Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File:                     W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier:          4aYytwtexizZ5jD9mPh8UpUVF4TWVXtjADFNfGBNq48=
Subject key identifier:   63:61:00:82:B9:7F:17:07:26:39:25:E0:8D:EC:21:0C:CE:1A:2F:08
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer:       /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial:       01962DF3EEEC98F1BA487C738886276D3EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number:          0B8D
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: +CF9tbCRC996CNEMFueK03Q1X+HS4XAV9wUizreddUA=)
                          2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ee:ec:98:f1:ba:48:7c:73:88:86:27:6d:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=63610082b97f1707263925e08dec210cce1a2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:0a:87:2d:c8:78:92:1a:33:b4:c5:c4:0b:
                    93:b0:3d:24:51:7f:d9:b3:09:13:3a:c2:11:b4:19:
                    c1:ed:da:c3:82:ba:cf:a9:0e:6a:df:bb:39:dc:6e:
                    20:e9:e8:32:f3:a2:f0:01:9b:55:21:29:ab:2b:3d:
                    de:0e:f4:78:8b:86:49:26:cf:a7:69:56:cd:5e:2a:
                    d3:6b:0e:54:2a:c0:cb:15:89:5d:55:70:71:d7:3a:
                    21:7d:29:44:71:e7:fa:ea:4d:e8:4c:cf:da:38:6a:
                    65:aa:6d:b4:76:76:ba:90:b6:fc:99:20:58:4a:9e:
                    26:cb:e5:f0:87:76:a7:ff:d2:d1:1b:cf:fc:9b:1e:
                    a8:ad:13:fa:93:fe:12:7d:1b:34:a4:06:6e:eb:81:
                    9a:72:04:b9:40:6b:8e:77:76:40:18:4a:6c:a7:8d:
                    f9:44:7f:7f:3b:ef:2d:17:c2:41:c4:1b:73:ff:64:
                    55:4d:e5:78:36:2e:1b:c6:8b:a0:d2:0e:6d:a0:91:
                    d2:77:13:28:71:ab:98:ea:2b:72:07:5a:20:0e:04:
                    d6:5c:8e:34:41:81:1f:d0:15:79:e0:a8:cb:1b:52:
                    a8:16:a2:ae:eb:f0:3d:2e:9c:be:07:d4:e8:35:b2:
                    cb:69:0d:3e:16:80:d3:c4:54:1c:cf:33:7c:98:8d:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:00:82:B9:7F:17:07:26:39:25:E0:8D:EC:21:0C:CE:1A:2F:08
            X509v3 Authority Key Identifier:
                keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:04:64:b6:e9:2d:08:bc:9a:2e:08:18:4a:aa:22:3c:31:60:
         6d:7e:db:9f:7d:fd:db:61:c4:2f:f8:53:f7:cb:f8:e8:24:60:
         44:7e:9a:6a:d9:70:ed:b8:9a:6a:de:7a:57:e7:a9:5f:aa:b9:
         af:b4:de:99:d9:6e:7e:c1:ee:a1:8f:ba:dd:38:c1:85:6b:b0:
         23:3d:4b:ba:4f:7f:52:56:4d:4e:de:12:c3:ef:08:8a:8b:f4:
         cd:e7:05:68:23:0c:10:08:18:3e:6d:31:4e:38:ed:62:43:5a:
         4d:31:ee:f8:c5:9f:93:80:1c:6b:72:a0:61:c2:ff:41:f8:2e:
         c6:46:25:18:bd:69:06:e5:eb:83:8c:c6:cc:ba:03:8d:f8:2b:
         f4:5a:4e:aa:6d:81:90:ef:40:b2:a6:fc:c4:41:31:c4:e6:52:
         1e:35:eb:f4:c4:40:c8:34:3b:9a:c3:c9:4b:b2:2c:3b:26:91:
         43:2a:e3:08:ed:fd:62:8b:02:c8:4a:2c:8f:63:e5:ae:94:a7:
         79:2c:18:7d:56:f0:6b:e7:07:33:73:cd:42:5f:4a:f0:90:1c:
         85:8b:34:e3:92:c3:6b:1a:4a:3d:dc:57:64:b7:83:2a:fe:cc:
         69:10:08:d1:ae:54:14:56:fe:b2:c5:aa:fc:af:98:e0:ee:f0:
         35:d6:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----