Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File:                     WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier:          jEgeeFMcIxbJU7YnHrDBr6B6SNpuPciL/zRrmdKNtz0=
Subject key identifier:   D5:7D:17:97:BE:5B:06:7E:B1:38:69:81:BC:02:E1:74:82:95:B7:06
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer:       /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial:       01962F06B232662B98A2C3F32CC0FD00A2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number:          0A43
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
                          2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: NvFo5zEgEOo34BbRYQpZ8AAfVYdxaA2O16d5iUNwDyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:32:66:2b:98:a2:c3:f3:2c:c0:fd:00:a2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=d57d1797be5b067eb1386981bc02e1748295b706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cb:14:dd:12:fc:58:14:56:6e:b3:66:00:c6:
                    73:6d:ac:b7:17:87:d0:b8:c8:ac:3c:75:0d:8c:b2:
                    01:71:b3:24:b0:a5:e9:2c:c2:e0:f8:3c:73:da:70:
                    02:41:61:47:d0:ff:95:51:f8:74:b8:83:52:0d:bf:
                    30:ae:6c:bb:10:92:0d:3d:22:74:9f:26:b8:1f:1e:
                    5f:cc:df:83:8d:3e:af:dd:f3:9e:ca:4b:32:3e:41:
                    dd:9f:68:0d:8d:01:66:a4:5d:94:20:12:50:f8:7b:
                    ee:49:88:d2:0c:36:6b:30:37:10:88:a7:36:19:93:
                    2e:41:16:f6:36:41:b4:9f:af:d3:b9:2d:50:2d:e7:
                    9a:68:2c:87:7b:51:6f:d2:bc:9d:d1:3b:36:19:39:
                    92:8a:c7:ac:fc:25:0a:f8:0c:c5:60:77:e0:c3:e7:
                    9e:4c:33:ee:6f:b8:f2:9b:44:7e:c3:f3:24:f4:e3:
                    af:00:6e:8d:d0:c1:97:e7:d6:af:c6:fd:72:7c:1a:
                    10:e8:83:04:c4:e8:ce:18:60:0a:63:fb:02:2a:e6:
                    a0:d5:13:0e:39:0f:07:a7:c7:ee:a1:cf:b3:32:24:
                    ae:c5:ef:ff:86:ad:35:97:f1:7d:24:88:df:ed:40:
                    03:32:5e:3e:cd:8f:ff:e4:e8:d5:01:6a:b7:c5:16:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7D:17:97:BE:5B:06:7E:B1:38:69:81:BC:02:E1:74:82:95:B7:06
            X509v3 Authority Key Identifier:
                keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:92:34:69:9a:30:fc:00:55:04:70:12:3d:60:ac:61:ba:
         45:12:78:59:50:63:ae:55:72:d6:bf:ab:af:9a:e7:99:23:4f:
         01:a0:fc:d1:0b:bb:fa:b7:97:d0:32:f7:ce:59:73:b2:97:68:
         08:98:56:af:3b:e4:39:76:39:f5:f1:bc:fa:b6:bf:d2:e4:2a:
         34:92:a2:a0:8b:67:90:4d:11:8f:ee:5f:59:56:22:9f:86:f5:
         de:a8:d4:da:f8:bb:32:e0:1e:25:27:56:e1:49:7e:98:86:4f:
         35:24:e2:c0:9f:d8:37:32:bf:17:cb:b4:3d:77:4b:fc:ba:9b:
         b5:70:96:ab:c2:ba:a5:b5:b6:95:ef:19:fc:7b:74:74:e9:c5:
         fe:87:46:5e:18:0d:5a:cf:f1:52:4c:00:9c:91:8a:09:3f:ff:
         7b:d7:e7:ee:7b:36:7c:73:dc:6f:ea:47:67:d4:38:14:b6:d5:
         91:c3:1b:c0:22:45:37:c1:71:3d:9a:88:7a:58:91:38:23:03:
         69:e1:31:0b:00:56:7a:4f:e8:7c:1e:74:3a:2f:ae:11:a9:f6:
         b3:c6:83:7b:79:d7:28:a9:b2:39:9c:99:52:a4:53:d2:1c:2a:
         ad:73:01:67:83:33:85:e4:0c:60:bd:12:15:a0:af:d5:8e:62:
         3b:b6:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----