Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File:                     WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier:          O6dAEPm5c/kZOVcBVDbZ3JkyedNGfpMXrURT0wIRc18=
Subject key identifier:   7B:10:4A:82:94:68:C1:95:DD:61:B8:44:D5:8F:1C:FC:E1:4D:0B:2C
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer:       /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial:       01962E2B09C1D4DCBA1A4FB33058AB992C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number:          044D
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: EQErsYEn34VQuEWAGFb3PKqYnG4.roa (hash: V0vxhgyH062g70S7uriTR1kZL9lSGypJMHFC0eqjGm8=)
                          2: F6cqsVfR3nCwcraDWbOKx9UMCf0.roa (hash: VhLYWpxjVaCJbMRdgI+y8qkEuKfM8KwIqDJg1RYVsew=)
                          3: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: 44SMSZzwKI+fUOim9jRmgmmF3kllxhtHFqjr8E3CxD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:c1:d4:dc:ba:1a:4f:b3:30:58:ab:99:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=7b104a829468c195dd61b844d58f1cfce14d0b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:4c:33:99:ee:59:38:81:99:d1:db:d8:1e:
                    38:37:08:5c:16:c0:92:f8:09:4c:73:9d:1d:21:40:
                    96:08:34:5c:b7:00:a1:75:4f:fc:e3:7d:36:2b:a1:
                    18:c4:c8:98:98:36:c4:21:7f:51:0e:c5:a0:7f:dd:
                    bd:a3:68:40:eb:9f:82:7a:3b:ea:4a:57:7d:11:24:
                    f1:61:a1:01:cf:70:37:19:96:eb:43:4b:0d:64:0e:
                    e7:7a:72:68:61:17:ec:4a:d0:f0:72:00:20:ed:e3:
                    e2:bb:f2:91:7a:f9:42:a1:e8:f8:99:ca:17:ca:c8:
                    d9:7a:97:9f:ae:6f:29:7a:89:e3:39:f9:03:02:14:
                    0b:a9:2e:4e:48:85:22:3a:17:a9:6b:72:9d:e9:6c:
                    aa:b4:b6:ef:1d:57:d5:b0:5c:c7:ae:08:99:f8:5e:
                    2b:64:b5:a8:fc:24:c3:83:b0:8f:0d:c6:cb:41:77:
                    21:6d:5f:fe:67:6d:86:89:cc:f1:d0:41:db:20:42:
                    8e:fd:a7:6a:12:7b:b8:b2:73:f2:7b:fc:9e:d3:8a:
                    dd:a5:d9:b5:fb:cc:2c:d2:61:ac:73:07:62:d8:3e:
                    21:5c:3f:28:91:55:0f:ed:4a:b4:e5:3d:bd:73:a3:
                    cb:f9:9b:d5:ff:e5:09:ec:0d:f5:25:96:d3:ad:0b:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:10:4A:82:94:68:C1:95:DD:61:B8:44:D5:8F:1C:FC:E1:4D:0B:2C
            X509v3 Authority Key Identifier:
                keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:b2:ea:2a:38:e1:b9:80:4d:c1:70:00:b0:2c:4f:86:41:
         e4:c2:4c:c8:c2:d3:92:f1:9a:be:a7:40:b0:77:fb:75:e6:cc:
         d5:34:0d:fa:35:48:2e:be:2c:88:63:db:0d:ef:a0:5c:61:0f:
         fa:2a:dc:2f:3c:61:9f:a1:e0:ec:56:45:bf:96:89:de:cf:67:
         70:88:34:b2:4b:dd:0e:43:c1:f1:d7:94:dd:8d:15:18:2d:aa:
         2d:08:0b:07:db:b5:bc:02:ff:66:19:36:8a:3d:ef:e1:6a:35:
         35:4b:97:f4:46:79:fc:94:42:7d:6b:4a:a0:61:5a:fd:01:ec:
         4e:85:67:b9:02:73:9c:28:b3:ec:04:2b:fd:a4:33:39:00:80:
         57:04:89:55:00:a8:df:e1:15:84:5a:01:4e:b9:d9:92:c3:30:
         e2:48:97:66:56:78:fe:a2:28:43:46:3f:24:5b:c4:68:9b:fe:
         e6:b4:58:d9:22:c0:45:3a:46:25:cd:9a:9c:5c:e6:3f:a4:f7:
         f6:97:db:68:64:91:1b:78:6a:16:92:eb:1d:9b:51:a0:66:1a:
         7f:37:2e:0a:ee:9f:39:e0:ed:71:9a:e9:91:42:a7:f4:5c:dd:
         57:1d:70:83:31:58:8f:2b:73:ce:ee:33:d1:98:46:0c:05:20:
         87:e0:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----