Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          mQRg9TqSm4ZBp/cnzjF9hZkiN9i/smQY5dzHuFI4Vx4=
Subject key identifier:   FF:71:36:3A:EE:18:5F:EB:37:61:4E:92:88:BF:D3:63:D7:D4:81:B8
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       01962F06E8A4D2A891EC906EE45B7C61DB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          2: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          3: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          4: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          5: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          6: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          7: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          8: IwPxKQ0cH2VtiVJXXV7lwrIiVdY.roa (hash: Vp7I9HovJoiuEC9VCO+6KWFaSrjYJto9LxrxlUDp/FE=)
                          9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          10: PcjnIOs0xHAadMUPf6vwApxUGPI.roa (hash: ahUECt5ec83Dg9RUG/tnn3VXtR+x9lfVVXmvWME9edo=)
                          11: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          12: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          13: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          14: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          15: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: 7w0eHrioYCXs32p4luVuNsPWMqOInyJOPdNb+BZHymQ=)
                          16: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          17: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          18: dy952eRiBCdIkDatCGm3tM-NtSw.roa (hash: oIhly5TECVRnL4ipTnAWtgg017FDltluQ713TVuz5pw=)
                          19: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          20: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          21: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          22: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=)
                          23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          24: xPuYo9ZNVfEwjuZRks156sTPvCs.roa (hash: jIHvOq1mFiR09GABf7ziDZ9sAzswkVSjcgAC+i6z4yU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e8:a4:d2:a8:91:ec:90:6e:e4:5b:7c:61:db:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=ff71363aee185feb37614e9288bfd363d7d481b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:54:1f:f7:6b:82:0d:a3:b4:a3:ff:83:0c:
                    d3:9f:04:dd:7e:c4:5e:82:fd:aa:a9:f3:91:f0:83:
                    b0:a0:92:65:b5:28:63:f7:49:cb:d4:fe:28:8a:27:
                    63:ee:f3:2a:fe:16:60:66:69:f9:64:07:b2:61:8a:
                    4d:ba:c6:f6:e4:98:b8:3e:83:99:95:ee:aa:c8:49:
                    4f:8c:54:38:05:45:06:0a:dd:4b:d8:22:31:7a:b2:
                    64:3b:2c:0f:42:95:54:98:66:e2:11:f9:5e:27:e6:
                    b0:47:6e:29:73:62:72:b6:3c:71:74:79:4d:13:e0:
                    8c:25:59:da:9d:d4:0e:0f:0f:7a:0f:8d:bf:28:8d:
                    02:ac:c7:da:60:20:94:ca:02:82:dc:60:f1:1d:8d:
                    32:9c:3b:57:15:0b:91:c8:d2:2d:c9:e4:fc:55:e4:
                    ab:38:80:01:09:b5:07:29:c4:57:c4:48:3c:74:79:
                    b5:d8:7d:bb:c4:7c:90:39:85:f1:fb:8b:7d:3b:a4:
                    fe:e8:be:7c:94:5b:54:68:a8:2e:ac:7a:28:24:83:
                    45:78:03:51:98:90:65:ae:ec:89:02:4f:70:ba:21:
                    90:e0:b6:c2:84:81:59:fc:cd:f0:8c:09:db:e4:12:
                    f5:bc:29:33:15:10:c4:1b:2b:82:59:1c:b6:f0:12:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:36:3A:EE:18:5F:EB:37:61:4E:92:88:BF:D3:63:D7:D4:81:B8
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a5:46:80:fe:5c:5f:71:44:60:4c:66:06:6e:d5:14:46:8c:
         7b:cc:93:24:9a:c0:ea:30:77:f3:ff:76:92:3d:51:2d:70:52:
         3a:53:72:e3:44:db:a2:7a:41:0c:aa:25:c7:6b:a1:f1:a2:63:
         23:d1:63:fe:8c:f9:6e:a0:ea:55:b0:7f:6c:0e:53:d4:05:63:
         4d:11:4e:d4:a5:e8:fc:2d:fe:92:03:71:47:17:8e:51:ae:32:
         00:81:0f:72:7c:5d:78:2e:b6:2a:e5:55:e7:d2:a6:6c:22:78:
         43:41:00:5a:e2:63:33:11:b6:70:e1:fe:22:ab:b3:de:93:e0:
         f8:3a:ad:88:28:d5:54:23:97:60:23:2f:d5:be:62:83:3b:3e:
         15:77:a4:93:b4:d9:a9:0a:5e:67:1a:18:88:54:52:2d:09:0b:
         5b:29:97:9c:ad:c8:06:86:be:1e:16:02:fe:19:4d:33:61:bc:
         45:18:3f:e9:9c:11:57:4a:f7:a7:2b:05:b9:cb:a8:12:2b:dd:
         63:96:43:8a:f5:a9:c0:01:2c:26:dd:50:ad:a2:5b:ff:8d:ad:
         b2:07:c1:c9:5b:f6:40:b5:49:a1:f0:bc:d8:c8:2f:83:66:39:
         f9:c8:41:a3:f4:19:97:3d:9a:dc:c3:ae:58:27:ff:be:7e:7f:
         c9:f4:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----