Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File:                     WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier:          DEkCeN0h1pQw4GqLTXLDck5l1XsU8mVIFW+6fjM21lk=
Subject key identifier:   1D:6A:98:FF:45:20:B5:4E:0A:B3:92:08:81:D2:8C:43:F2:55:5F:A0
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer:       /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial:       01962E617526FE635F8D0E279A01A316BDC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number:          0D85
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: ZKqe2iph1C5SDmoGsMcYBhyt+S03jOlAMbDnfT2oKuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:75:26:fe:63:5f:8d:0e:27:9a:01:a3:16:bd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=1d6a98ff4520b54e0ab3920881d28c43f2555fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:83:a9:bd:f2:ca:2a:de:5b:29:15:85:f6:
                    c7:4d:51:1a:55:ad:ad:17:fa:1e:e5:97:71:99:ab:
                    44:1c:bf:f7:81:f0:83:2e:97:d5:8d:72:2f:a1:15:
                    3f:d6:63:75:f0:f5:2e:7f:67:f9:af:f6:bb:94:19:
                    b9:3b:31:d1:3d:47:80:ea:38:9c:65:0f:06:88:97:
                    ad:30:dd:cb:b0:a9:39:59:fb:d7:5d:4f:b6:c4:b3:
                    2d:ef:1c:78:23:52:fb:ce:9c:cc:ac:00:90:08:fc:
                    e1:6d:86:cc:67:5c:3c:01:b2:90:da:3b:8b:73:e8:
                    28:9f:19:9e:e0:a9:4d:4e:62:e5:58:a8:36:a0:ac:
                    a5:8b:6b:94:23:57:b0:61:fb:1c:40:0b:c9:13:71:
                    09:3a:df:f6:38:55:d6:06:c9:59:ad:77:fd:ac:24:
                    64:1b:2f:92:01:02:a6:1b:ed:c7:89:6b:13:47:29:
                    91:9d:fc:af:8f:b3:cc:02:57:db:03:37:8d:1b:89:
                    7d:5b:17:2e:92:06:4f:a3:54:82:46:74:2d:50:36:
                    ad:39:8c:d8:4c:47:a8:3b:d7:11:fb:1d:e3:cf:e9:
                    68:3d:bd:9d:9b:c0:4c:24:7c:b3:a3:d8:a7:03:27:
                    90:98:a4:53:b4:3c:80:e3:66:47:6e:24:99:17:ce:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:98:FF:45:20:B5:4E:0A:B3:92:08:81:D2:8C:43:F2:55:5F:A0
            X509v3 Authority Key Identifier:
                keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:ed:62:f0:30:03:3e:cc:a7:ee:8c:b2:fa:3c:80:e7:3b:
         cb:53:6e:d9:94:45:ea:d3:93:68:c3:05:85:b2:02:09:5d:d6:
         a9:3e:30:3f:a0:6f:4e:a7:32:8e:c1:b7:f1:5f:d5:16:ad:99:
         52:26:b6:14:20:e3:87:e9:34:11:df:04:59:96:63:77:65:c3:
         b2:2d:d1:27:32:36:21:a7:7f:9f:c0:ae:ed:ee:47:19:0a:d5:
         12:f0:c7:5a:88:62:a2:e6:c5:63:09:81:eb:88:76:d4:9c:64:
         06:f0:5e:70:3e:cb:35:56:bc:68:c5:a3:a1:41:f6:45:fd:04:
         8b:d5:f7:9b:0e:7e:7e:ab:db:39:cb:9c:00:96:d6:8d:ca:2e:
         dd:dd:21:ca:0c:40:30:00:b4:c0:ed:0e:01:a1:4c:a6:d3:1c:
         9d:40:64:f0:73:b9:0b:93:f6:b5:ec:01:97:f2:06:6b:84:99:
         6b:4e:90:90:8f:0a:93:1e:54:4b:16:bb:ff:d5:5b:8b:46:3c:
         db:d2:28:91:21:36:25:db:54:c6:3f:69:aa:b2:d2:b8:76:63:
         4b:7d:6a:10:28:f9:df:f5:21:e3:8f:ad:d8:5f:f1:e4:cc:05:
         da:75:0c:00:12:0d:b3:4a:0b:ce:1e:85:6b:02:f0:9e:56:1f:
         b2:97:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----