Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File:                     Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier:          rqHW30JCMjXxtl/+hP9J2heJr1vhAScERhU8OXCWy3Y=
Subject key identifier:   4B:03:A2:03:5D:D7:FC:5B:BC:66:54:A2:58:C1:20:D9:0F:FE:C1:DD
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer:       /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial:       01962ECFC7E4B3D9E61588CDFA380F89A7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number:          131B
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
                          2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: ntsr+1gXBP8ciMHywP2ZqirhCMoBtqEwqQcPHwLPqUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c7:e4:b3:d9:e6:15:88:cd:fa:38:0f:89:a7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=4b03a2035dd7fc5bbc6654a258c120d90ffec1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:37:c8:15:e1:1b:b2:db:54:d3:1a:3b:aa:
                    5e:5b:62:df:0f:8c:98:c5:bf:b9:21:3c:d4:c2:50:
                    fb:3a:1a:98:5c:73:e2:d6:a4:a4:63:a6:a2:67:db:
                    e1:18:29:ac:a9:fc:6a:26:06:d4:79:86:5d:8d:5d:
                    54:66:b8:18:43:d4:d5:c9:a4:b2:3e:d0:83:d2:e8:
                    a6:c4:bb:d6:6a:0f:a9:14:e5:df:13:58:37:d9:45:
                    97:86:45:30:df:75:67:99:e5:03:7f:e2:ff:0c:7b:
                    4c:98:4c:06:6a:ad:c8:60:c6:76:76:81:be:f2:df:
                    48:f2:6c:79:4d:f0:ed:ad:4a:dc:b8:9e:8e:ee:5d:
                    02:1b:2b:bd:6c:e5:33:62:da:d3:27:0d:28:93:81:
                    e9:3f:17:14:b6:42:bd:a1:1d:c8:9c:ee:fa:1a:48:
                    d7:fd:1f:b6:90:c2:2b:10:cf:b2:d9:f1:b2:08:20:
                    dc:d7:f7:c5:2a:6d:99:90:91:86:a1:98:31:27:cb:
                    35:e0:f3:f9:9d:e6:1c:06:64:f0:ae:ca:4d:29:26:
                    f7:49:49:4e:d1:98:6a:b5:a2:7b:b2:eb:f9:96:e3:
                    b9:9e:a7:3e:12:55:fc:3c:95:b0:cb:6d:b0:db:d7:
                    05:b0:53:3a:c7:64:fd:7c:d1:45:d0:85:63:c0:b0:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:A2:03:5D:D7:FC:5B:BC:66:54:A2:58:C1:20:D9:0F:FE:C1:DD
            X509v3 Authority Key Identifier:
                keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:b9:e7:dd:45:bc:b0:17:18:04:7f:07:90:c4:10:b4:64:
         be:fd:d9:87:58:d4:9d:69:7e:85:e3:3f:8c:87:47:a9:c3:4d:
         60:f5:ba:2c:11:d6:1b:89:bb:3a:72:0b:bd:71:49:76:3c:4a:
         00:ef:7d:24:3e:8a:35:9f:0c:6d:81:db:ac:0e:c1:fb:55:b0:
         f7:ea:3c:83:90:b3:fb:09:70:d6:da:d6:34:54:8d:7e:ab:60:
         76:d3:11:4d:35:38:79:b1:b2:c8:c8:f3:bf:b9:3d:75:2c:f4:
         b7:80:e7:11:a1:4e:5f:82:07:07:eb:6e:04:a7:f9:7c:34:c9:
         85:88:77:1e:bd:11:5f:ac:50:e8:cb:4e:b2:c6:a0:33:59:92:
         a2:52:91:de:fb:43:82:a8:40:61:db:df:e7:14:47:8b:70:66:
         79:af:6b:38:22:8e:3e:23:74:f4:e7:e7:e4:68:23:94:3e:99:
         1e:62:74:9b:36:13:27:f4:3e:fe:a5:79:0a:d3:90:09:42:90:
         67:c0:70:52:90:80:c3:f2:13:ba:f3:1d:f4:a9:91:bf:d1:ae:
         43:d9:e6:d1:4b:5b:33:84:63:69:61:19:15:e2:3a:29:02:ca:
         1c:3b:95:9a:0f:41:f0:7d:39:d5:5b:c9:b5:92:b4:fe:5f:5d:
         ae:88:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----