Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File:                     WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier:          kvCgRhzmpxynEbxzDWRiVex8lVRH54cpc5zjju/BKps=
Subject key identifier:   F7:4D:B3:8E:3B:BC:D9:AD:4F:93:AD:E5:57:FB:1E:55:12:96:67:14
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer:       /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial:       01962E2B1BAA240E7BBAF900BB3B2A71CEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number:          1066
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: VmzVJlycKKc3rHYrXzj93QJvu7iN6Pp4gnnMRPh/b28=)
                          2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:aa:24:0e:7b:ba:f9:00:bb:3b:2a:71:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=f74db38e3bbcd9ad4f93ade557fb1e5512966714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:a0:9d:9b:64:da:fb:bf:97:f4:26:de:0e:
                    ca:a2:92:b8:31:8f:cc:74:c7:64:12:41:4f:87:9c:
                    a3:79:fb:2c:06:21:64:1a:de:64:95:7a:56:00:06:
                    85:3f:65:4f:40:af:e3:01:39:40:20:40:8b:28:1e:
                    61:ba:b2:1e:90:3c:70:e3:47:01:1a:80:fe:c0:7b:
                    e3:5e:9a:09:48:af:11:4b:73:13:81:5d:8f:88:89:
                    2a:80:1d:82:f1:28:a6:8f:c4:c5:83:ff:23:66:10:
                    28:10:e5:54:e3:bb:2a:0c:3a:db:7e:75:c1:9b:75:
                    17:f4:c3:98:e8:9a:4d:03:8c:22:13:bd:fa:60:25:
                    bf:81:4e:23:08:ee:d7:8c:f4:19:7d:4f:18:2a:f7:
                    fc:9c:40:31:33:7c:55:0b:0b:57:9c:34:d6:4f:da:
                    25:d9:5d:f4:52:9f:b8:f7:c8:ec:a8:41:a9:b6:95:
                    5b:44:1d:06:8e:bf:71:67:04:b0:b2:30:c7:04:cf:
                    fb:65:e2:e9:d8:21:69:db:d2:c6:1b:e0:49:ae:96:
                    b1:c1:69:c9:ef:ca:45:a9:f8:ce:00:62:d9:ae:f3:
                    f6:59:7a:ee:ae:3a:af:e1:7a:fe:6e:af:f4:e0:b9:
                    72:ee:b4:02:e7:99:eb:50:d9:c4:f3:ff:c7:35:11:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:B3:8E:3B:BC:D9:AD:4F:93:AD:E5:57:FB:1E:55:12:96:67:14
            X509v3 Authority Key Identifier:
                keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:a3:b6:99:62:7f:c9:3c:cc:cc:ae:81:e5:d1:56:68:f3:
         c4:eb:8c:25:05:89:8d:1e:83:18:81:96:77:85:f3:6b:80:d9:
         d9:74:f8:84:45:6b:00:6b:ad:6d:46:99:1f:28:0a:93:01:6e:
         43:7e:73:c1:6c:fc:62:af:da:51:ac:07:f4:61:eb:b2:0b:71:
         12:74:a8:ba:bc:08:c0:bd:00:5e:9d:7d:e9:45:96:69:fb:37:
         a1:6d:b5:ce:e3:63:13:ca:cf:b0:51:f7:2b:62:e8:cd:81:05:
         e1:3b:0b:8d:a0:b2:08:16:d6:80:c7:86:32:ab:51:d3:35:ca:
         81:97:12:ad:ec:07:49:e6:e5:1b:07:c2:17:6d:9f:bd:ee:af:
         34:34:98:af:6c:29:43:07:ef:9a:6a:55:fe:21:42:ad:9e:0d:
         58:03:55:52:63:c6:57:52:24:30:c6:93:12:b3:85:17:5b:00:
         75:57:97:fe:b6:2c:09:5d:0f:a0:f8:af:ff:41:e6:ea:38:9f:
         ec:71:8e:aa:0e:a0:ea:47:5f:a2:3f:d1:2d:6e:08:2b:e1:34:
         fa:ec:e9:e2:03:1f:c7:8d:c6:4d:47:1b:91:57:79:37:bc:d7:
         bb:ec:fa:f0:8a:76:ca:1c:06:21:8f:af:6f:2d:ca:0a:84:bb:
         ee:c0:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----