Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File:                     WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier:          GEw8sWn9ViIlcKo1hHtAzh21J5q0p+KX46lGqyW5Z+M=
Subject key identifier:   DF:C4:87:AC:FE:48:23:F3:D6:CB:00:BE:A5:C0:84:F6:34:A6:D0:22
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer:       /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial:       01962F74B47AAECC181E854A6676DC38ACD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number:          124A
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: 5f39i09+fSnm4OUZEyd/7g0/GscOSPEA5TNFO3OEfdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:7a:ae:cc:18:1e:85:4a:66:76:dc:38:ac:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=dfc487acfe4823f3d6cb00bea5c084f634a6d022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:44:30:47:a1:d2:15:ff:de:27:9c:4d:fd:
                    0d:15:f4:36:6f:22:2b:0d:30:de:67:24:92:cd:61:
                    d4:96:e0:f2:f0:61:f5:18:b3:3e:48:0a:1a:e3:19:
                    ff:57:8b:c3:87:38:20:94:cd:f1:bd:27:ff:27:28:
                    cc:fe:0b:fc:15:86:54:e2:35:ef:d9:6e:02:19:d8:
                    c8:22:4e:da:a8:85:c1:ff:ef:5e:f5:1d:f5:39:05:
                    8f:43:4f:d4:97:ed:9c:d5:92:15:19:1d:a6:07:04:
                    d6:30:55:5d:5e:9c:70:8a:ed:c2:40:7d:7d:f2:a5:
                    a6:69:25:e1:5f:35:af:35:0c:08:05:45:ef:44:c0:
                    e1:eb:07:cf:b7:a3:37:ec:9c:8a:4e:cb:d7:4f:ef:
                    a5:37:40:94:89:95:71:bc:5c:af:d6:8c:50:fe:eb:
                    57:05:7e:d6:a8:47:36:57:ae:b0:8f:28:5f:47:bd:
                    72:d3:75:05:37:85:ca:21:28:20:ad:79:ee:a7:ee:
                    19:38:66:4c:3a:96:59:a8:db:35:6a:e8:e2:6b:72:
                    35:e4:a2:bf:8f:ee:c9:2d:c3:43:1d:23:7a:01:13:
                    94:17:ae:99:f1:37:99:68:4f:13:3c:90:69:74:0b:
                    1a:b2:a8:e5:85:da:f4:91:82:df:8b:a0:58:de:90:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:87:AC:FE:48:23:F3:D6:CB:00:BE:A5:C0:84:F6:34:A6:D0:22
            X509v3 Authority Key Identifier:
                keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:19:50:46:93:77:5a:f1:3d:1c:f9:60:65:34:dd:18:cc:61:
         14:19:29:30:54:83:97:cd:bb:00:c6:d8:d9:ae:a0:a9:25:a6:
         e1:5d:59:8a:bf:07:df:5e:7a:16:3e:92:eb:76:94:21:ec:2b:
         6e:51:c4:03:97:07:ce:0a:57:12:33:10:d8:3e:fa:29:a2:b0:
         3a:f8:3f:d1:12:a0:56:18:2f:a5:46:80:87:9e:21:c5:51:a3:
         5a:68:da:0c:39:bb:a7:96:ac:8c:20:b9:de:8f:a4:9b:4a:dd:
         b1:7e:c8:9b:0a:6d:05:91:b7:63:77:ca:a1:d3:70:d9:a9:66:
         63:d4:ba:47:a1:44:26:a7:27:09:70:5d:da:a3:e0:ec:eb:c7:
         c1:7d:3b:17:9f:81:3e:a6:b5:7a:d5:9b:42:e7:58:97:48:25:
         63:ae:eb:4e:cf:50:26:db:7e:59:61:ae:a5:41:43:ba:8e:db:
         89:0d:9e:c1:d0:bf:c0:2a:17:25:e5:d3:83:47:21:db:6b:57:
         c6:ba:cf:a6:f4:b5:2d:8a:6c:e5:17:37:db:bd:2d:a2:78:99:
         65:e5:30:ef:26:89:e0:eb:73:ff:7d:a0:cf:61:f2:8c:f4:58:
         05:ea:70:b9:27:de:cf:0c:92:4e:61:ed:db:44:c0:59:b7:67:
         4a:97:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----