Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          u2msz3yrNZzOl2AnUkahfTaNWe4bg2fj2+EaZs74F0Q=
Subject key identifier:   79:1C:6B:87:AC:CD:93:A5:57:60:E8:97:92:BE:9C:DE:F0:34:82:CF
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       01962F742D4E9AC47123EA5C597083AA7897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          4A
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: pOsyKC6JxYgJ5Kces5ej/1O7Wv8dfWnA1tKlPLd5hn0=)
                          2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2d:4e:9a:c4:71:23:ea:5c:59:70:83:aa:78:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=791c6b87accd93a55760e89792be9cdef03482cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:af:db:44:4d:12:5f:61:52:54:34:00:d9:
                    5c:18:e9:7e:b8:ed:70:a8:18:7e:b5:b5:ce:88:8f:
                    15:d0:87:d2:1a:18:03:7c:ff:f0:ad:06:21:dd:ad:
                    c5:42:7e:ec:4e:f5:9e:85:e7:37:13:d6:7f:e0:8f:
                    dd:bb:56:7c:46:b9:14:88:b2:a9:d5:6d:89:28:d3:
                    a7:f4:5c:ef:47:1f:8b:fa:45:34:d0:16:1f:e8:e8:
                    8f:ea:1d:8e:43:a6:44:7f:32:a5:35:40:f3:fe:fb:
                    47:56:a6:12:f8:74:76:eb:05:04:c2:56:ea:63:17:
                    1b:ba:b0:61:73:3e:1d:cf:a1:7a:29:c8:ae:59:67:
                    72:90:86:a6:82:a2:fd:9b:ec:a0:df:02:c4:21:e3:
                    88:b5:e0:a3:99:d9:04:93:3c:6e:ad:c7:28:c7:b5:
                    7d:3e:9b:7a:fd:a7:6a:65:57:8c:3c:fe:47:b6:ae:
                    99:22:b2:37:51:b4:48:77:63:79:16:ac:10:58:9f:
                    8b:72:e4:68:f0:af:24:5a:ac:47:00:fb:fb:58:be:
                    ae:85:6c:31:2b:9b:c7:ef:39:b3:2e:f5:e6:15:47:
                    d1:c5:54:0e:7f:10:81:37:21:2b:ac:d5:16:fd:0c:
                    cd:73:06:bb:4d:6b:cf:1e:b3:53:9d:eb:a8:9c:9d:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1C:6B:87:AC:CD:93:A5:57:60:E8:97:92:BE:9C:DE:F0:34:82:CF
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:29:e8:f3:ec:e8:4a:00:de:8e:07:5d:92:4f:f9:ec:c3:15:
         76:87:f5:c2:20:d5:31:8a:c6:ae:42:8d:c5:8d:95:89:4a:b7:
         c3:05:fe:71:d9:43:e6:12:fd:fc:9f:0e:2a:cd:f7:9e:90:31:
         26:6d:ed:2b:3e:ce:63:91:2e:80:16:91:7c:8f:d4:0e:12:c2:
         68:a5:07:4b:04:3c:d0:21:cb:0a:55:74:02:a3:85:4a:fd:53:
         f7:57:03:0d:d4:d7:2f:b8:e7:ba:27:f8:71:73:f3:d7:3a:1a:
         58:99:60:9e:e0:6f:0d:a2:e0:c9:7e:59:e1:03:18:00:44:d2:
         ed:bb:4f:9a:6f:c8:7e:e3:13:9a:39:15:0f:63:20:a2:47:9a:
         32:90:d5:8c:e0:a5:0b:d0:6f:54:b6:f4:da:09:84:0e:72:31:
         82:47:14:26:02:17:50:6d:bd:0a:db:a3:50:ce:ab:ce:0a:57:
         c7:da:25:05:35:03:cf:51:c2:47:f0:89:d7:6b:53:1f:34:e3:
         69:61:a3:c7:aa:52:e6:a8:7b:1f:71:16:5b:6f:6d:ae:cc:5f:
         8e:70:5c:05:29:41:bf:3c:34:75:21:8b:9f:f3:b3:5a:39:f2:
         42:fa:06:da:bf:a9:0d:1a:22:4d:77:6d:1c:f8:6f:04:31:65:
         2e:9a:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----