Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          /6exLxbxXI2M/1HFTmXftvVgXeODQMty4ccbQM0kzmM=
Subject key identifier:   D1:C5:75:33:8B:92:EB:5E:9D:DC:81:25:CD:AC:C5:07:CA:08:8D:54
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       01962E99768B2942376779D86F3ACD16C2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: CWjWI1KElycGegFoxqel6BzyPu8.roa (hash: x51MkWgMWV9H4yeCpFeKV1piMOfEzcOof7b5UghQrtY=)
                          2: TIXlkFRgn5qDeTU5GPtZw50sFgg.roa (hash: StUjGKW5A9Vqz9JKMfVvVB0iqJDXj37ZwmT9ma7BuAQ=)
                          3: Udak3yr2UP3kErzFOUD6ejk40jQ.roa (hash: 0WEzkUde+4+TTVujXlHKRM8FF/Cn6zrziqOLiHqb9kc=)
                          4: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: fSHcYCCwMKmum3HUgdtavmbWjSq+T3XTHROBZlNS4nY=)
                          5: j3Johs7tWdOjWP-RSLyuZS9QCYA.roa (hash: 73D0mNtTe5ysnKB7nrHua4L+6aN6MBQCZz1gs+mdS6U=)
                          6: nCwgDurwC06Anta3aqc5wbxK3GY.roa (hash: 6I1/PwDUPqtalY+y7tNas0+iP9HsSsWLUFXwql/UFbs=)
                          7: wW0am_Aqxc8qtKWqJuBRkTx7-vg.roa (hash: 3MA88INLD4dCx0oFXNeXIYeavG1gLlOTW77Nx0t2APU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:8b:29:42:37:67:79:d8:6f:3a:cd:16:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=d1c575338b92eb5e9ddc8125cdacc507ca088d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:46:d1:ac:da:ad:e0:87:18:43:3d:40:24:
                    2e:05:dc:68:d7:8e:72:25:0e:da:fe:a5:44:f6:3d:
                    d2:1c:50:6e:9a:85:dd:cd:b7:e6:42:95:8d:d1:1e:
                    3c:8e:fb:2e:33:ff:7c:fc:6f:0c:ed:82:fe:de:d2:
                    3c:8c:19:2e:f4:71:d8:57:d3:69:e8:e9:d3:83:f0:
                    66:8b:1e:44:ba:a5:34:e7:14:b7:33:96:c6:f8:3a:
                    00:77:6e:09:33:b7:a9:86:42:08:fa:6f:e7:b9:7b:
                    c3:56:13:6a:c1:d2:4c:fc:99:57:31:24:97:43:8c:
                    26:36:fe:8e:16:a5:61:33:76:8a:84:e6:30:91:b5:
                    2e:76:27:54:63:01:dc:ed:c4:9f:77:56:91:36:62:
                    1d:d0:ff:f6:5d:69:1f:20:33:f8:bd:34:41:8c:b4:
                    5b:ab:a7:50:b2:79:2e:2b:2d:e7:41:6e:e9:d4:55:
                    92:2e:e9:1a:eb:14:f3:a1:aa:a8:f6:13:66:1b:f9:
                    a9:1b:ef:25:d4:7a:eb:c7:ee:0b:fe:a1:02:47:dd:
                    d9:d3:e1:3c:7c:18:37:d9:85:79:38:12:ab:e2:ff:
                    ab:22:60:a5:ab:6e:10:5c:07:5a:ef:41:44:5c:13:
                    4f:12:e6:35:6a:45:91:9d:b6:c5:df:c6:41:f3:1e:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:75:33:8B:92:EB:5E:9D:DC:81:25:CD:AC:C5:07:CA:08:8D:54
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:3d:cb:c1:8e:d5:15:2f:59:08:ba:77:e6:46:11:cc:21:
         4e:ff:27:0c:b3:80:99:52:f9:86:b2:7b:2e:73:e5:5f:3d:39:
         c0:d5:da:30:6d:5c:ae:b6:ac:09:b2:4f:85:a2:0a:b7:e6:73:
         cc:4d:91:61:e4:1e:37:54:95:b8:fc:07:90:69:92:16:70:d1:
         14:26:4b:30:00:ff:c9:54:f8:0d:d6:14:3e:4d:4f:f7:4e:a3:
         09:e3:1c:1e:49:df:8a:1b:a4:a3:9f:3f:97:ce:85:5a:d8:82:
         78:c4:f9:3a:30:f0:60:51:62:fe:59:6d:32:77:f9:22:18:e4:
         51:81:d1:5c:92:e7:8a:6b:a5:3f:7e:3d:50:21:f8:0d:47:8b:
         88:f0:72:62:79:ff:21:51:ec:71:88:c9:a1:ad:74:62:15:aa:
         67:ca:27:bb:54:df:86:b4:7c:c2:51:33:b8:52:05:9f:c8:68:
         96:cf:09:a2:91:6c:eb:41:5f:5e:74:ef:39:e8:9f:10:8c:ab:
         85:0d:a7:7c:5a:4f:ad:9a:e5:3c:c6:63:b7:dd:44:23:8e:68:
         5b:b1:70:ff:e7:8d:af:41:4c:70:fe:c3:50:d0:35:ca:5b:74:
         e1:4e:5e:92:67:4a:37:86:03:87:94:36:4d:3a:3e:91:fe:7b:
         b6:09:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----