Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
File:                     W3jiiHXnMAJWzM62gfCmAIc9eVI.mft (raw, json)
Hash identifier:          v/twEkeQEwCmAdu8V52MrVc1+nYVTUgNh3Shp3X+YNA=
Subject key identifier:   E1:AD:C0:F7:E7:D6:FD:10:28:71:FE:88:0A:81:4B:64:C3:A2:9A:B5
Authority key identifier: 5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
Certificate issuer:       /CN=5b78e28875e7300256ccceb681f0a600873d7952
Certificate serial:       01962ECFC3EA2C21EDDCA817E693F134BBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
Manifest number:          0379
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: W3jiiHXnMAJWzM62gfCmAIc9eVI.crl (hash: KGVROQxgLgPq6i1+7CAi+cKElE7xTa8d9Qgd2ZBstwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c3:ea:2c:21:ed:dc:a8:17:e6:93:f1:34:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b78e28875e7300256ccceb681f0a600873d7952
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=e1adc0f7e7d6fd102871fe880a814b64c3a29ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:ef:28:93:8b:c6:f1:36:4e:e2:ec:a6:22:
                    a8:5a:9b:76:9a:56:6b:b2:9f:df:2b:7c:c2:ac:e2:
                    c0:38:30:fd:df:76:29:0b:40:94:97:26:82:94:6d:
                    ae:c4:75:63:92:77:b3:83:7b:4c:d3:34:60:63:29:
                    28:96:29:39:58:da:d5:25:64:11:f8:82:4a:29:f5:
                    5c:a1:3f:77:c2:55:d5:19:f5:38:54:0b:99:d8:b7:
                    b9:83:ce:53:f4:53:e1:bc:9c:bd:07:03:e1:3c:7b:
                    a8:8c:19:20:19:55:9a:59:ee:bd:ed:81:06:9d:17:
                    9e:ee:e2:a3:83:cb:30:bd:81:c8:4a:84:4e:4a:e3:
                    06:e3:c4:a7:d8:93:71:a3:aa:a5:93:87:7b:b3:e3:
                    cf:2e:98:c5:63:46:3e:dd:da:2e:52:1e:7e:36:c3:
                    3e:0d:cd:d7:c0:fc:f6:09:e9:b4:e9:e4:24:d6:d0:
                    51:e5:b5:64:84:53:86:92:05:b5:16:f6:16:00:b9:
                    d3:9e:15:27:71:19:fa:ab:3a:bb:28:ca:b6:c2:6c:
                    42:b6:fe:6b:e0:83:bd:19:39:c3:4b:a5:ea:7c:7a:
                    bf:3d:13:9d:de:f6:0d:a2:f1:67:77:2f:5a:29:cd:
                    f9:2e:04:ca:3a:95:b0:12:92:da:5d:09:65:7b:81:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:C0:F7:E7:D6:FD:10:28:71:FE:88:0A:81:4B:64:C3:A2:9A:B5
            X509v3 Authority Key Identifier:
                keyid:5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:50:8c:c4:28:06:14:3a:36:09:ef:a3:14:52:bf:33:a2:95:
         bd:17:46:2d:f1:ab:bc:c9:c1:e5:96:91:bb:6e:eb:c6:2c:40:
         88:e0:fa:32:35:bc:ea:c2:42:3b:32:01:6b:1a:24:9f:95:2c:
         e1:b3:fd:a1:00:e6:67:e4:63:ba:2d:e2:d9:49:31:46:a9:c0:
         03:73:c8:02:99:74:49:f7:ec:d3:ff:dd:cf:b5:2e:cc:93:97:
         31:d4:4d:a1:7d:c2:df:e3:23:27:d6:36:28:9b:8b:a3:48:e5:
         e5:9b:c5:de:f3:7c:36:47:7e:77:3a:4c:57:ef:63:05:2d:c2:
         b4:d0:71:09:ec:82:f2:f2:0b:77:c8:58:78:a3:78:c3:07:20:
         98:0b:25:1d:9d:97:0f:6a:f7:f2:db:fb:04:37:d5:7e:08:b3:
         15:72:8e:9d:44:8b:8b:ad:cc:b5:02:e8:36:35:57:aa:97:5c:
         74:f8:1d:6c:98:38:3b:82:c2:17:a5:a5:5c:05:36:d0:19:19:
         4d:c6:e7:fb:81:8c:08:f8:c2:da:4b:83:46:5f:56:21:3a:61:
         28:c0:b1:4d:10:3b:e9:00:90:c2:96:3a:13:6f:da:ad:59:45:
         d4:3c:44:ba:95:0b:96:31:19:7e:22:a9:f6:de:9c:3e:de:00:
         c3:f0:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----