Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          lJk/XW2rfUiw0rOl1iZUGQH2dESBuHmF5/g8PKSBRHI=
Subject key identifier:   A5:07:F8:25:5E:E5:35:69:77:A0:EE:B1:62:30:82:01:38:0F:CD:7B
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       01962F7432A6326B50834D9B97DCE73148A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: FmotFxUCNhyOfAfBL8YRXl/Oey91eVASxdWJWB1bbwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:a6:32:6b:50:83:4d:9b:97:dc:e7:31:48:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=a507f8255ee5356977a0eeb162308201380fcd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:77:0a:30:6b:2d:89:75:26:59:e5:f5:9b:
                    02:01:32:57:18:ba:d7:ca:63:ec:bc:a8:ce:5b:69:
                    8f:89:f7:a9:29:1f:9d:87:c4:45:74:0d:d3:8a:dd:
                    01:1e:38:09:f5:93:56:02:8a:42:dc:62:cf:0a:1d:
                    00:a0:97:53:4d:56:e8:da:a1:a4:c6:0c:f7:1c:66:
                    63:f0:15:05:51:3b:db:31:50:62:be:2f:99:3c:cb:
                    38:d2:89:a5:7c:b7:37:8b:c9:27:91:3c:3b:e3:98:
                    4a:4b:54:1e:44:86:5a:6d:69:3b:93:10:8e:1c:26:
                    36:64:f2:58:af:1c:87:44:e7:8f:8b:af:25:75:34:
                    8b:42:9a:e8:62:bb:77:50:4b:ac:02:b0:b3:fb:03:
                    c5:f6:8e:b9:c1:be:83:7b:08:ee:3b:2b:d2:cf:02:
                    b5:77:b8:0a:81:ca:8f:6d:e8:91:03:da:28:c0:ca:
                    a1:3d:92:41:ad:91:34:28:01:a1:48:e2:08:cb:55:
                    41:39:f3:87:22:d9:23:de:56:87:21:2f:8d:a7:8b:
                    80:da:05:6a:3f:18:b2:6f:da:fe:7d:14:31:bd:31:
                    7f:e3:51:d3:5f:de:c9:f6:1d:5f:00:cb:85:1c:e8:
                    e2:a7:21:a3:e6:df:e9:cb:90:9d:dc:63:55:3a:e6:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:F8:25:5E:E5:35:69:77:A0:EE:B1:62:30:82:01:38:0F:CD:7B
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4d:1f:af:89:d8:0a:e4:7c:f1:9f:b8:ec:4d:40:f7:a9:fe:
         11:d1:72:6b:8c:5c:53:4f:13:c1:8c:6f:b7:e8:55:b7:c5:49:
         13:cb:c0:dc:79:31:16:3d:15:25:93:5c:8a:5f:e7:d9:4b:b2:
         e2:18:59:fb:b3:dd:1b:f1:dc:79:82:fb:65:9e:60:66:ff:f6:
         8b:ab:84:fc:d1:5e:4d:3b:d8:0f:3e:b3:82:49:52:76:76:b0:
         3e:b8:fe:40:b3:1e:f7:d5:e2:3f:fe:ef:d1:26:2c:25:ae:8a:
         04:a8:8c:44:4d:82:c4:23:b2:f3:8e:ca:65:5a:6a:80:f8:99:
         5a:d9:f9:58:2f:94:78:6d:21:8e:77:91:3f:0e:42:8d:aa:f3:
         52:ff:92:32:a7:5a:53:d9:a7:82:cd:0c:5a:98:84:c1:82:84:
         a0:78:11:2b:54:03:d2:01:be:36:a0:cd:72:cc:82:fb:4e:0b:
         fd:53:49:36:ee:2c:b1:40:05:b9:1f:ed:6d:c7:27:7e:3c:13:
         7d:3a:9c:09:90:98:fd:47:d1:cd:a0:9d:48:ef:fd:b9:fa:b9:
         86:bf:f4:19:06:17:81:00:70:a9:4a:9d:ab:98:04:bd:f9:d7:
         21:af:0c:6f:19:d9:9b:ee:e8:71:01:1c:42:ba:de:44:49:ce:
         b9:58:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----