Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File:                     WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier:          9dy5FyMljdKCaqPxELrznYh3VwagIsqs9JTQGIni78Y=
Subject key identifier:   F3:B5:68:79:7D:7E:10:24:67:72:37:65:99:AD:EC:08:73:43:05:EA
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer:       /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial:       01962E998C9C3FEE8F82095B8860834623EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number:          03FC
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
                          2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: oZIm+Bdz44IcnUqVCAjsfL2itkpkK27MOFrm+rugSzQ=)
                          3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8c:9c:3f:ee:8f:82:09:5b:88:60:83:46:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=f3b568797d7e10246772376599adec08734305ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:25:31:9d:a8:52:37:47:13:8f:f6:cb:4f:
                    fa:d6:53:51:fb:d4:95:76:3c:9a:64:57:f5:dd:7a:
                    06:ff:9c:5d:f2:c4:da:41:fa:9f:e4:98:11:c2:b5:
                    bb:78:b5:1a:86:f6:51:e7:1c:5a:db:20:29:2f:fb:
                    c7:45:dc:48:03:be:f3:c6:4c:8d:b0:c9:67:68:22:
                    42:44:f3:ad:20:6a:5d:37:9b:74:45:29:ae:46:7c:
                    2d:81:f7:d0:82:52:db:7e:1b:90:25:bd:93:43:59:
                    b3:79:ef:d8:bc:32:1c:ed:d2:1d:e5:3b:dc:3b:c2:
                    4a:be:45:13:9e:4e:e7:56:4e:c1:3e:19:df:65:88:
                    38:fd:35:ca:5f:7f:0d:54:32:b5:48:37:fd:f1:df:
                    ef:e8:16:d0:4a:c4:79:03:da:0a:ae:d0:0a:fd:cb:
                    6d:e4:77:44:8c:d2:18:c8:f5:00:7a:b1:33:93:cf:
                    f5:81:ff:5e:93:43:89:3b:56:ad:6e:e7:50:67:30:
                    dc:bb:1a:af:d4:a6:e3:4b:61:20:3d:06:37:2d:01:
                    88:90:7c:9c:1a:ec:ed:df:7d:cd:0d:07:61:dd:d7:
                    62:6d:45:93:b2:90:84:81:2d:8d:5b:60:6d:4d:2b:
                    4a:84:36:08:0b:94:ab:00:8d:99:80:38:81:59:2e:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:68:79:7D:7E:10:24:67:72:37:65:99:AD:EC:08:73:43:05:EA
            X509v3 Authority Key Identifier:
                keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:45:51:40:51:b7:6c:49:95:16:c0:95:8c:37:a4:24:21:34:
         e3:57:94:0d:c4:b0:c3:24:58:6e:f1:17:af:d4:05:22:46:cb:
         e2:34:34:37:92:ed:3b:1d:37:12:48:dd:e9:93:8f:3f:aa:e6:
         63:3c:5b:72:30:47:76:3d:23:ca:63:c2:35:f2:d5:f8:38:c5:
         79:0a:80:20:0e:f8:74:aa:a4:6a:f8:64:5f:ce:7c:c6:10:00:
         a3:dc:cd:7a:eb:dd:7c:ae:43:f2:90:5a:47:9c:32:f2:19:01:
         e2:38:bd:d7:42:80:45:cc:b4:3a:21:36:da:6a:4e:51:db:1f:
         cd:6f:9f:79:3c:45:79:b6:6a:cf:62:66:da:ad:bd:89:e2:f3:
         cf:2f:13:37:bf:73:cb:47:fd:ad:cd:55:76:40:ef:94:a7:20:
         c1:53:d4:4c:df:d2:af:01:19:06:09:d9:28:cb:9c:cc:6e:77:
         bd:94:07:54:77:7b:e6:cf:93:c7:d3:69:d5:bb:5b:b4:06:67:
         49:6d:d7:65:ea:b1:18:f3:af:12:fb:59:88:7f:96:d5:0e:c2:
         4e:0d:55:7e:d1:f5:02:77:80:49:49:05:89:ae:c2:69:43:96:
         ce:c3:29:8e:db:6e:9d:d9:d0:2c:97:a7:f8:4d:e2:92:3e:41:
         66:83:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----