Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          +3lOZasOb43EhL/zIdWoZ3g5LDliV8ptt96ZcNWFZaM=
Subject key identifier:   6D:FF:8A:30:C2:A7:AA:22:88:77:89:88:30:7D:DF:F4:C0:A5:7C:60
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       01962FAB6F3B92D3BA6201174D6AF8F48DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: UOd3Z9z2SNsZxlOVgXIA9vh3nO54bGoMvyokSUNIWaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:3b:92:d3:ba:62:01:17:4d:6a:f8:f4:8d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=6dff8a30c2a7aa2288778988307ddff4c0a57c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:59:b5:7f:60:b2:6e:a0:cf:d3:97:f9:06:
                    7a:e4:d5:70:db:5a:96:e5:53:49:87:c8:83:dc:d0:
                    fa:0a:0f:14:d0:a4:7f:6e:3c:b6:94:2a:86:b2:83:
                    21:d4:30:08:c7:2e:d5:93:b3:ea:7b:6b:23:66:38:
                    1f:7f:84:c2:ce:60:67:78:bc:ed:cc:74:c3:b1:89:
                    5b:ed:b2:48:30:77:5d:4e:26:b0:b6:97:f1:b9:12:
                    24:be:19:83:ce:9a:ca:49:44:07:63:3f:d3:99:f9:
                    23:c4:c5:df:85:5d:48:91:02:04:90:17:00:68:d0:
                    f7:48:b2:1e:d0:28:3e:f0:6d:71:31:6b:17:16:5c:
                    11:75:3f:7c:40:e5:49:71:f4:4b:72:a8:17:ee:3f:
                    8f:e1:2e:74:90:ab:6a:81:93:10:c6:3c:3c:82:34:
                    02:16:06:67:76:bf:97:b9:ba:4c:f4:c0:c1:aa:38:
                    a5:de:13:fb:97:1e:6e:9d:17:d8:2f:e0:b9:0d:0e:
                    f7:b9:6f:06:9b:2a:10:b7:82:a5:7b:cf:e7:1e:60:
                    39:e2:6f:c2:12:44:f0:fd:a7:8c:50:9b:18:41:7a:
                    43:02:30:ac:5e:10:ec:95:ac:7b:c3:42:c0:32:75:
                    65:a3:46:7c:42:88:49:ea:b5:3d:83:18:a3:65:ca:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:8A:30:C2:A7:AA:22:88:77:89:88:30:7D:DF:F4:C0:A5:7C:60
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:50:21:dd:8e:eb:97:32:fa:88:62:b7:51:19:89:ce:29:
         bd:df:3b:b7:2d:a3:1d:a9:3b:e0:58:55:9b:fa:dd:a5:bc:4f:
         28:37:40:81:71:ec:0b:df:1b:e5:09:f4:49:21:d2:75:d2:e3:
         e0:13:6a:79:70:a8:7d:a2:2e:f2:1a:c7:d8:9d:af:96:53:8f:
         83:e3:63:34:2d:48:8d:53:61:40:a3:d6:8c:a2:cc:39:f6:6d:
         2a:a2:50:e6:a5:30:29:ea:ff:1d:04:f4:86:0c:d2:59:8e:92:
         ec:70:43:96:a9:b7:84:ad:97:52:91:67:8b:be:22:7d:de:b6:
         12:32:56:66:72:55:fa:2b:63:32:7e:6b:10:4f:75:78:ff:9e:
         35:52:c1:9b:8e:66:31:10:c9:17:ec:cb:90:68:e8:45:22:a3:
         3d:19:24:21:e7:60:7f:e5:b0:c5:b9:61:4b:f2:f3:68:44:4a:
         f3:f3:eb:5f:31:c6:97:1e:0c:d8:77:88:89:04:e1:d4:13:81:
         d9:30:e4:4d:3b:34:59:c0:51:70:8f:47:f1:29:cf:c2:f0:02:
         28:55:60:c7:86:ad:b1:fe:8d:95:f5:46:05:22:02:66:da:be:
         10:90:a0:2e:08:cf:d4:b9:4c:71:93:87:62:b1:0c:51:49:84:
         70:27:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----