Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File:                     WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier:          lm7ygdkZXXUjzcUU1CzoeL6kutFSZeYOZ4aRFoV5jBw=
Subject key identifier:   C8:A9:62:AB:EA:E4:DB:3C:78:A6:67:84:2C:2B:61:8A:C2:C9:51:08
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer:       /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial:       01962E98E0F5344AF2BB382CCA467AD6A6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
                          2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: 0FhdoaR8894M2UWgwvaKe2+5n6RU/EBPbYhDWBO+P38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e0:f5:34:4a:f2:bb:38:2c:ca:46:7a:d6:a6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=c8a962abeae4db3c78a667842c2b618ac2c95108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:a5:a7:d7:3d:01:dc:ae:d6:3b:54:fa:de:
                    59:ee:90:e7:1e:62:c9:da:7c:ec:c3:b1:49:7e:0c:
                    0b:a3:ae:ab:a9:4e:b1:9e:7e:7d:7f:95:ed:f5:1b:
                    7f:a5:ac:df:5a:1f:a5:fe:55:ef:1e:ba:cf:b1:d5:
                    a5:fd:5e:66:92:7b:33:5e:4d:1f:61:90:0d:14:04:
                    90:60:0c:f5:75:75:9e:9d:94:f1:c3:33:0e:a1:b4:
                    22:a4:4f:ab:d0:31:ef:42:03:4c:ab:95:3b:15:a9:
                    02:69:42:63:e1:d9:2f:a8:fe:66:8a:c9:ca:8e:46:
                    ee:27:f7:1d:3f:69:96:ae:c8:46:3b:51:f0:93:51:
                    78:e4:bd:57:4a:1d:d6:04:98:a5:64:9a:d0:e5:a6:
                    0b:83:c0:46:44:6c:3f:41:78:56:43:38:a7:47:b9:
                    1c:0a:e5:86:ff:87:c4:2f:0f:4e:cc:85:be:ac:30:
                    21:df:c0:1d:13:f0:45:4f:af:6f:71:8c:bf:81:db:
                    40:8f:c3:0f:e9:16:47:fd:cf:25:19:2b:70:00:58:
                    48:84:97:73:f4:09:3a:e2:be:9e:7f:80:4a:55:72:
                    90:89:1d:e0:99:fc:1b:9b:88:17:e1:49:d0:4f:17:
                    19:7b:71:9d:5d:6c:19:5d:cd:8c:19:98:b4:2f:83:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:62:AB:EA:E4:DB:3C:78:A6:67:84:2C:2B:61:8A:C2:C9:51:08
            X509v3 Authority Key Identifier:
                keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:10:21:13:72:0d:b0:94:55:6c:30:f9:c7:d1:5a:e7:19:
         86:72:fb:17:0f:e2:5d:be:2d:08:cc:96:09:9f:69:33:6c:b8:
         0c:32:60:8d:d8:cc:5c:3b:13:93:ae:42:70:dc:84:b8:3b:4e:
         99:6a:0e:f6:5c:04:5c:11:85:e0:b6:b0:3a:ec:78:16:78:bb:
         13:9a:9a:ef:e5:4e:dd:60:34:ae:f1:5e:15:34:22:71:7e:d7:
         67:5d:1c:6f:e9:6a:71:c5:e4:11:96:b5:46:bb:dd:8f:e2:0e:
         33:ac:e1:3a:7b:ee:41:9c:d6:ec:dc:b5:6c:5c:f6:fe:06:d2:
         49:f2:af:fa:d9:aa:dc:35:18:bd:f2:20:1c:d7:39:be:97:3b:
         77:6e:80:81:4d:1d:7b:b1:6e:05:07:4e:e4:8b:04:30:aa:db:
         d8:93:34:fc:7b:6d:8b:61:45:3f:71:89:df:c2:e5:83:a8:0e:
         fe:e7:50:e8:94:84:9d:50:47:af:15:62:6b:68:f9:c4:92:44:
         2c:ad:78:c4:f5:3a:6b:0e:c8:41:3f:6a:79:9a:9a:df:d9:28:
         be:a0:be:06:ff:b6:73:d6:e1:13:a6:91:64:b0:02:58:11:78:
         25:c7:b5:ef:4e:2b:b7:2b:46:56:78:bd:2e:2e:fd:2a:50:68:
         5f:27:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----