Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
File:                     WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json)
Hash identifier:          FtSDkDRwDE3Lk+nfJBZ7WCiGCgg0nRD6z5dUmBdd4T0=
Subject key identifier:   AE:89:57:97:A4:82:B6:6D:2C:5D:A7:84:35:57:8C:A6:B9:2E:1C:BD
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Certificate issuer:       /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial:       01962FAB81C4162C67FAC640BB6AE95896F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
Manifest number:          0A10
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 5eabaHyJMZC6xaOfXyNUDeK_Rik.roa (hash: TiX60vap4EuHd5z3yDdwzlNIdcxuV5BI27iNpoK9+cI=)
                          2: 9IgQeewcmfQZ2of_HORQ6vbbFA8.roa (hash: sNpLBHfgEi3gbYovfnENOUMmh30fF1DezNwtozBcHSM=)
                          3: FgtwQexIijsiy2UYh5s3NHupI_U.roa (hash: gAA0vHeWOanEfgm4YCjsO5KuF3+dtv6jFZrage6sq5I=)
                          4: IVogcCidyN1dNuwpsamnpeeBOzo.roa (hash: dkkhuPZPZuxNohscz0NJjTL21i/+81ygggp48FtsTTU=)
                          5: Iz0OKJRfyer26_x0SY8wqmCTEJs.roa (hash: HkA+qgxdvNNdPmwk6Y1yGdSU/udB+TT9eU5dbnjc99g=)
                          6: K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa (hash: Yhb6Fai21E+jsd4/blJv2P5GA32ORQPomY/nTv3MFQg=)
                          7: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: fAkeUGXD+AZKk0/v7GarqZMNqgnt0lu4jkGGgZAAsxo=)
                          8: jm_LwTAsKa9hMc9LKIm0Nv8-66A.roa (hash: GfUSYnSkjh7ptVBb/X/b+7Fylh0BdmY1nbsxoYo2vaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:c4:16:2c:67:fa:c6:40:bb:6a:e9:58:96:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=ae895797a482b66d2c5da78435578ca6b92e1cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:71:29:9b:99:44:da:d9:9d:37:22:7f:30:
                    38:43:d7:d7:55:25:09:ab:52:fb:25:b8:f3:63:7d:
                    02:65:8b:5d:37:3f:b2:8b:be:92:99:70:39:3a:b8:
                    54:f5:63:e2:1c:3e:03:f6:a4:47:46:5b:a5:47:8e:
                    97:af:6f:6e:4f:46:61:8f:b3:b5:64:8f:1f:bc:a6:
                    de:eb:f6:9e:de:a9:ab:8c:6c:89:8b:b5:a3:48:c0:
                    4f:d0:03:5e:d9:cd:32:ff:61:0b:ad:67:1e:8a:e1:
                    4a:0c:0a:e1:09:98:c3:19:b7:fc:41:e5:2e:a9:2f:
                    15:a3:54:4b:07:a3:2d:de:9e:ac:64:29:f5:23:a3:
                    3c:dc:fe:19:fd:e5:b2:a8:6e:43:93:62:da:3b:5b:
                    97:24:f0:ef:8c:29:3f:ac:0e:22:5c:3c:7b:86:73:
                    90:bc:f1:25:f9:ab:91:92:35:b9:b5:09:a2:6d:6f:
                    16:c1:38:c6:2f:6e:0d:d5:2f:8d:45:fe:eb:b1:4c:
                    97:c3:a9:5c:14:01:c3:bd:f5:b2:ca:45:c9:5c:77:
                    10:87:27:f8:92:69:78:a4:0f:72:f0:3b:c9:2c:5d:
                    ee:e8:4c:a4:c1:e5:86:ec:1f:49:3c:c2:8c:14:cb:
                    d2:a4:ad:4f:2b:a5:99:47:d6:9b:ad:5f:73:01:62:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:57:97:A4:82:B6:6D:2C:5D:A7:84:35:57:8C:A6:B9:2E:1C:BD
            X509v3 Authority Key Identifier:
                keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:09:5d:2c:33:18:bf:05:aa:f0:8d:71:2d:19:aa:fb:0f:
         d2:65:0e:2d:01:3c:66:03:ca:c7:28:05:a5:16:ba:0d:9c:23:
         62:57:e6:ae:7e:83:c1:af:a7:fd:4a:3b:5c:e7:e0:3e:2f:b8:
         be:cb:69:03:73:4a:e6:db:8c:8f:0f:d7:a9:47:d6:76:1d:54:
         c3:6d:26:90:c4:5e:30:f7:ab:2b:97:24:1e:ad:89:9d:da:e9:
         53:36:14:5a:2e:bd:75:6f:52:9e:87:9f:a6:e4:e0:93:ad:0b:
         05:7e:1d:2e:56:8a:c8:f6:1d:a7:14:79:29:38:f0:52:2f:e2:
         ff:6d:b0:bb:2d:0a:11:68:41:5e:27:13:b0:10:30:0b:2d:f3:
         cc:94:41:4a:df:9b:0a:30:ac:a9:89:7b:21:94:8e:56:73:78:
         e9:50:29:d9:20:40:79:63:3e:56:05:49:30:07:6f:91:26:88:
         73:c8:d6:fe:41:d4:49:b8:6b:70:52:4e:d8:60:85:1e:ac:68:
         1c:e1:fa:13:2f:89:fb:8a:77:8e:14:ca:0b:5c:2e:29:b8:23:
         57:33:41:71:4f:86:7d:f2:a3:b1:c2:50:ff:7d:8a:9a:23:df:
         26:68:53:bb:3c:05:79:5a:7c:83:d2:7a:6c:94:03:43:f3:b6:
         f1:69:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----