Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File:                     w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier:          MmKQmIIZjeHYdRWXsBp7aw6g4Nv4QU3TGQU82oZ8Ox0=
Subject key identifier:   57:2A:80:8A:C7:C8:AC:E5:9A:5D:71:34:C4:94:F2:DB:65:78:FA:6B
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer:       /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial:       01962ECFD06795A439C98B2E703BC7E2E374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
                          2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: RM91y3/5Zg5IvlZgYLEOTO+nH0tIXqFv29TM7W6df0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d0:67:95:a4:39:c9:8b:2e:70:3b:c7:e2:e3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=572a808ac7c8ace59a5d7134c494f2db6578fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:62:f8:90:8b:fc:5b:67:7f:1c:e4:55:9a:
                    d1:a9:c9:8a:17:6b:9d:ef:79:cf:2a:da:11:e7:96:
                    4d:70:93:84:70:cb:c6:d5:af:69:31:ac:de:1b:28:
                    76:a9:3b:f4:86:bd:00:cc:fd:ab:57:9e:f8:95:2f:
                    07:18:f7:5f:15:21:4a:79:31:12:1b:5d:68:46:83:
                    ab:8d:98:7a:62:58:b3:ab:01:a5:ef:db:38:ca:c3:
                    97:c0:a8:11:1f:0e:e4:33:8b:5f:c5:08:10:97:a1:
                    7a:5c:00:2d:d3:c5:1a:56:f1:53:d5:8e:0f:3c:f3:
                    54:8c:f2:0a:0d:c1:bd:94:2f:19:6f:f0:f6:01:43:
                    03:2f:ba:9b:51:8e:d7:83:9b:93:61:98:e8:dc:45:
                    f5:6d:1e:3b:e8:54:ba:00:be:e3:8a:53:ef:0a:18:
                    35:4b:1e:89:6c:e0:5e:d8:ae:7a:ed:2a:c3:f7:87:
                    44:c0:45:b8:1b:f6:ae:70:de:2d:e6:23:5d:29:5d:
                    82:04:c8:ad:fe:c5:bc:e8:03:da:5b:31:be:8d:92:
                    64:24:ca:f8:16:a8:07:9d:36:ae:1d:22:91:03:57:
                    b7:45:fe:cc:a5:9a:90:57:20:4c:7a:b2:20:06:87:
                    a7:77:e9:5d:60:0a:16:b8:89:4f:3b:0c:24:e0:28:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:80:8A:C7:C8:AC:E5:9A:5D:71:34:C4:94:F2:DB:65:78:FA:6B
            X509v3 Authority Key Identifier:
                keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:9d:ee:b1:95:3f:fa:38:a2:fa:07:2a:15:bd:87:6f:76:
         ce:d2:e7:08:68:53:44:29:a4:1b:b6:45:57:dc:1a:d5:0c:7f:
         2f:fa:e6:8f:61:64:a2:d6:08:75:bb:d6:4b:d6:63:ec:b2:3a:
         fd:9c:30:5f:71:57:d1:13:40:6e:04:75:ec:dd:8f:26:29:46:
         fe:d8:a5:94:4e:52:40:92:fc:b8:39:52:01:e2:65:06:a1:ee:
         cc:21:fe:95:fb:ee:bb:7b:00:a7:43:c9:3c:d8:7e:1e:83:f0:
         9c:d3:1e:99:12:16:e6:8a:c1:b9:b7:13:83:73:25:d2:9a:03:
         df:b5:57:60:81:ac:68:00:5a:bb:38:59:6e:3c:ea:01:de:39:
         22:56:35:f7:6d:8b:8e:c1:b6:3a:e3:30:10:00:8f:04:92:54:
         74:87:22:44:2b:1f:e3:fa:4c:45:80:de:c1:ff:bc:50:a3:2e:
         72:6e:2c:b0:2b:f0:df:cf:5b:f7:05:ca:c2:1f:01:3a:2d:5f:
         18:7a:38:91:b0:ce:de:9f:b5:79:7d:47:3b:08:7c:b2:6f:14:
         85:0f:c9:94:58:57:09:92:ea:9f:89:11:74:29:06:6f:44:4f:
         83:ec:23:11:fc:45:a0:de:60:b6:d8:0e:23:78:10:57:38:ac:
         55:55:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----