Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File:                     WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier:          YaN/NbiQ88l0SmLbRyCly1beqpHnAtQLzsB/jY4CJM8=
Subject key identifier:   51:AD:D7:8C:B1:9F:4F:9F:1C:38:44:EF:6B:F2:BC:13:EA:81:F4:19
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer:       /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial:       01962FAB57BCA8676140782ADF800E5E5A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
                          2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
                          3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: nGcoJ4/YqorCQ0Un4Onu2rhOo2nHNds58y+aN4Xg0zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:57:bc:a8:67:61:40:78:2a:df:80:0e:5e:5a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=51add78cb19f4f9f1c3844ef6bf2bc13ea81f419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:b0:22:38:7e:27:fb:21:13:80:7d:60:81:
                    0f:27:76:de:e4:81:26:34:02:95:df:e0:bd:4d:f2:
                    15:b5:74:be:c5:a5:07:3e:fc:7f:76:7c:da:53:9a:
                    bf:12:77:c9:66:03:b3:7e:3f:73:f7:c4:13:c7:4f:
                    aa:d4:0b:9e:04:e6:88:ac:9d:50:67:88:8c:08:ed:
                    d9:56:d6:f3:68:03:a9:97:0c:45:57:04:f3:b2:2c:
                    9a:53:49:0e:6e:36:1d:a7:d3:46:e9:16:b2:5a:f9:
                    6f:08:04:cc:b8:f2:b8:2b:ba:ee:0a:b2:86:9f:aa:
                    4a:8d:e2:64:c0:58:10:03:0a:74:cb:96:e3:3c:a8:
                    95:a2:dd:eb:8a:95:0f:ad:c0:7f:0f:0e:93:6c:81:
                    b6:82:fa:0d:6d:1a:a5:e7:9a:a3:00:c2:82:01:37:
                    76:41:dc:0c:51:ed:1f:15:1d:47:17:0d:31:e3:1b:
                    64:57:80:e2:03:ba:c1:3a:a6:6c:92:bc:af:33:3a:
                    d6:40:b9:33:f7:ee:0f:f7:13:25:68:47:7a:6f:c7:
                    7e:10:88:09:56:b6:33:c9:29:9d:cf:75:02:70:05:
                    69:2d:e2:32:3b:e1:b0:b9:40:ca:ad:d9:b7:3f:f9:
                    c5:aa:23:56:fb:e9:ee:02:f7:78:72:14:3d:5d:98:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:D7:8C:B1:9F:4F:9F:1C:38:44:EF:6B:F2:BC:13:EA:81:F4:19
            X509v3 Authority Key Identifier:
                keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:a9:b4:27:6b:23:1c:b9:f6:da:b1:8f:ca:f6:9c:e5:a5:
         eb:fc:82:92:27:24:e8:2e:c4:11:05:4c:ad:e0:68:9e:77:6f:
         75:ba:b9:70:f4:f9:7d:1f:09:08:10:7b:74:76:e4:d3:3c:75:
         72:b7:22:b4:7c:ea:8b:5a:f6:8d:3b:94:71:8a:08:9b:46:f2:
         70:55:30:da:72:03:72:b9:e5:04:ee:0c:bc:18:d4:fe:b4:7d:
         09:a2:a6:46:9d:e6:8e:06:36:f8:55:b1:10:59:ac:6e:d9:97:
         6a:eb:c1:28:f3:91:33:23:5e:80:94:16:16:51:ea:bc:d1:68:
         67:bf:1b:dc:24:1b:6b:36:09:d1:75:b1:eb:35:d9:7d:0c:87:
         3e:0f:1f:a5:97:a5:ac:02:0a:cf:64:0d:ff:a5:43:4b:58:99:
         18:44:5f:16:70:e3:91:ce:3e:3a:42:98:88:f6:21:c2:0f:35:
         e2:1c:fe:7c:d2:6b:0b:02:d6:d4:c3:8b:da:ac:5f:b6:f0:3b:
         c8:60:30:37:cd:5c:31:2f:0d:15:e7:a2:48:44:ba:27:2a:bd:
         7f:9c:c2:8a:41:e6:ec:ba:b1:87:15:14:51:91:ac:de:82:e7:
         87:4c:ee:53:74:79:42:8a:1c:a6:c8:cf:36:02:e0:c2:4c:73:
         c5:35:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----