Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File:                     wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier:          4RNCJ1ywzV0cPeDtXcDGvXAUbORaTo9ZVXPDfei5FnQ=
Subject key identifier:   8B:24:FA:FC:F6:41:FE:C7:59:E7:D3:4D:F9:EF:A6:3E:96:BA:31:08
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer:       /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial:       01962F747DB293498B2E727B93B40E5DD459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number:          110D
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
                          2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: gM8/GcEkgjjj9BFGVXxbPOdw4TwdAJyKCDxjl2Rhzdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7d:b2:93:49:8b:2e:72:7b:93:b4:0e:5d:d4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=8b24fafcf641fec759e7d34df9efa63e96ba3108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:8e:14:6d:c7:fe:39:86:82:cf:7a:74:91:
                    38:39:2d:f2:49:15:d7:c3:de:2a:a2:25:08:c5:78:
                    e0:d0:12:81:74:3c:9c:5a:bc:80:8c:c9:46:46:83:
                    e7:4e:bf:f5:1c:fc:62:e1:46:ca:46:e0:8d:22:26:
                    62:26:42:e5:5e:f6:bb:b3:53:1a:93:4e:70:63:cf:
                    ae:f5:8d:34:42:9d:7a:e7:26:c7:6e:97:35:42:d9:
                    00:43:92:7c:42:5b:cb:76:e3:f7:59:96:97:18:23:
                    f5:e2:4f:8d:1a:a0:01:9e:b0:a3:d9:cf:a2:02:ae:
                    ad:f5:a1:d2:93:8c:e7:7c:83:25:cc:08:ae:b0:ba:
                    18:07:6f:d5:6c:f9:ff:e8:76:67:72:f3:43:0f:f6:
                    e3:82:95:37:2e:ad:55:1a:32:8b:7e:71:21:e9:82:
                    bc:af:d0:41:45:0e:f3:5f:32:fb:d4:c3:a3:e2:a8:
                    39:b1:6a:1e:41:ff:df:b8:cd:c3:87:e8:23:2e:1d:
                    57:00:97:7e:ca:de:8c:1f:c2:36:9e:87:6e:29:09:
                    e6:7b:85:1c:5d:0d:a8:0a:2d:56:d0:b8:25:0f:4e:
                    ad:10:cd:0e:80:5a:8b:28:14:7f:83:40:13:e1:a8:
                    58:60:e6:37:4c:b1:9c:4c:51:94:ba:0c:7e:88:9e:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:FA:FC:F6:41:FE:C7:59:E7:D3:4D:F9:EF:A6:3E:96:BA:31:08
            X509v3 Authority Key Identifier:
                keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:a1:22:8e:76:79:94:4d:83:91:77:bd:38:16:fc:a3:ed:
         ce:e7:6b:71:97:5b:c8:24:f0:8d:38:ae:52:84:ed:a6:49:1c:
         6b:2c:fd:7e:e3:a2:11:8b:7f:ac:73:c6:95:94:d6:0f:89:65:
         51:5e:dd:eb:90:c1:a0:71:31:ca:60:e4:74:45:a7:d8:99:63:
         17:a4:81:9b:16:ea:87:6c:09:95:9e:4f:b0:37:a3:0b:da:d5:
         3d:f3:00:5a:61:e6:89:53:6c:fa:8b:1b:14:b4:04:27:33:06:
         a6:92:d1:64:9b:b2:74:ea:da:b3:6a:65:02:a5:b8:0d:80:64:
         93:5a:4e:04:04:58:59:ec:84:22:84:ab:6a:d2:0e:ac:b8:96:
         fd:b8:77:f5:e1:0d:97:e3:7e:87:f6:e3:dc:11:e1:f6:a6:b8:
         ed:a2:32:2d:d6:0c:06:f0:46:07:10:f8:99:0b:e6:f5:d6:b0:
         d9:28:dd:c4:e2:f9:6a:8a:43:29:8d:e5:ba:1d:bf:bb:48:ee:
         53:0b:e9:dc:a5:6f:1b:5a:75:5c:05:33:a8:1b:be:89:1d:aa:
         f2:0a:13:74:99:43:7a:1e:49:66:3c:40:b9:44:de:03:17:3c:
         99:3a:a4:8d:61:ea:61:18:4d:a0:9b:ea:24:e2:38:28:20:7f:
         25:b8:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----