Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File:                     W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier:          0EIDAxPHAEnqYYkywLtLuDv7jnfNpGB47GeNpCL/Jfk=
Subject key identifier:   F3:11:E7:95:D4:1D:A5:D5:E0:0D:D8:3E:B6:14:59:C3:E4:F5:E9:88
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer:       /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial:       01962F073F265FBBBD7952F75FC60BD0D752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number:          11FA
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: nR3vxoD0asRtlnmWv+lvQJYhS0wIep37h1XbqLbtlFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:26:5f:bb:bd:79:52:f7:5f:c6:0b:d0:d7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=f311e795d41da5d5e00dd83eb61459c3e4f5e988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:0e:03:1f:30:07:48:ce:04:ec:61:c0:6f:
                    6e:43:c8:42:c7:4c:e4:e3:3b:73:07:4f:17:27:5c:
                    4b:7b:9b:d1:a7:37:a3:d8:f5:32:ac:cf:34:28:d7:
                    27:a7:9c:fb:e9:55:fc:42:7a:b1:87:d6:d6:be:a4:
                    b0:da:0f:9a:1b:1b:71:cd:cc:99:0b:20:33:c5:74:
                    04:d4:32:53:04:fc:05:1c:7c:eb:f7:f2:b4:c6:5c:
                    62:18:d8:fc:c9:72:f8:c2:b8:e8:bd:1a:ee:d7:f5:
                    fd:c0:57:db:fe:07:29:c0:5d:cb:0d:36:c1:6a:c9:
                    c6:e7:e5:64:a6:97:36:78:46:49:5e:26:f9:63:09:
                    0e:81:01:44:60:2e:b5:90:a8:8d:19:58:f1:c7:9b:
                    6e:9f:d2:ad:cf:20:8e:b3:e5:fc:31:ea:5f:10:9b:
                    1c:55:1f:20:41:1a:8d:23:c5:63:a2:49:e9:d7:f8:
                    6d:af:c3:7e:5b:4d:dc:db:4f:3d:11:35:43:92:d2:
                    23:a5:d8:6c:8b:37:c8:a2:4e:c4:68:94:8b:ef:94:
                    13:57:b5:c1:81:e4:3c:f7:18:46:f1:c9:bf:d7:8e:
                    10:f2:88:e4:8f:c8:4c:bb:28:9b:02:1d:fc:e8:3c:
                    85:e2:7e:be:97:df:1a:65:b0:79:11:a0:0b:a0:c9:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:11:E7:95:D4:1D:A5:D5:E0:0D:D8:3E:B6:14:59:C3:E4:F5:E9:88
            X509v3 Authority Key Identifier:
                keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:73:9c:1a:be:3a:6f:26:10:14:74:8b:de:82:cf:cd:38:69:
         f5:f2:f4:e5:9d:5e:8d:73:9d:89:09:ad:54:f7:96:f7:03:5d:
         05:a2:cb:35:88:e4:c1:c0:70:85:03:f3:80:f8:cc:44:8a:1f:
         84:12:78:08:15:21:16:6b:4a:70:3b:43:75:be:04:46:14:0f:
         ee:29:1d:1f:c0:d6:42:a5:2a:0c:de:f2:93:eb:1a:1e:1a:aa:
         f2:a4:2d:b7:af:c3:ad:02:03:45:0e:90:09:7e:00:f4:30:a3:
         4d:89:fa:c4:81:4c:9e:c6:69:8c:e9:72:52:b4:43:19:a5:17:
         bd:5c:55:b5:f9:35:63:7e:dd:75:55:8a:09:48:20:53:7e:a7:
         db:11:99:d7:69:66:72:fa:de:6a:5f:43:9f:d1:57:0f:1c:50:
         db:79:c9:d8:c9:ee:d9:58:73:78:86:5c:67:e8:7c:25:9f:07:
         5a:5a:5b:c3:30:a3:4b:46:6e:07:e8:e6:83:0c:de:6b:8f:11:
         f7:8e:00:d1:af:02:d2:ce:1c:44:fe:c3:57:db:0e:e3:9b:78:
         3b:13:22:3d:48:ec:a1:da:46:e4:d4:d5:46:78:0a:33:4d:65:
         18:18:40:cc:fa:32:c7:14:d2:86:4e:eb:cb:d3:ca:c9:31:52:
         28:6b:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----