Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          qyYuATydv6VzBCoZo/4L8QYZ03/amoa1+K3wvyu3qyY=
Subject key identifier:   E0:72:9D:61:C7:8C:BD:E1:CC:C0:CC:36:D9:77:C8:8D:D4:7D:AF:C2
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       01962E2B01F3E01BD04865EE003EF87A0BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=)
                          2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=)
                          3: MghkPZ3l1Mt5EpONpLu4boLVfIM.roa (hash: 4PywlPrXiO64YW8z7+xrLPHcnjRQHH/ovXTQM30bxGk=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: dXYgCh8Ri9x/+DOk5st7rzGEJFPp0LJ/bC2ZHhVOiqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:f3:e0:1b:d0:48:65:ee:00:3e:f8:7a:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=e0729d61c78cbde1ccc0cc36d977c88dd47dafc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:3e:41:17:b9:c9:0a:7f:f4:b3:18:87:93:
                    56:25:84:79:6b:64:3a:82:03:f5:16:79:34:3c:5c:
                    7d:03:e4:47:53:37:70:84:4a:e1:e6:34:7b:a2:64:
                    60:52:ed:3b:2f:13:15:9b:0e:23:68:d6:28:bb:9b:
                    9b:79:18:24:72:b4:b4:44:2b:9c:39:81:e0:93:d8:
                    5e:e5:4c:00:23:a4:a7:32:f9:1f:0b:98:24:33:42:
                    9d:65:87:0b:38:97:b5:60:f4:26:b9:e1:66:1c:ec:
                    8f:e4:d8:a5:28:2e:6d:99:a3:d9:32:5f:db:d3:0f:
                    b4:e1:1d:20:95:c0:74:cf:56:38:61:80:b7:4b:4f:
                    c7:ac:b0:29:ee:94:c1:b2:be:8d:6b:d9:a0:29:64:
                    23:c9:4d:19:ea:48:a6:3d:32:06:a2:7d:7a:f3:05:
                    f0:fb:2b:fd:fb:1b:ab:aa:cd:70:6d:e3:04:84:f1:
                    5b:6f:48:d9:52:a0:a6:bb:6e:61:7f:6d:20:bb:cc:
                    36:66:2f:99:16:e8:90:42:fd:d0:05:48:07:bd:c6:
                    99:df:cd:d2:59:75:a8:fc:3c:81:92:45:8e:03:24:
                    0d:92:a2:f7:8e:ff:ed:dd:99:ff:d0:d4:9c:ec:39:
                    32:12:a1:93:5e:d7:a6:45:9d:a6:ff:ee:e7:fa:f3:
                    6c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:9D:61:C7:8C:BD:E1:CC:C0:CC:36:D9:77:C8:8D:D4:7D:AF:C2
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:24:b9:48:e6:72:38:9f:ec:d0:05:3c:c4:39:57:fd:7a:3d:
         e7:fc:9e:de:e0:0e:5a:07:e8:9a:b0:97:6a:e6:f7:a1:d3:d3:
         08:d6:e3:3b:7e:0c:24:b4:03:23:ed:e5:8d:71:7f:e3:16:47:
         39:17:67:59:c0:07:3d:3a:85:12:06:0a:cf:97:78:9a:b6:9b:
         48:26:e5:6a:d3:5f:5d:8e:c5:c8:08:e8:cf:01:0d:0b:2b:21:
         9f:f1:9c:8a:76:ed:54:1e:b5:a3:ef:66:89:01:ab:13:39:06:
         b4:25:ee:f2:04:0f:be:53:66:97:f6:12:0a:ba:37:37:08:b7:
         d3:46:69:9f:ed:49:5e:33:d5:39:a9:48:78:39:0a:84:ae:ed:
         2c:fe:df:70:0b:0d:eb:ab:c2:98:ad:db:24:fc:ba:cc:e0:9c:
         f9:ee:a4:da:0f:79:a5:0f:f9:8f:28:84:f7:82:d4:38:49:90:
         79:21:34:fa:42:29:80:e6:06:a2:07:29:d6:5a:23:45:38:e0:
         0a:da:1b:23:73:b1:30:16:4d:61:9d:12:6c:c3:2d:d9:5d:46:
         bc:4f:31:c1:15:92:6f:36:86:24:b8:58:ac:49:c0:88:80:67:
         ec:b1:54:4a:39:02:b2:f7:96:76:bc:63:64:db:ed:1e:8a:4f:
         7e:8f:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----