Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File:                     WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier:          EWCHwJf0EBBPI65ndUR5mZujHrIRunLNC6wA7ixm0HM=
Subject key identifier:   4F:69:9B:17:A2:FA:1D:4C:96:3E:4B:9A:24:52:B7:FB:E5:5B:89:31
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer:       /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial:       01962E61E53F616F258E291BD27CB3A49AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number:          0B8E
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: vcfGaiskg8AMtDQ5bVV1aiKBHGdYap3Ny/PJ8rcJgBE=)
                          2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:3f:61:6f:25:8e:29:1b:d2:7c:b3:a4:9a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=4f699b17a2fa1d4c963e4b9a2452b7fbe55b8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:f5:4d:31:c0:f4:bf:1a:6d:11:91:e1:69:
                    65:29:93:16:c2:9b:c2:09:d0:a3:9b:81:d4:72:e8:
                    95:e4:64:7a:2a:36:c4:74:14:1c:15:48:ae:b9:7a:
                    a9:03:9f:b9:2d:85:cd:41:48:1e:7c:b3:78:23:9c:
                    23:ce:c6:ff:16:49:ce:8f:d0:42:61:c8:47:a0:52:
                    32:4d:60:6a:41:5b:e3:a7:96:61:29:46:a0:db:c8:
                    74:95:1e:01:ff:94:c2:95:db:f6:48:41:c0:70:7c:
                    d7:23:5b:13:9c:53:c6:cc:55:4f:c4:d2:58:55:72:
                    d6:a4:c3:d5:23:72:45:d0:2b:47:a2:5b:98:27:6c:
                    1f:75:51:67:a8:13:58:9a:94:3f:f3:31:53:24:a5:
                    19:7c:ce:6e:c5:a9:34:67:29:5e:06:fe:9a:d8:57:
                    4e:2f:70:dc:35:5e:15:cb:ef:bf:ca:9d:f5:db:7a:
                    dc:f2:09:ad:ab:bf:f5:80:e7:18:99:7a:94:9d:ce:
                    0c:33:ed:58:f2:dc:59:31:9d:1c:d3:54:d6:c1:c5:
                    b9:44:f0:b7:f1:3a:2d:e8:7e:a7:91:ac:cd:6b:97:
                    ac:9f:30:3c:db:82:91:71:76:4f:2f:d3:b5:37:d4:
                    c9:ec:80:2b:81:91:60:3a:6f:90:a4:2d:d8:54:48:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:9B:17:A2:FA:1D:4C:96:3E:4B:9A:24:52:B7:FB:E5:5B:89:31
            X509v3 Authority Key Identifier:
                keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8e:a2:3e:d2:98:b1:cb:c7:a1:47:70:1f:d1:02:b7:4b:36:
         71:39:7d:f4:e4:18:50:c3:06:f4:93:a5:97:e2:88:00:4e:37:
         92:c7:e7:71:72:f2:8b:74:f5:16:fc:02:f3:56:8d:7f:ff:37:
         53:85:d7:48:3b:ab:8c:63:fb:5d:70:3b:40:2c:3a:67:0d:54:
         a1:a9:36:a5:0e:3c:22:b5:d5:74:19:9c:22:d5:86:4e:a0:78:
         d6:6d:34:1d:41:84:df:ee:f6:0f:3f:c0:2c:3a:51:db:00:8e:
         27:39:0e:01:ce:45:11:74:ef:af:f8:18:37:74:44:e6:5c:fb:
         2f:83:25:51:c1:01:ff:5c:81:4b:07:73:f0:00:ae:16:c3:cd:
         b2:39:0d:a8:56:e4:46:e5:87:65:96:45:71:de:ec:f2:f6:8b:
         27:b7:9f:99:9a:78:2c:ae:cf:03:57:6b:1a:5b:12:d0:0c:2f:
         74:65:47:c6:76:6d:2e:e1:98:75:5d:f4:0c:16:46:d7:ad:29:
         30:9f:75:b6:b7:33:95:5c:61:73:e0:0a:9d:25:67:86:46:54:
         39:48:8f:58:96:3b:ac:04:7f:da:cf:6c:f4:36:d0:0f:46:d4:
         18:ba:f0:65:ad:42:bc:df:c8:24:65:b5:71:a3:fc:83:d0:60:
         8e:74:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----