Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
File:                     waCjz_MuENnPIeiqvD5LSnG_HdE.mft (raw, json)
Hash identifier:          qQaUv1ePGYJBfWRii4K/M9vkQYDE6TYTq33EgkUfrys=
Subject key identifier:   C3:EC:AA:6D:8F:7B:E6:BA:9F:17:87:EE:31:92:15:A9:9B:98:3E:D0
Authority key identifier: C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1
Certificate issuer:       /CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
Certificate serial:       01948F64238BCFB0AE4D2390717E3F7968D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
Manifest number:          13A2
Signing time:             Wed 22 Jan 2025 19:01:32 +0000
Manifest this update:     Wed 22 Jan 2025 19:01:32 +0000
Manifest next update:     Thu 23 Jan 2025 19:01:32 +0000
Files and hashes:         1: waCjz_MuENnPIeiqvD5LSnG_HdE.crl (hash: c8VbWq06MecU1kCm73Xc4uTsyE3njJtMPBzWTW5b5q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:64:23:8b:cf:b0:ae:4d:23:90:71:7e:3f:79:68:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
        Validity
            Not Before: Jan 22 19:01:32 2025 GMT
            Not After : Jan 23 19:01:32 2025 GMT
        Subject: CN=c3ecaa6d8f7be6ba9f1787ee319215a99b983ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:29:30:6f:fa:56:0d:a3:6f:30:c7:ae:06:
                    a6:0f:50:6c:46:ab:50:bc:ac:f5:5c:b6:98:1b:de:
                    39:49:e9:90:54:7f:a3:ad:2b:d8:77:96:5d:fa:96:
                    61:5b:d3:30:04:14:d7:21:44:db:9b:12:fe:c3:12:
                    9b:79:af:cc:71:7e:84:cb:be:ef:c4:4a:aa:26:2b:
                    1b:0a:4e:74:21:57:b9:0a:6c:10:7f:67:fd:cc:02:
                    89:41:3a:ef:69:ed:77:10:13:1c:b2:57:49:6c:93:
                    a1:e2:fc:66:1b:93:4a:64:79:8d:01:73:84:14:ec:
                    fc:6e:b7:79:5f:fc:41:fa:eb:14:53:6a:a4:78:e7:
                    00:bc:54:b7:a1:3b:cb:13:2f:ff:5e:aa:d7:21:2a:
                    ae:b2:11:2c:a2:c7:1d:d7:b0:d4:1f:02:28:9a:ba:
                    4c:6a:47:da:8e:ef:45:bd:6d:3a:20:18:82:a0:29:
                    93:d1:65:64:87:45:2f:d9:44:9c:31:03:27:96:a2:
                    24:ee:a3:91:84:8d:4a:6c:b9:b2:d3:ae:a6:9a:43:
                    47:81:c6:b2:07:ab:12:db:37:a1:16:1c:02:9e:a1:
                    e0:a3:36:2f:77:e5:26:e2:19:61:e5:8b:cc:4b:ef:
                    83:81:53:8b:bb:1b:0c:f1:8c:6e:30:22:05:8f:97:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:AA:6D:8F:7B:E6:BA:9F:17:87:EE:31:92:15:A9:9B:98:3E:D0
            X509v3 Authority Key Identifier:
                keyid:C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:d1:ad:b8:0a:ca:a7:8a:c0:51:e5:40:b8:a9:20:f4:47:
         4f:de:f5:17:e4:c1:9b:82:07:9e:d9:ef:1c:7f:23:66:ec:9e:
         69:6b:1a:d9:4c:1e:b6:50:08:a5:26:3f:bb:34:de:e5:c5:16:
         7e:78:70:5f:3d:a1:81:79:90:38:75:ec:46:88:e0:ed:2b:12:
         7e:2e:6d:e7:50:8c:98:71:c6:a4:d3:89:bd:93:1f:e4:97:7f:
         8f:df:5c:e6:cb:21:11:00:c6:b3:54:91:b8:b7:ab:66:2f:55:
         71:76:8f:25:26:99:8f:58:d6:b3:a1:48:00:7d:58:58:52:9d:
         a7:b8:91:69:fa:e2:51:bc:be:68:f3:c1:5c:e1:f9:3c:4e:f8:
         f9:17:9b:26:6a:dd:65:ee:f5:27:e8:4b:21:33:2c:98:ba:5a:
         40:14:8b:f8:40:0c:a0:2a:a4:d5:df:e5:c4:8a:f8:e0:4a:ac:
         ef:bc:90:06:48:44:6a:e8:09:ac:c1:46:6a:26:00:e1:fb:24:
         51:ac:6a:ef:40:9f:60:6b:57:46:a4:92:1a:6e:52:5d:fc:e5:
         60:fc:23:9b:d3:40:62:a6:da:98:a1:aa:86:e2:c5:1d:43:12:
         17:19:9b:26:0c:93:a3:39:0e:d8:0a:a4:6e:9d:9e:8f:cf:5a:
         71:dc:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----