Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          aasFy6yazEAAPR2eteR9Map/9Re042tkWbVpSFq5Dxc=
Subject key identifier:   09:59:3C:70:06:B2:48:19:A6:2E:69:32:74:EE:5A:80:F3:25:CA:CF
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       01962ECFACCDAD3F0ABE883389E5035A5999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          116A
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: zuodmHr0nNzkXZyeCUw9K6zRq3KO+m22XR08T5kvyQo=)
                          2: q9zEIJSyiAtted-qK0IC2QOIvVc.roa (hash: Dw02XDclSknqFZSzdcVjqUMXTqYYIsr90SDwtwPQEIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:cd:ad:3f:0a:be:88:33:89:e5:03:5a:59:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=09593c7006b24819a62e693274ee5a80f325cacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:0f:22:00:b6:9a:f0:2f:2c:f0:8f:8d:10:
                    f0:05:79:6d:d0:fa:c8:13:b9:da:07:a6:46:16:38:
                    6f:55:3a:bf:69:15:12:bd:e8:4b:cd:90:21:09:dd:
                    d8:45:07:72:cb:80:6b:47:ed:e8:49:46:5b:48:4e:
                    23:9d:40:fc:94:43:5c:b1:84:42:5c:4b:1e:4f:57:
                    e7:0e:c3:3c:b2:7c:f4:ce:66:5e:ab:a9:09:ba:98:
                    12:46:62:15:dd:59:f5:be:30:ab:48:5a:8e:dc:f8:
                    a9:4e:6a:85:0f:55:cb:1b:74:78:18:7e:23:a1:2a:
                    ad:2b:4d:63:1a:52:9f:55:0b:95:99:05:07:0e:76:
                    49:3f:1c:b1:51:cf:e3:ac:7b:11:7c:d0:fa:61:2a:
                    85:bc:4c:4c:cd:0f:a4:8f:bf:90:4a:57:62:c4:93:
                    38:06:ac:59:33:bf:07:c4:ef:f9:9d:44:f7:29:fd:
                    55:d4:3d:49:4c:4a:0a:4d:97:b6:79:8a:2a:c9:94:
                    10:1e:8c:1b:88:0b:d4:31:0d:17:01:98:54:03:d7:
                    f8:d2:24:b2:0e:d4:99:1f:3b:e5:2a:80:bf:b7:e6:
                    4c:cf:b8:7b:77:39:a3:d1:50:91:bb:ee:dd:1d:c7:
                    0b:0d:a4:98:58:03:d1:fc:db:cb:78:54:41:04:97:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:3C:70:06:B2:48:19:A6:2E:69:32:74:EE:5A:80:F3:25:CA:CF
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:f2:32:8b:c1:c3:72:2e:53:93:ef:67:4b:3b:da:74:93:
         0b:8e:45:d1:6f:cc:6f:cc:e5:a8:05:7f:6b:c0:28:65:02:95:
         9a:1a:fc:24:ea:94:6a:c6:6b:73:b6:0a:c1:2a:0c:81:da:17:
         c7:0b:1c:9b:96:95:95:2d:64:f7:fe:06:58:f4:a9:4c:db:69:
         6b:58:69:05:f2:02:58:3e:5d:03:40:f6:33:fb:7e:6c:40:61:
         d0:46:12:6c:ee:73:de:b0:9a:5c:3f:6c:0b:d2:24:e0:d3:11:
         40:4e:90:23:82:87:bc:13:2c:09:13:ca:8e:5d:52:dd:5f:cc:
         ac:8e:07:bb:64:3a:cf:dd:3d:d4:c9:90:61:7f:f5:ae:17:59:
         14:d7:77:0d:e6:8c:c6:e7:bf:49:a1:e3:f0:40:7d:86:72:51:
         10:2d:19:30:45:4b:41:5a:17:3c:33:f8:b0:05:d0:f5:33:d2:
         8b:9f:ba:72:92:f4:59:0c:e5:d7:d2:61:25:52:69:c8:8c:14:
         7c:f2:5a:3e:36:9d:90:1c:63:a4:81:72:ad:18:bd:1b:67:d8:
         0f:55:e8:7f:e3:ac:c7:cc:74:08:e4:b1:24:c5:60:21:f6:bc:
         d0:8f:20:a3:c8:8a:12:eb:83:27:31:0a:e5:0b:3f:d1:7d:2b:
         c7:02:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----