Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File:                     WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier:          le3vVx6Kq7VnEReGCCBk59eHtx9PYYJ5Rh3n2JFjgkE=
Subject key identifier:   D1:EE:28:26:DA:18:59:13:DC:AF:B0:34:80:97:E7:5B:57:2A:52:B9
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer:       /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial:       01962FAB73DE29B8DB39456F8F5A3B4FA357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 1-2OoGxOoaanTp4NFyBXy9hgjFp8.roa (hash: +4TofhrZgPqRlaPZZtu+oLS5re60B1e16/PQ8wTozhE=)
                          2: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
                          3: K_gsRES5lFRCo9NkjJeeq-RhdAg.roa (hash: Q0pePTyllTelX2+oKDDwQcgUAOQPcZbmEWbq4SHrw4s=)
                          4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: p2TABleNUUaIaknCRBLkyQu+Rusxa75sM74iLrARs5c=)
                          5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
                          6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
                          7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
                          8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
                          9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:de:29:b8:db:39:45:6f:8f:5a:3b:4f:a3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=d1ee2826da185913dcafb0348097e75b572a52b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:af:79:ae:fa:f2:18:0f:18:1f:d7:bb:25:
                    dd:e6:54:84:69:67:83:e4:62:68:06:73:36:74:5c:
                    e8:13:49:69:c7:32:f9:45:61:cc:cf:81:f4:61:d2:
                    17:4b:7b:13:e0:c9:cc:32:a8:f2:20:93:7e:ba:5a:
                    ee:2b:f8:6d:7f:88:6f:20:c6:cc:b0:67:b5:9f:2d:
                    1e:57:33:60:b4:ee:67:45:63:a5:25:45:3e:53:38:
                    16:98:15:5e:e4:f1:bb:78:2d:1b:6b:29:d7:3e:3c:
                    44:de:bd:24:df:95:e0:59:21:8e:df:ff:79:e6:32:
                    81:d4:45:c9:4b:85:98:cf:c8:d4:58:78:42:a7:09:
                    f2:85:b8:51:2d:9a:89:5f:1e:7d:d0:3e:4b:cb:60:
                    f5:d3:fd:0d:88:2b:2a:92:91:b7:12:4d:8d:9f:d8:
                    68:5c:49:85:b7:12:1e:39:60:4f:d5:fb:11:0c:13:
                    2c:9c:07:01:cb:cc:3e:51:62:b9:d5:60:83:35:05:
                    46:94:d3:dd:ff:da:dd:fd:eb:1e:b8:8d:b5:1c:73:
                    64:03:6e:4c:50:cc:f8:ac:da:ee:06:a3:01:aa:b6:
                    4a:ef:06:76:54:2a:90:cc:a8:dc:06:e6:22:a5:86:
                    7c:84:86:d7:96:76:27:a2:0d:cd:18:93:de:b7:b8:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:28:26:DA:18:59:13:DC:AF:B0:34:80:97:E7:5B:57:2A:52:B9
            X509v3 Authority Key Identifier:
                keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:f1:84:55:e5:f6:1a:c4:ac:8d:0c:16:ad:33:c3:70:0f:
         94:3c:e4:ae:d9:3f:ff:c4:3b:aa:ca:eb:fc:87:51:dd:78:48:
         98:bb:f3:5d:cf:e3:4a:8d:74:24:90:7a:cd:ea:dc:ce:69:5c:
         c9:d3:32:bb:fa:43:23:e3:cb:6d:30:40:48:d7:46:0a:4d:e8:
         77:db:69:64:f1:fa:1c:80:f6:df:1e:a6:1c:77:fb:3f:d3:17:
         b8:d8:d1:ff:81:1c:11:a1:7d:45:78:be:5f:ed:2f:a5:e8:e5:
         df:bf:c9:ba:83:93:8b:c0:e7:9e:0a:3b:ef:d5:a8:2b:77:7d:
         f4:68:db:eb:50:56:56:19:d3:0c:58:9f:1c:da:19:82:72:f8:
         13:c2:6b:f9:3b:5e:f3:73:90:ef:f5:01:8a:b8:17:0c:e8:6a:
         b7:81:9c:08:b3:76:61:07:17:1f:4e:99:9c:78:9b:f4:99:9f:
         1c:4f:45:36:cc:cb:52:e6:72:6c:6d:92:78:7c:a9:f9:aa:ee:
         01:46:06:6f:54:fe:7c:73:3b:22:8e:73:ea:27:b1:a7:7e:47:
         46:aa:af:7c:43:dc:3b:3f:be:be:28:36:0f:9b:ee:88:64:0a:
         d1:af:91:7c:10:ef:1c:51:be:cc:ba:f0:7b:f4:07:e7:39:be:
         92:10:27:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3PeKbjbOUVvj1o7T6NXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjUwNDEzMTUwMTI3WhcNMjUwNDE0MTUwMTI3WjAzMTEwLwYDVQQD
EyhkMWVlMjgyNmRhMTg1OTEzZGNhZmIwMzQ4MDk3ZTc1YjU3MmE1MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36qvea768hgPGB/XuyXd5lSEaWeD
5GJoBnM2dFzoE0lpxzL5RWHMz4H0YdIXS3sT4MnMMqjyIJN+ulruK/htf4hvIMbM
sGe1ny0eVzNgtO5nRWOlJUU+UzgWmBVe5PG7eC0baynXPjxE3r0k35XgWSGO3/95
5jKB1EXJS4WYz8jUWHhCpwnyhbhRLZqJXx590D5Ly2D10/0NiCsqkpG3Ek2Nn9ho
XEmFtxIeOWBP1fsRDBMsnAcBy8w+UWK51WCDNQVGlNPd/9rd/eseuI21HHNkA25M
UMz4rNruBqMBqrZK7wZ2VCqQzKjcBuYipYZ8hIbXlnYnog3NGJPet7jw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHuKCbaGFkT3K+wNICX51tXKlK5MB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdHxhFXl
9hrErI0MFq0zw3APlDzkrtk//8Q7qsrr/IdR3XhImLvzXc/jSo10JJB6zerczmlc
ydMyu/pDI+PLbTBASNdGCk3od9tpZPH6HID23x6mHHf7P9MXuNjR/4EcEaF9RXi+
X+0vpejl37/JuoOTi8Dnngo779WoK3d99Gjb61BWVhnTDFifHNoZgnL4E8Jr+Tte
83OQ7/UBirgXDOhqt4GcCLN2YQcXH06ZnHib9JmfHE9FNszLUuZybG2SeHyp+aru
AUYGb1T+fHM7Io5z6iexp35HRqqvfEPcOz++vig2D5vuiGQK0a+RfBDvHFG+zLrw
e/QH5zm+khAnSw==
-----END CERTIFICATE-----