Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          24mBz1zX1DsGPIC/DV8MUmshvU5h3oLXjlkPfHPlQB8=
Subject key identifier:   4D:BE:41:F6:3D:16:2C:F8:A6:EE:59:BF:D4:06:42:6F:27:F1:67:E0
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       01962F0699CAC429E98A6197041D72B1E91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          02EC
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: RE5hObodnlVzPY2NC9fBqxqamSo.roa (hash: vt4HA66geUCnP70MZ/cuIbrc9l462uvO+5uycK2tf/g=)
                          2: huVpaDuOyP7YO_hg-K93nMNZjQI.roa (hash: kb027+6ralND9X0aHEkf2xrhEHp9EQN+J7LlYr7HG58=)
                          3: jhFFnOfiUX1beQnMdFI7HQkXMu4.roa (hash: 3FY7Qpzpo28uDSYDS9CvGlbhOup4Iwr9S2FVCDXO+eg=)
                          4: jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa (hash: LWFdrbfxp7Y32HBXjHLDhwbHmx4AJjStWSjMklLVIJw=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: Eu9ReFppGLWGEGPshFQ77gFJ3R22+ZtcLYojRdaSjhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:ca:c4:29:e9:8a:61:97:04:1d:72:b1:e9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=4dbe41f63d162cf8a6ee59bfd406426f27f167e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:f9:ed:56:60:5f:f9:75:6c:c3:f3:31:69:
                    29:68:36:a8:d4:c1:52:06:8e:3c:4d:5d:00:88:e6:
                    a4:47:d9:c6:84:a2:68:48:af:a9:e9:32:69:30:27:
                    0f:29:b8:89:1e:22:7a:0f:1a:88:41:c8:67:a7:05:
                    8a:b2:65:98:86:60:73:58:61:ad:b5:88:e4:88:c6:
                    13:d5:a4:d4:79:76:e2:d6:6e:c3:f3:14:bb:de:58:
                    10:32:47:7a:b7:df:0b:26:4f:06:67:af:65:b9:cf:
                    0c:04:1c:19:90:9e:df:7e:18:cf:89:96:11:6b:a0:
                    6c:49:6d:0f:5c:08:57:81:cd:c1:cf:7c:19:22:73:
                    4b:5c:7d:fa:a0:61:9b:9a:cc:84:2b:84:85:83:42:
                    f4:dc:80:ab:b4:64:2d:b6:8d:e3:d1:be:2a:7f:67:
                    43:2d:ff:b6:03:75:d9:ac:f6:1d:e2:22:9f:d6:9b:
                    58:f5:08:b3:4b:be:ca:3f:64:58:76:05:12:2a:ba:
                    58:14:55:f8:50:85:08:30:fb:89:8e:84:d5:de:4d:
                    39:b6:44:a7:fb:b9:18:d9:7d:21:62:00:e9:cb:e5:
                    cf:e9:0e:9b:ec:1a:13:5b:01:78:1f:8e:15:5e:6d:
                    fd:7e:0e:3e:f1:3e:2e:a7:8e:06:1f:ef:1f:86:4a:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:41:F6:3D:16:2C:F8:A6:EE:59:BF:D4:06:42:6F:27:F1:67:E0
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:cc:92:db:84:f7:ae:9a:a8:32:ba:ef:bf:14:85:08:4f:
         05:f2:2a:35:71:ed:4b:a0:91:1c:e9:67:e0:e2:f5:4d:e1:62:
         41:c2:5f:08:c9:05:7c:c3:8f:7e:28:50:c8:f2:3c:3d:a7:e0:
         9b:5c:e3:7d:33:fc:fa:fd:94:0f:6d:82:89:74:cb:6f:8c:cf:
         d1:68:bb:e1:b1:fa:d5:db:1b:69:78:f3:11:71:6c:f0:cd:c6:
         9e:0e:97:19:54:ed:52:d1:a3:22:80:9a:66:48:c2:6e:7a:7e:
         25:a7:52:82:fb:75:76:51:4a:4f:16:12:f3:6a:78:7e:35:d7:
         e3:35:bc:ab:e6:2c:da:36:43:bf:35:32:ae:e8:df:2d:3f:ee:
         34:c0:36:7c:dc:88:0a:0d:11:9d:ef:74:7f:37:08:d9:50:cb:
         2c:4b:9d:87:71:53:9d:dc:b8:44:f4:32:22:b3:32:45:89:4b:
         cc:fb:fb:72:e2:f6:f0:56:44:13:6b:f2:a3:d4:7a:02:52:86:
         07:3d:80:73:be:fc:fa:2e:ea:dd:ec:1d:1e:7c:18:94:99:42:
         6e:ff:cf:21:90:d7:b2:e6:80:47:9a:ec:d3:e6:f0:cd:a7:b1:
         e0:6f:09:1f:d0:20:72:97:15:c0:bf:b9:e8:91:6a:6c:cb:89:
         b1:27:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----