Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File:                     wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier:          dwK9TNestTMpQBib7CeaGcomyKf1oNtJ6fxWvm+cAGU=
Subject key identifier:   2F:B2:68:DE:2A:70:46:F8:82:AE:38:00:C3:91:97:9A:60:72:0F:80
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer:       /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial:       01962FAB1A393FD94EE35BD66E3FF893A245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number:          062E
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: YrKYk7I6vE-csMWooaZM6NHB8BQ.roa (hash: DGcItu+t1LfBz2hIuLIG2raDTGGDZoaJ5stlNvHsdUs=)
                          2: qYy8XmUApmSr7E4zGQ4BdVZDGb4.roa (hash: Fn2Mqkncw63T9+361k6HpXw83uUzWzsG0tY0nJ1gyjM=)
                          3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: StzsfPGRFLNOy3f+lcVZME5MzNYBepF333yQSMAQi28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:39:3f:d9:4e:e3:5b:d6:6e:3f:f8:93:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=2fb268de2a7046f882ae3800c391979a60720f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:fb:8e:02:3e:eb:0f:fc:60:fe:40:ea:fc:
                    b9:c0:d7:2a:60:31:51:a4:74:1b:c7:2c:cb:e1:a5:
                    92:1f:52:d2:ae:43:7c:2e:b0:8d:68:2e:d0:e8:4d:
                    ba:0c:fe:26:ba:d0:9c:fd:69:5d:fd:8c:f7:9a:6c:
                    09:b8:9b:73:d0:9f:2e:0c:f8:5a:c4:2d:22:ba:94:
                    b9:f9:17:df:5a:60:c0:da:85:f0:81:8d:9f:66:3b:
                    45:f3:ca:31:8d:54:28:63:79:98:41:28:37:ab:63:
                    bf:df:5c:be:61:bb:40:25:36:dd:50:09:96:9f:88:
                    74:fc:18:af:ff:8e:ab:5f:6c:c6:95:1a:7f:02:5d:
                    89:fa:86:df:5f:2d:d5:9b:12:11:7e:a9:18:1a:02:
                    ff:dc:df:5c:c4:ca:9c:1f:db:d6:37:15:af:0a:05:
                    13:c3:46:2d:a2:59:8a:f1:32:83:28:14:6e:c4:1c:
                    46:d2:b4:eb:d1:b2:16:be:7d:38:4f:26:1c:e4:72:
                    bc:16:3f:5e:b8:f5:f0:51:ef:66:8d:bd:20:b2:96:
                    c2:7e:b6:e5:92:3d:a7:b9:c8:f7:ac:06:ae:06:34:
                    ea:6e:d1:2a:27:8c:ff:f6:fe:e2:d3:30:ad:ad:ff:
                    cf:33:05:fc:ac:28:7a:f0:6e:c4:88:b4:9b:47:de:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:68:DE:2A:70:46:F8:82:AE:38:00:C3:91:97:9A:60:72:0F:80
            X509v3 Authority Key Identifier:
                keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:21:b7:0d:7c:26:16:6a:33:8d:83:25:4a:73:ac:b7:85:b0:
         96:a6:1e:24:6c:8b:3f:36:8f:5b:0a:dd:74:f3:76:61:79:dd:
         3a:b5:76:ad:09:dc:eb:a7:9c:5a:66:88:8d:5d:58:16:bb:24:
         ab:f8:80:2f:8d:33:d5:6c:19:d2:a6:e6:29:be:d7:fc:7c:ce:
         7f:04:7a:bd:39:30:ed:f3:13:d8:3b:c1:b9:2e:75:5e:83:ce:
         d8:52:88:34:55:13:80:e3:9c:05:ea:d6:98:92:3b:8c:74:08:
         00:8b:21:87:d5:c5:82:b6:ff:83:07:13:e7:7e:be:e6:2c:f0:
         9e:11:fc:b0:57:1b:9f:8b:5d:c3:a0:71:72:6e:99:e3:0d:dd:
         54:54:e9:56:08:ce:74:67:d2:e3:89:74:b8:16:85:40:ef:90:
         0b:66:c8:dc:3c:d2:fd:31:1f:53:22:8f:c6:7f:47:ef:e8:2c:
         7e:62:fe:34:d6:79:22:cd:45:ed:26:40:36:93:9d:d7:ad:e5:
         c8:0b:9a:f5:1b:c8:b7:1e:eb:46:15:6f:0e:c0:9a:21:af:74:
         24:0b:8c:06:ae:c6:73:c5:96:7e:d4:de:35:ee:a4:fd:7a:dd:
         14:c7:f4:fc:49:12:4c:de:35:4e:fc:d6:10:54:e3:aa:b7:73:
         ee:b7:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----