Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File:                     WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier:          xbsaMkv9pN0Uas6vS3JC4XruAxKYNWaVjQKsCIiRa18=
Subject key identifier:   15:58:1A:EC:39:4D:DB:FF:1C:F4:FD:15:18:FF:58:7D:E0:AB:A5:59
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer:       /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial:       01962F3D577A6D1847494AB11E233ED51165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number:          02BC
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
                          2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: FJ2PR1BKLuQBa/lE7ybabo8NL1Ed44jADQ9xSBT/PvE=)
                          3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:7a:6d:18:47:49:4a:b1:1e:23:3e:d5:11:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=15581aec394ddbff1cf4fd1518ff587de0aba559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:37:c2:6e:ed:53:9d:d8:b0:f2:d4:57:17:
                    b8:65:8d:8b:5c:09:3e:22:5d:84:bd:e2:9f:47:80:
                    e2:1a:0a:a8:26:85:7a:80:4d:9e:79:58:2c:36:c2:
                    4a:7d:40:ca:c6:88:29:59:77:42:5c:d1:6d:a0:67:
                    ff:6d:61:8a:d6:95:8a:80:85:b5:28:0c:e3:a9:64:
                    45:c7:8d:7b:3a:bc:09:f5:bf:c5:46:6d:d3:84:6c:
                    8f:ba:7f:27:44:ae:61:5e:92:a5:1f:59:a3:5a:76:
                    8b:d5:20:82:b4:d4:bb:2c:14:11:69:2d:22:e6:fe:
                    99:5b:eb:76:34:d1:52:10:5d:bc:a7:6d:4d:02:4f:
                    77:16:a1:46:89:ba:6f:8f:fd:15:c9:45:a3:4d:08:
                    45:c0:6a:53:57:b5:4c:6a:19:80:a9:c7:a5:3d:41:
                    5e:94:b5:50:ab:29:68:47:8d:6b:e6:b2:c9:68:9f:
                    40:e5:7c:70:74:86:90:b7:25:d8:dc:3a:9a:bd:09:
                    75:f2:c6:ef:b8:73:a1:4b:77:76:00:9c:ca:da:03:
                    ea:3f:ff:dc:57:dc:77:20:f5:78:d9:88:7f:78:9b:
                    b1:78:2a:21:a9:ff:31:28:58:ee:ca:1d:a1:eb:1e:
                    f9:0e:9f:95:06:37:f7:8e:b9:55:52:49:14:43:db:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:58:1A:EC:39:4D:DB:FF:1C:F4:FD:15:18:FF:58:7D:E0:AB:A5:59
            X509v3 Authority Key Identifier:
                keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:61:16:a6:45:4c:69:c6:48:25:7b:35:7f:30:7a:53:cb:3c:
         e0:e2:5f:aa:d1:91:22:f8:f6:61:8c:ab:f9:fd:9c:b6:ac:88:
         51:55:f4:20:bd:a4:9a:f5:fc:8b:53:75:29:1d:a3:1c:7a:a9:
         4f:6f:07:b7:4f:db:a2:5b:cb:1b:b4:d6:53:da:b2:54:01:28:
         40:07:ef:c2:3e:ba:97:5c:43:d2:dd:46:6a:74:2f:07:fb:54:
         6d:fa:27:d8:90:6a:b5:9f:95:da:dd:70:dc:0b:c4:50:67:aa:
         ee:cb:e5:ff:03:a1:ed:d8:6b:77:71:10:84:64:d2:bb:a2:f6:
         18:66:0e:4a:76:78:90:9f:73:f8:1c:bf:af:17:56:02:f2:28:
         ff:f8:37:64:d5:07:a7:01:0d:17:ff:2a:a8:64:40:20:5c:07:
         20:83:05:c1:ff:4c:8f:ee:40:96:65:b6:6d:99:49:e0:16:57:
         77:95:8f:57:33:da:a2:8f:fd:67:5d:2c:43:1a:71:73:b3:70:
         82:12:50:89:ca:dd:63:40:49:e6:82:e8:8b:d5:b3:4f:d6:6c:
         71:66:2d:7c:28:9d:73:29:57:e7:04:5a:d9:f1:47:87:66:cf:
         d3:e8:09:eb:50:99:3c:d5:cf:54:ce:ea:76:51:e5:41:b8:fd:
         71:95:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----