Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
File:                     WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft (raw, json)
Hash identifier:          OehF5hNzmogQYK/EOBSDAmNN5lKUTyWt3WRQbOi2GXU=
Subject key identifier:   BF:08:1A:AD:B2:35:05:74:49:C1:37:15:24:82:C9:D0:9A:24:14:66
Authority key identifier: 59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
Certificate issuer:       /CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
Certificate serial:       01962F0701CF0F3553970E98B81884D0C9A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
Manifest number:          01E1
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl (hash: jISO5RnD3uI9Hul7c3oCV8GTucjp7w28FyLEsNNtOcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:cf:0f:35:53:97:0e:98:b8:18:84:d0:c9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=bf081aadb235057449c137152482c9d09a241466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:9e:ab:2c:ea:e4:8e:1f:91:90:82:d3:34:
                    b9:5c:56:a5:f6:fa:71:44:c1:fa:5f:a1:46:b7:93:
                    4f:3b:21:23:86:89:73:2d:6a:b5:ac:40:55:09:0b:
                    00:ce:cd:8c:61:9a:f0:f0:bb:00:88:82:b1:9f:97:
                    ae:3d:2a:a4:90:2d:12:f0:1c:17:8e:c9:dd:8d:8d:
                    5f:1c:84:ff:ac:f0:6d:3d:c7:10:0e:96:0d:4d:f6:
                    73:3f:d8:76:8d:5b:54:d6:63:3c:45:a1:32:43:23:
                    fc:8e:6e:21:cd:66:cc:a0:69:f0:1a:98:25:86:fb:
                    89:a9:60:35:e1:4f:1c:d9:dc:68:c8:7b:ea:23:e1:
                    c1:e6:35:64:1a:37:1d:c6:bf:4a:3f:bb:e6:a7:9a:
                    18:64:25:a1:fd:55:bf:53:aa:51:c2:3f:a1:a6:b8:
                    5c:39:e4:89:3c:29:63:be:ed:0b:60:9a:0f:db:1b:
                    5c:e9:86:f9:14:1d:5c:60:76:73:81:e0:96:46:15:
                    47:59:fb:f1:26:ad:36:fe:86:c0:04:ef:3a:3d:d4:
                    56:6b:ba:14:c6:7c:91:58:c3:9b:35:3c:0f:e7:7c:
                    68:a6:36:14:f6:ea:cb:ff:16:15:7e:62:d9:99:52:
                    4e:c3:0f:51:5e:04:75:ea:15:24:25:22:b5:2e:01:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:1A:AD:B2:35:05:74:49:C1:37:15:24:82:C9:D0:9A:24:14:66
            X509v3 Authority Key Identifier:
                keyid:59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:1a:47:7d:b6:09:f6:52:34:65:8c:d2:9c:fd:1d:8a:ba:
         e0:65:48:a1:da:36:38:6e:9b:3d:7a:78:d3:7d:24:bd:a0:95:
         27:c9:de:ed:c5:7f:92:46:2a:c7:aa:53:79:2d:4c:6c:f5:0a:
         e0:1c:fb:69:4f:a8:9a:36:9d:db:31:36:73:b3:61:3c:60:1c:
         87:15:90:50:81:67:1e:c8:89:f6:48:b9:af:48:e4:64:20:9e:
         15:bb:db:6c:de:c7:80:a5:40:b4:83:97:2c:ea:8a:e2:95:3e:
         fe:35:15:88:3d:4b:d4:e5:0a:51:f7:e3:63:66:15:3c:79:01:
         96:79:b1:83:96:f9:33:9d:82:c8:f3:dd:07:93:bb:b8:c8:63:
         9d:1a:20:24:da:a9:3b:a0:14:22:35:b4:7d:e2:dc:c1:e4:5c:
         1d:ec:0f:64:f7:a9:d7:a5:36:8d:32:56:f8:56:9f:43:d8:75:
         f1:cb:ff:e1:66:b1:bd:4a:84:ca:fa:bf:e5:7a:bf:d3:35:de:
         6c:d4:b0:e1:12:71:d5:97:1c:7f:6d:c3:6f:7e:d2:ca:c1:cd:
         b6:ed:90:c7:ef:f0:2f:23:21:6d:99:19:a2:22:9d:9a:e9:a6:
         bd:7f:d5:fd:05:8c:5b:af:77:58:13:f9:4d:b5:fc:fc:8b:c0:
         20:0b:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----