Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
File:                     WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft (raw, json)
Hash identifier:          AqBw2+tuGkGz6c3HA61gC2rK1forpYYLU0w6cAvhWTU=
Subject key identifier:   74:A4:F6:27:A4:EB:78:92:79:08:03:04:9B:C7:A8:7E:3B:98:1A:54
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Certificate issuer:       /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial:       01962ECF8C155D51ECCCC0A90DCEA7E0C275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: E_Z6pTC5X0AHh4r89mkRGifhbg8.roa (hash: vPaU5vXqStk4BcS9NIKCO/NC9GyNhnZmtfECSf7T7YM=)
                          2: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl (hash: 5vmkaPkxAqkeXv7LjyXSk7pNkfCScaHfn4OVFZFK7u0=)
                          3: actWQyOp_AKAxdS2oWJvuioGhQ8.roa (hash: ppBBSVDWkt25cpNi4X/ntehor4mrI7RnuiIE/uYYa8A=)
                          4: mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa (hash: 32O0+tV1Zxq+Xc5IaWObygGAy/okE3wBYMmO6cewcmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:15:5d:51:ec:cc:c0:a9:0d:ce:a7:e0:c2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=74a4f627a4eb7892790803049bc7a87e3b981a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:4e:d4:de:2b:ff:08:a3:24:f7:40:67:5e:
                    aa:f5:fe:0b:a5:8e:58:16:25:3d:1a:4b:e5:9b:84:
                    4d:44:db:27:ff:46:14:67:05:42:ae:31:d2:e2:21:
                    58:79:ae:61:d0:59:04:9d:4e:f4:62:db:c3:34:47:
                    ce:78:5d:35:28:79:54:11:cd:92:21:85:0e:02:fe:
                    a9:4b:2c:e7:ab:19:d6:e7:15:50:44:85:93:91:e2:
                    3d:1c:aa:04:b8:ce:83:60:7a:4b:c9:b9:f9:3b:a3:
                    ed:95:3d:92:a3:38:ac:d5:0d:cb:21:61:5c:8c:60:
                    89:2a:09:55:74:17:8b:98:fa:55:78:f4:6c:b6:47:
                    26:35:41:d1:2d:33:29:6a:9d:a0:12:29:b9:5c:56:
                    7d:97:37:7d:54:59:f5:f0:0e:68:e6:0c:93:0d:c6:
                    03:7e:1b:e3:ca:04:5a:86:22:04:65:6e:c9:89:ee:
                    f1:d4:c7:7d:83:a5:1d:fd:5a:2d:ec:07:8b:35:1a:
                    30:4d:8a:a1:f5:67:ba:89:4f:0b:f0:a4:b4:97:84:
                    30:6e:c7:58:53:f7:43:52:ee:8d:2b:3b:0a:dc:31:
                    b6:96:99:03:66:e1:12:19:23:dc:7c:6a:eb:ea:7d:
                    8e:a0:a4:36:1f:76:72:d5:24:c2:d2:c8:9d:40:12:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:F6:27:A4:EB:78:92:79:08:03:04:9B:C7:A8:7E:3B:98:1A:54
            X509v3 Authority Key Identifier:
                keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:90:5d:58:1e:a0:26:07:c4:91:03:d6:14:2f:f3:7a:01:
         71:45:db:41:a9:33:f5:da:ab:8b:20:cf:00:c4:23:07:01:fe:
         41:d6:ef:fe:56:95:d5:65:72:c8:45:e2:8b:28:6d:76:23:dd:
         34:9b:75:f0:d7:5d:8d:d0:34:5c:36:9f:b3:5d:9e:52:5a:3e:
         4b:23:05:ad:fb:b6:fa:89:eb:3f:79:1f:b3:f9:d1:74:f3:72:
         0e:93:0f:ff:21:13:02:56:c9:5b:ca:24:30:60:f4:82:1c:cd:
         e4:81:74:30:96:cb:f3:12:57:fe:77:0d:ae:fc:78:54:c3:57:
         b7:91:ae:65:90:e1:86:54:c2:bd:de:6d:ca:bf:f2:92:2b:cf:
         1d:6e:97:c0:83:56:ab:63:ff:3d:1e:a3:49:33:c6:87:72:6b:
         50:42:58:93:78:0e:5a:76:7b:be:51:bf:08:3f:42:d3:be:24:
         f9:49:01:82:83:4c:af:cf:35:7b:9e:8d:4f:09:ac:6f:1d:6b:
         b5:aa:1e:63:2a:82:fb:fb:bd:d9:49:19:76:a3:a7:fb:67:21:
         6b:76:c1:2f:14:40:cf:66:7c:d2:fe:b5:94:e2:99:b7:85:c8:
         7a:90:a8:72:2e:d7:4e:0e:17:12:13:7f:87:05:a3:07:e3:23:
         a1:a1:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----