Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File:                     WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier:          +PnFpyDlV5PqdmZMz9qbVuu2cg1g0u8jMn/G6SLiLIc=
Subject key identifier:   63:39:9F:01:A8:B1:35:0E:B7:79:AA:AB:73:E4:71:5D:5E:27:D4:17
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer:       /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial:       01962DF3A2F86F69B69D9B4C7056813302CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number:          EC
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
                          2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: q6Y1Ay4qSOA0u5UrvSMRd5SWqpg4IbkXyQrQDowEheQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a2:f8:6f:69:b6:9d:9b:4c:70:56:81:33:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=63399f01a8b1350eb779aaab73e4715d5e27d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:de:8a:3f:5e:eb:68:22:87:75:93:80:dc:
                    c9:10:1e:82:cf:bf:1d:b2:34:0f:4f:98:dd:a7:28:
                    f3:d2:47:1c:8c:fd:73:28:9e:02:cf:44:5f:53:78:
                    4e:bb:70:0c:16:ed:8a:b7:a8:b6:3b:fe:d0:1a:f6:
                    f5:29:fc:b9:81:84:5d:25:49:a7:38:b8:da:17:dd:
                    83:90:ac:26:b9:7e:31:c2:e4:5b:a5:15:89:c5:66:
                    0d:41:ef:8c:30:07:49:cc:98:c1:6f:65:3d:d8:c1:
                    0c:b6:08:1e:bd:d3:be:e3:49:90:2f:8c:fa:e2:10:
                    65:61:4c:eb:fe:0b:63:6c:4e:ba:03:1f:a2:c7:0e:
                    37:5f:4c:c4:d0:1c:bd:7c:51:01:10:39:45:16:26:
                    98:b7:73:41:3e:81:20:d3:a8:6b:b0:2c:a4:fe:37:
                    7a:9c:95:d5:03:8a:b0:f5:58:2f:14:26:26:b2:eb:
                    cb:0b:e5:1e:46:b4:4c:ce:3a:f5:29:81:ac:01:df:
                    c0:dc:d1:30:64:a5:22:b5:d0:98:6b:0c:bc:99:f3:
                    ed:4b:07:e5:85:e0:ee:a6:12:4f:44:70:4d:68:22:
                    8e:98:0f:80:b5:59:b6:ad:9f:d0:f7:b6:53:36:80:
                    d4:ba:4c:1b:84:d7:57:07:2f:52:ca:22:d0:b9:1f:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:39:9F:01:A8:B1:35:0E:B7:79:AA:AB:73:E4:71:5D:5E:27:D4:17
            X509v3 Authority Key Identifier:
                keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:38:23:bb:c3:8f:8b:5d:78:fd:08:72:6a:12:ab:3e:c4:fc:
         87:f3:2d:04:8a:b6:6b:08:9b:18:d1:77:f1:76:05:68:4e:7e:
         1d:62:3d:9a:ed:0b:5e:ba:97:3f:a4:c1:a9:a9:da:fc:38:9f:
         f9:ab:c6:e8:12:21:1f:f1:a2:df:c0:d2:1f:7b:68:e2:df:07:
         06:47:d1:b4:0b:87:04:53:28:fe:c5:0d:a6:29:2f:b7:fa:b2:
         70:e1:7f:f1:d6:61:60:d5:ff:5b:46:8a:52:ce:eb:f5:68:09:
         60:51:ef:cd:f4:b4:4e:5f:74:81:1e:de:a2:1b:24:8d:e9:ac:
         28:d2:72:54:15:73:52:92:5b:59:84:8d:c5:68:fb:cc:9c:b5:
         a8:55:eb:98:43:46:b2:cf:fd:45:15:91:97:50:39:16:0f:d2:
         24:86:f3:2b:77:6d:fe:cc:3b:e9:b2:5e:47:53:f7:37:08:2b:
         b7:01:94:8a:60:de:b3:e7:ff:94:51:a1:83:66:5d:f6:6a:59:
         60:ba:5d:2a:3d:e2:58:6a:e1:61:cd:1d:7e:7a:34:88:b2:72:
         3d:50:4a:b6:ed:fa:34:d4:e7:ab:83:e2:28:20:1e:36:8e:c4:
         9f:93:4c:ae:58:df:87:9e:f4:7d:23:b4:e5:12:74:fd:85:3f:
         b1:00:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net