Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          KJMWsonZRxJfB2wL4ho7sLLWeooq35v/qHef99K9a0I=
Subject key identifier:   47:23:C5:69:54:2E:48:1F:73:55:A4:5E:06:49:E6:5F:30:38:A9:E9
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       01962F3DDC8EC42148E87C277BC1CC21E2CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          04A4
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: 7Qu/lYsiqr45gxuE6anH68yq+PK88Yd3NWbUVa+j/Ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:dc:8e:c4:21:48:e8:7c:27:7b:c1:cc:21:e2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=4723c569542e481f7355a45e0649e65f3038a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:0b:9b:77:ec:61:51:08:0d:de:32:02:8c:
                    70:a2:a3:57:c6:3f:46:de:0b:0d:f0:b9:a1:72:5a:
                    13:0a:2f:64:ff:c3:5e:a0:2f:f4:73:dc:c2:cb:13:
                    f7:1a:67:b4:44:e7:59:09:83:2d:a5:5f:19:1d:a3:
                    2b:3e:97:be:4e:e1:25:18:1e:51:99:5d:39:aa:41:
                    4d:82:dd:a5:73:1a:67:d6:e5:57:5c:ba:14:95:f2:
                    b0:27:7d:35:67:0d:db:26:6a:04:93:d5:f8:a3:b1:
                    43:08:f5:69:cb:1e:f0:5e:10:82:14:3f:08:c0:38:
                    3e:36:c4:c2:fd:9a:b9:be:87:80:35:bb:d1:9f:14:
                    d1:6a:45:1b:9f:b9:a5:17:0f:42:1e:77:33:fe:f1:
                    1e:e9:0d:a3:9c:b0:e0:65:03:bc:d3:85:4b:f4:1c:
                    2f:ca:05:a4:03:a5:70:52:22:78:65:24:ef:de:18:
                    30:8e:6b:09:2c:9f:50:86:a6:ba:52:42:f7:1d:d8:
                    75:f4:bb:40:0e:6e:64:b3:49:a0:41:71:b6:e0:89:
                    60:80:35:30:1a:0f:1f:9e:55:55:dc:1c:f4:d7:a7:
                    80:eb:1c:2a:92:f8:fc:06:ff:0f:5b:68:a7:0d:cf:
                    ce:1b:37:93:1e:58:30:85:e1:ba:65:0b:14:79:b5:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:23:C5:69:54:2E:48:1F:73:55:A4:5E:06:49:E6:5F:30:38:A9:E9
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a4:5c:f5:92:f3:99:36:1f:6b:9d:49:7a:8d:40:f0:99:37:
         3e:17:ad:bb:73:af:16:f3:de:e1:12:52:d6:23:78:66:63:19:
         be:a5:b7:8f:b0:08:65:80:a2:18:9e:1f:be:26:bf:ae:50:be:
         ba:a2:de:91:47:71:0e:88:ff:61:10:47:5c:ad:1d:53:7f:89:
         5c:08:cd:04:55:a8:72:54:58:93:62:56:7d:d8:59:06:5e:13:
         0f:cc:ff:0c:3d:84:1a:47:ca:d3:54:cc:de:16:be:83:97:73:
         b5:74:e9:bb:f3:d4:03:30:5a:4c:e7:f0:f7:67:d7:e0:29:f8:
         75:11:93:93:ea:e1:aa:0c:0a:88:ab:44:6b:7b:49:15:55:27:
         d6:ed:21:1e:9b:dc:66:5c:85:1a:38:34:27:2f:6a:11:71:fd:
         09:07:21:f3:f7:38:6e:81:a0:06:b8:9d:aa:65:f5:e3:11:61:
         2d:56:af:7f:bc:aa:ac:1a:57:1a:a7:f3:d8:ee:b4:82:61:7a:
         cd:b0:84:7f:aa:6f:59:94:de:66:b9:66:ab:ed:90:e2:bd:8b:
         dc:2b:2e:de:fb:87:de:63:48:6d:14:2b:40:45:6c:5f:73:8d:
         96:29:f7:69:68:17:90:c2:ad:75:67:73:59:8d:8d:09:7c:d1:
         54:9c:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----