Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File:                     ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier:          SjTBBYiWYSUTH1i/JIoVoVShikvTyXVogMr0BPnK7Gs=
Subject key identifier:   1E:C7:6B:02:E5:EC:82:CC:7C:9C:95:9E:36:1E:CF:4A:D6:32:41:9A
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer:       /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial:       01962ECF6963EA8659BBFD1BB426EF5AF7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number:          6B
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: R8gB9qWdX3+Xakc3/62jvyjmO6woaJJwLbFkd5tvoBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:69:63:ea:86:59:bb:fd:1b:b4:26:ef:5a:f7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=1ec76b02e5ec82cc7c9c959e361ecf4ad632419a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:9d:d4:dd:30:b0:9d:62:da:cc:0c:f7:f2:
                    88:a7:34:de:0e:9b:5a:c9:4f:f5:9b:79:56:7f:3a:
                    91:7e:a7:a8:b4:9a:2a:3b:b5:56:1a:f0:c3:98:59:
                    d8:cc:8a:40:40:bd:92:35:a8:a5:3e:a7:d0:6a:19:
                    29:25:6f:e8:52:58:5c:b6:b3:bc:e4:41:cb:bd:c0:
                    89:a0:a8:55:eb:e3:22:e2:b4:c6:c9:5b:9e:fe:b1:
                    ea:f6:24:b2:b5:d9:9c:ee:28:61:af:2d:39:76:b2:
                    2f:64:eb:b8:80:c1:f1:97:4e:57:fe:dd:69:3d:46:
                    49:1e:4a:d8:a9:0e:09:53:86:5f:75:16:20:3d:0f:
                    77:0f:ff:7b:73:89:c4:ae:cf:70:f5:5c:0e:f9:04:
                    9f:ce:c2:ec:4a:ae:b4:e4:7c:3c:99:1b:91:81:29:
                    85:3f:1e:e2:af:e9:26:f9:3f:67:65:68:3c:9e:af:
                    e1:fe:23:da:0b:8f:fa:c6:b7:de:5a:7c:ab:09:3a:
                    f7:70:db:a5:1c:d0:7c:96:ae:bf:4e:cf:0f:1f:41:
                    81:46:de:bf:0a:d6:d1:03:a6:18:cf:42:44:ff:88:
                    f7:20:e0:10:e9:f1:cb:ef:e7:15:6e:5a:fb:5d:d3:
                    20:83:75:96:0e:6d:82:2c:e1:3a:0c:83:07:c6:a8:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:6B:02:E5:EC:82:CC:7C:9C:95:9E:36:1E:CF:4A:D6:32:41:9A
            X509v3 Authority Key Identifier:
                keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:2f:1d:a1:2a:fd:b2:64:43:c4:c0:ac:80:75:98:7e:94:
         53:79:22:5e:cb:a1:ac:6f:00:55:3e:cb:02:7f:ef:15:83:a8:
         97:af:d9:5b:f8:b5:1b:b3:01:2e:e8:03:cb:a8:ea:93:f4:2d:
         b1:94:28:a7:05:32:7b:03:ec:94:28:5c:bb:4a:6f:b5:ae:ba:
         db:d2:88:bf:83:91:1d:36:7c:ac:b8:ac:3e:3e:96:1d:69:51:
         2c:ae:ff:7c:b9:09:a2:6b:27:ba:ab:b9:a2:ee:4b:13:d6:54:
         3c:55:41:c9:95:94:f5:05:ca:f9:24:c3:07:a7:d5:8e:3e:9b:
         05:c2:ba:65:5f:80:8b:7e:1e:76:0f:5a:ac:45:fa:32:82:d9:
         a2:5e:0a:ea:1a:11:bc:c7:f9:20:bc:b6:f1:32:25:53:85:48:
         aa:d2:ff:70:81:bd:7b:97:ff:d9:cc:1c:f9:ba:f6:73:b3:a5:
         5b:8b:e9:09:9b:74:55:c2:49:f1:c9:6a:27:a1:fa:1a:14:cd:
         08:ae:56:06:5a:c7:21:8d:3d:ba:b4:ff:05:25:35:7c:e5:c8:
         63:6d:a4:ea:f8:22:73:e8:a8:38:75:0b:7e:8e:94:34:72:c8:
         79:4d:85:ca:82:4d:9f:72:ed:4e:a6:f4:7a:a0:88:b3:8c:55:
         92:18:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----