Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          ad4j40RBWGapmhCQ6jK34ZsQqDs4luimwKmhH1M0XkY=
Subject key identifier:   8A:D2:E4:5F:F6:09:D7:9A:4B:F4:F7:15:0D:52:A5:60:9F:44:6D:D6
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       01962E2B1A0DEDA35B5365826CA2268D0C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          0CE2
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: gMpSezy0QUjUv/E/iUxeqmrz83RhWNXtIWatm3m2Npk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:0d:ed:a3:5b:53:65:82:6c:a2:26:8d:0c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=8ad2e45ff609d79a4bf4f7150d52a5609f446dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:17:49:d2:1e:fd:68:51:12:63:12:fc:aa:
                    43:44:1d:06:64:ed:bd:83:7d:c9:c4:89:3f:eb:06:
                    b1:d8:ec:ab:db:bf:d5:60:a2:b0:2f:40:28:45:2c:
                    d9:c2:c9:84:0e:8f:66:1d:ef:63:5a:45:80:33:9a:
                    7e:84:77:85:94:87:40:46:37:ea:bd:99:f9:ee:8e:
                    88:c3:81:e1:00:e0:f8:15:40:f1:62:7b:35:59:47:
                    99:cc:c8:98:c0:d2:3f:51:80:1e:dd:a6:ce:6a:ea:
                    53:aa:fa:25:fd:46:de:14:3c:25:4f:3d:60:e2:73:
                    a4:b1:a6:3e:ae:18:ef:8f:16:3e:c2:2a:d4:88:39:
                    0a:24:8d:ae:e2:a6:55:f6:33:bf:99:8e:31:68:73:
                    eb:72:86:0e:46:85:af:2c:b3:d3:d0:a5:ab:1f:71:
                    d8:eb:47:cb:8d:be:ee:ea:87:3c:ce:d7:79:d0:2c:
                    25:c5:fa:b3:7f:f1:fe:99:cd:ea:c4:f4:4f:5c:bb:
                    af:e6:30:91:ab:e8:7a:25:e4:f0:3c:31:99:51:3d:
                    fa:fc:56:ef:87:27:63:ac:c4:ed:af:2b:05:0e:be:
                    9b:67:8b:92:b5:5b:11:16:b7:91:af:5f:22:7c:eb:
                    47:0c:e4:76:1b:61:00:6e:80:2a:f3:9e:e3:11:8f:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:E4:5F:F6:09:D7:9A:4B:F4:F7:15:0D:52:A5:60:9F:44:6D:D6
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:af:6a:22:e0:e5:1c:4f:22:36:26:a0:23:d6:d3:2c:bf:26:
         57:6b:d9:a9:ef:86:5a:0d:fe:89:99:c6:87:d2:cc:82:7e:df:
         5f:68:7b:c0:8d:79:62:f4:59:bd:f7:f6:4a:2e:50:fd:e4:ac:
         c3:5a:a0:52:e8:86:f1:0b:86:b2:29:fc:00:b0:75:a2:82:7f:
         52:4b:f0:0d:78:4d:07:67:aa:63:fa:ec:d2:11:b5:0f:0c:4c:
         59:02:0d:c6:87:3c:c2:bd:5d:6f:ec:b6:4a:90:62:11:bd:49:
         cf:71:ca:69:f9:a7:34:ea:bd:b7:6e:60:76:d9:b7:d9:45:5e:
         3a:ef:c2:bc:25:d4:a1:82:00:7d:9f:e7:7e:49:1c:f7:bd:1d:
         d8:28:93:a8:38:87:d9:2e:1f:e0:93:11:ed:9d:0a:61:44:01:
         25:0c:d6:8f:13:09:16:4d:10:ea:07:4c:5d:53:66:17:fc:85:
         56:9f:cc:98:96:7e:64:f8:2b:83:e6:d7:38:31:66:19:b6:55:
         ae:66:05:39:91:06:dd:2d:70:ee:8e:dc:f7:01:ba:d3:2e:b4:
         26:e2:4d:de:2e:d7:02:81:4e:f8:0a:f0:8e:28:29:70:15:af:
         ca:1c:36:5d:3a:50:6d:62:c4:c3:3d:34:62:44:b4:30:18:29:
         9b:7c:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----