Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File:                     WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier:          wnFikyC2/8ukRv0wL71rEzGsZHLDC+v2xk/ZKOpxpyE=
Subject key identifier:   DD:B9:0C:F6:8F:BB:70:7F:4C:69:D6:7A:B0:52:CC:00:63:89:01:9C
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer:       /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial:       01962FAB5FF575F79642C39C9C7F68743297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number:          019A
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
                          2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: MsZdrPe351u2NfrGbVKhr4MTCUiIkZyA18jkORGbctU=)
                          3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5f:f5:75:f7:96:42:c3:9c:9c:7f:68:74:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=ddb90cf68fbb707f4c69d67ab052cc006389019c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:58:6f:e3:78:12:d6:a3:23:17:24:7b:53:
                    7a:cd:2c:02:c2:ff:a3:ac:cc:41:12:d1:e3:68:d2:
                    ef:51:36:f7:fc:96:87:84:87:22:2b:96:f4:55:d3:
                    d9:e4:c2:b5:b7:1f:67:25:7d:7a:30:4d:48:b8:06:
                    27:05:2a:db:78:7a:b7:9c:2a:16:3b:00:3a:05:bf:
                    06:d2:5a:dd:8a:8d:39:bd:cc:52:4e:c9:1b:1b:ba:
                    88:b9:6f:b2:bb:77:f2:ab:1f:42:71:54:53:17:7e:
                    26:1d:32:45:e9:ec:f7:94:35:66:e6:68:5d:19:c8:
                    f6:ea:75:44:5a:00:dd:75:c7:86:26:a8:dd:59:09:
                    44:f6:5a:6a:e4:3c:44:c4:51:9b:6c:8f:93:68:0c:
                    54:24:b0:05:16:57:4d:b0:07:95:21:5f:87:d3:82:
                    bf:4c:57:17:4e:5a:59:55:16:d9:4f:89:61:0b:22:
                    d5:f2:c9:00:8a:73:20:cd:e4:33:bd:2d:f3:b7:86:
                    21:c7:d9:d9:4a:47:dd:f7:23:b0:0b:76:e1:5b:67:
                    3c:5e:ae:2f:10:dc:86:8b:00:ef:00:96:e9:12:d6:
                    4f:0c:04:bf:3e:31:3d:6f:3e:ff:ec:eb:9d:ee:02:
                    f9:1b:bf:ee:a8:8f:0f:1c:4a:08:7b:33:54:d8:c4:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:0C:F6:8F:BB:70:7F:4C:69:D6:7A:B0:52:CC:00:63:89:01:9C
            X509v3 Authority Key Identifier:
                keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:f9:37:94:05:ae:03:e7:04:01:a0:28:7a:12:86:b8:84:
         33:f1:37:88:98:ec:9c:38:3c:b3:7a:21:51:72:2f:d3:13:56:
         7d:43:47:fc:c0:92:3e:ea:26:a5:24:dc:70:4d:1d:3f:62:d4:
         f2:bf:e2:0f:f3:0d:4f:47:1b:b3:1c:b7:18:e6:04:4f:5f:93:
         c6:92:cc:27:89:87:5d:a7:b0:5f:d9:4e:48:c2:35:af:58:58:
         0c:23:a7:a2:8e:5e:75:0c:c9:70:43:78:f2:b7:7f:0e:1a:7f:
         ef:62:ad:b4:ee:2d:9d:0a:15:43:50:03:ed:10:94:d8:cc:a6:
         7f:0c:6e:f5:d6:4e:75:3e:a5:6b:53:80:cc:32:e3:eb:37:59:
         a0:32:87:7a:20:a6:c3:e8:61:9b:41:25:1c:c7:78:cd:72:b0:
         e1:b2:c8:59:40:6c:22:ef:78:04:aa:40:23:0b:22:0d:29:35:
         dd:5c:da:48:5a:c3:69:4b:bc:4c:90:a8:f3:65:ab:d2:51:f2:
         bc:33:8b:59:67:cf:99:25:50:91:7a:34:14:d6:35:57:b8:a0:
         f1:3d:6a:52:17:bd:78:d3:9e:c3:ba:f7:10:0a:ad:5a:77:45:
         d0:12:f3:8d:a9:90:59:87:ae:49:4e:41:a0:5b:c7:71:b1:ad:
         3c:51:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----