Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          xO2+BFJ8D60ptZdvxbgWbV6+jSEmuSi3Fmk1B0hYK9I=
Subject key identifier:   0C:60:F4:9F:48:F1:75:48:6E:85:69:73:55:6D:CB:2D:D3:DD:C0:7F
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       01962E62170598A6E2429B5AB09B87C99ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          0250
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: 8B8kWkoTWyUmoCrodse5cXNmvyDiBiKL/cyuqTJpdOU=)
                          2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:17:05:98:a6:e2:42:9b:5a:b0:9b:87:c9:9a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=0c60f49f48f175486e856973556dcb2dd3ddc07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:60:e0:8b:53:00:d7:36:52:b0:6f:f4:b1:
                    8c:21:df:d8:fd:0e:ba:3c:f3:ef:5e:9c:70:a5:d2:
                    ca:f9:aa:06:6f:3f:45:f7:03:ed:5f:28:33:70:00:
                    78:83:bb:d9:cb:dc:52:ec:ba:70:84:49:7a:43:5b:
                    f0:c9:9a:7c:53:b4:15:ba:b1:2c:94:55:0c:c3:cf:
                    f4:ad:1b:28:0d:39:04:95:36:26:3c:01:81:db:66:
                    42:3f:49:6b:1e:22:02:b1:e5:53:f6:9a:4b:b3:7a:
                    ad:a6:92:d6:a4:49:4b:89:16:97:19:6f:ff:e0:34:
                    20:4c:9c:90:96:2c:2c:0b:fc:62:c4:ae:fc:16:a0:
                    b4:e4:ad:7e:3f:5a:6f:9f:e4:39:88:71:c2:43:4c:
                    32:37:5e:d2:2e:8e:51:ed:ab:f6:e4:06:55:4d:3b:
                    36:12:a1:59:16:b3:6c:11:f8:8f:4f:35:db:0c:f3:
                    e7:63:5f:d9:a6:4b:9d:f5:46:06:1f:28:88:07:2d:
                    d0:0a:93:a6:70:e6:00:0e:9f:33:a5:65:4a:78:72:
                    71:e5:0f:03:2d:ba:5b:59:8a:22:22:42:b5:1b:c7:
                    86:76:34:fd:43:40:19:09:45:38:b2:ba:9f:f4:1d:
                    97:14:ae:08:1f:19:21:8c:01:d8:c0:cc:d8:37:77:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:F4:9F:48:F1:75:48:6E:85:69:73:55:6D:CB:2D:D3:DD:C0:7F
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:e5:a7:c1:a7:6b:0c:26:8c:ae:a0:73:33:ea:dd:13:92:
         7f:d5:d9:2f:21:9c:34:df:cd:c5:f0:b3:e8:03:b1:7e:05:b5:
         f1:8a:f5:5a:8e:4d:35:92:58:03:b4:4c:a1:f1:22:9f:0f:6a:
         3d:e0:95:6c:78:63:f3:97:f4:fc:b7:6c:35:7c:65:fa:cb:f0:
         7b:87:22:12:7c:08:e5:c0:6b:0c:35:ea:4b:19:8b:ed:20:27:
         c6:13:f3:86:ad:1b:58:83:06:a7:27:37:27:54:fc:6d:f0:bb:
         66:7b:f2:92:8d:6d:6d:0e:2c:c5:2a:9c:1b:fc:61:2e:98:28:
         c3:90:cd:33:00:a3:a5:fb:ce:c7:df:08:6e:a9:50:95:54:1c:
         a0:28:9a:51:5a:ff:d1:47:11:b7:ce:9d:21:e3:d3:11:0e:5a:
         34:e5:5e:af:88:33:83:67:47:27:09:ef:93:d2:81:f2:0c:8d:
         eb:51:8d:45:32:d8:eb:1c:25:ec:4d:ee:b2:6c:3e:99:f8:3b:
         7c:f9:35:b7:97:d0:7c:b7:06:70:8d:38:e4:bc:00:a2:77:bb:
         9a:f3:6c:ce:f2:a9:d3:a3:49:66:66:da:e9:6a:bd:58:a3:59:
         47:32:0c:c6:95:c7:b3:db:69:95:40:e1:2e:6d:15:9a:1a:26:
         53:01:5e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYhcFmKbiQptasJuHyZrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl
ZDRkMTEwHhcNMjUwNDEzMDkwMTQyWhcNMjUwNDE0MDkwMTQyWjAzMTEwLwYDVQQD
EygwYzYwZjQ5ZjQ4ZjE3NTQ4NmU4NTY5NzM1NTZkY2IyZGQzZGRjMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMxg4ItTANc2UrBv9LGMId/Y/Q66
PPPvXpxwpdLK+aoGbz9F9wPtXygzcAB4g7vZy9xS7LpwhEl6Q1vwyZp8U7QVurEs
lFUMw8/0rRsoDTkElTYmPAGB22ZCP0lrHiICseVT9ppLs3qtppLWpElLiRaXGW//
4DQgTJyQliwsC/xixK78FqC05K1+P1pvn+Q5iHHCQ0wyN17SLo5R7av25AZVTTs2
EqFZFrNsEfiPTzXbDPPnY1/Zpkud9UYGHyiIBy3QCpOmcOYADp8zpWVKeHJx5Q8D
LbpbWYoiIkK1G8eGdjT9Q0AZCUU4srqf9B2XFK4IHxkhjAHYwMzYN3fnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxg9J9I8XVIboVpc1Vtyy3T3cB/MB8GA1UdIwQY
MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt
M2NkNDE3YWVlOWNlLzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl
LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0/lp8Gn
awwmjK6gczPq3ROSf9XZLyGcNN/NxfCz6AOxfgW18Yr1Wo5NNZJYA7RMofEinw9q
PeCVbHhj85f0/LdsNXxl+svwe4ciEnwI5cBrDDXqSxmL7SAnxhPzhq0bWIMGpyc3
J1T8bfC7Znvyko1tbQ4sxSqcG/xhLpgow5DNMwCjpfvOx98IbqlQlVQcoCiaUVr/
0UcRt86dIePTEQ5aNOVer4gzg2dHJwnvk9KB8gyN61GNRTLY6xwl7E3usmw+mfg7
fPk1t5fQfLcGcI045LwAone7mvNszvKp06NJZmba6Wq9WKNZRzIMxpXHs9tplUDh
Lm0VmhomUwFe8g==
-----END CERTIFICATE-----