNmMyNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GXRmCBqwxJxB1LDC9seGOpnPt3n
k7BUdVXBnnwmP5refC3Z3xhAUHSk8Hk6JsNUmTHqvMhJpAVZonSj27BCf22SFjFY
1M6nCZ4od6E7BuAPxp2lW6JLVBlo/RGaQYzaZswK/KHfsqBOrOCSiH08UcCWfXhr
Cg5TmzGv72LW1U74CTpiM7j/0GTxvcDX5wpyR2YUoVppDIYkNymnGnYNgFz3Gz4r
6NcBn83q7BvJwL9pAcqKxPBq7S3dONawJqiS6mQOucXTBB47eflA86/hMr1gjuf8
hObmNHqXcQZlc6JKTSNM1gUHTL6E97Zr68ug6qYAjJbXasLbvPMFZ1idhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIRYCcNRvrwih6OCV3Qa4YhbCVnMB8GA1UdIwQY
MBaAFFrD4r22MpbV8POv6VvRVFEXpbFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYt
MjQwNjk4ZmJkZGZmLzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZTA3MTUtM2JiMi00NGY0LWJiZjYtMjQwNjk4ZmJkZGZm
LzEvV3NQaXZiWXlsdFh3ODZfcFc5RlVVUmVsc1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMvMN9r6
NSH/zSGhJjfUkBLkInlAwoko1s+9q4nYPXqfDU6R2agHBEcZ5JMAZwnaWrDIoq7o
LpjmpuHdhaROQ9KRXGcAMLM7TsG0KK6QruG1R1zN39Fex2qRX9+QXlRXgOEUu4f+
W48THKNbcH1QcHPgRFxmIPatLkV+IbzRHIJ2DX7eaJliW/n7JAuZ/H/DBeJkU/I5
9RM9TKVCyVRv0V4IU9398pqFBTpWJoNWrwcVcbNQviSZTdWmV3ocCyPp2kQBl5A2
VLlqottLO0ztDYYY453vHZAPF/9E23R/xD33NQXHVjVuQ60UinOSAZKypv/7bD1n
zCOgY3GcXrDlOA==
-----END CERTIFICATE-----