Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File:                     WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier:          Lz6MC3I3XioAWfYr73FfGkL6bD+XEmfi4rjpJX+1w2Q=
Subject key identifier:   C6:7B:EE:1E:20:C2:2C:74:DE:94:0A:F8:15:6B:21:03:87:31:6D:05
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer:       /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial:       01962F06AD2795F54F61CFDA7C611102AF0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number:          1453
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=)
                          2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=)
                          3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=)
                          4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: xEliLoFBnSTeIbIJ9rPQkGrNZ2TJBk87DdUic9zJwng=)
                          5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=)
                          6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=)
                          7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=)
                          8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=)
                          9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=)
                          10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:27:95:f5:4f:61:cf:da:7c:61:11:02:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=c67bee1e20c22c74de940af8156b210387316d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:38:69:fc:6a:82:ed:5f:d8:58:d9:72:d0:
                    12:0b:1e:50:b0:ad:b6:28:fa:db:6a:01:ec:ae:31:
                    8d:95:aa:86:3c:f2:dd:40:fa:f8:10:53:13:f5:6d:
                    6e:d8:d5:28:35:5e:fe:b8:8e:be:4d:92:ba:6f:8d:
                    f7:a6:da:52:f8:c8:b9:6e:32:34:60:f8:2e:51:f7:
                    93:02:b9:03:c4:e3:38:66:b1:d6:95:fa:c3:67:51:
                    58:2c:83:c9:99:bd:5d:a3:ca:2e:d4:53:ba:da:6c:
                    bd:3c:1e:54:59:28:56:c0:fa:ec:73:2d:41:2d:a6:
                    2f:40:b2:46:99:19:dc:a4:01:0a:47:eb:7c:5d:23:
                    aa:9a:a4:6f:11:d5:97:9d:50:16:e0:9b:29:d5:70:
                    9f:33:8f:4e:9b:b3:a0:ff:51:4b:4c:7c:ac:09:4e:
                    c6:26:69:1e:ef:1e:bf:23:b6:b2:d6:4a:f5:32:ba:
                    d0:a7:e6:56:4f:69:e9:5a:89:5d:24:26:fa:ee:53:
                    66:46:42:a4:1d:01:72:4b:78:aa:4e:cf:98:92:db:
                    4c:d3:b0:8a:d3:43:e1:e6:36:ba:21:4b:03:f1:76:
                    e6:4f:73:e8:d8:9b:49:fe:2e:49:0b:ad:50:1e:ab:
                    47:1c:40:f9:7a:c3:5c:c2:1b:8a:2d:13:95:96:eb:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7B:EE:1E:20:C2:2C:74:DE:94:0A:F8:15:6B:21:03:87:31:6D:05
            X509v3 Authority Key Identifier:
                keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:96:6c:77:69:d5:a8:f2:d3:81:f1:4c:bb:c9:b0:73:9d:d5:
         92:a1:a1:f4:c2:27:3e:e8:40:14:94:9a:d4:c5:6a:fb:95:e7:
         01:1a:c3:8d:38:61:df:93:72:4a:86:61:85:cf:0a:3c:89:fd:
         e8:b8:db:60:7d:7b:65:1c:c6:27:29:29:38:b2:9f:c3:ce:f1:
         a6:a9:c8:d7:bd:20:8f:cb:64:35:a5:c0:a9:4e:c2:54:60:a4:
         74:68:cb:c3:b1:54:9e:38:34:e1:ce:d4:8d:e4:f3:ea:56:3b:
         32:9c:33:7e:b2:79:b6:be:ba:09:03:bd:51:f1:b0:91:eb:65:
         99:d8:3c:47:ed:df:57:a4:23:95:1e:d9:46:60:9e:33:7b:0d:
         97:a4:38:8d:b7:c4:78:52:de:74:8d:14:7a:dd:e7:2a:25:a9:
         76:00:7b:d3:9b:ea:e3:e8:37:8a:1b:2e:0a:8c:cd:60:05:fc:
         1e:c6:09:71:15:0c:90:98:c8:3b:39:7a:06:5a:e6:e3:75:e8:
         dc:4e:ea:07:3b:21:1d:79:23:86:44:3f:16:12:75:a0:77:3f:
         21:b2:17:0a:cb:69:56:2f:bb:3b:51:bf:8b:4f:8f:5a:32:9b:
         4b:0c:c5:2d:4a:d6:63:11:bb:6f:3d:31:13:4d:2a:64:16:d5:
         b9:10:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----