Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
File:                     WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft (raw, json)
Hash identifier:          zx7czo0EchfIS56VEyp6YCquruI2pnSCsk0t3nuJQp0=
Subject key identifier:   F4:F1:B3:E4:5A:38:4D:97:01:4A:5A:97:D5:87:3B:98:F2:4E:C7:EC
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       01962FAB21F12AF1C56386B2B7E962B8EDA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
Manifest number:          4A
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: O49MqYveFwFxlkpzE3acuCCtZr0.roa (hash: YUu3sNGPmNlXjpfrsmo0LHZail+U9EXlZogDbonTJRY=)
                          2: WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl (hash: VFYHaaS1WC8JUPmCCYJnicebdafEGrxoWjoY2FzfGOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:21:f1:2a:f1:c5:63:86:b2:b7:e9:62:b8:ed:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=f4f1b3e45a384d97014a5a97d5873b98f24ec7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:d0:a5:ca:19:7c:25:60:cf:ab:24:78:7d:
                    8a:d2:8c:a9:33:96:bb:2c:53:4d:bc:e4:ef:7b:76:
                    0e:6d:24:d8:67:67:84:2f:ab:aa:8f:62:ea:a9:d2:
                    aa:ce:4c:20:a2:9a:88:dc:cc:aa:f9:a5:ce:63:17:
                    d5:10:bc:40:b7:a4:05:1d:3b:13:56:97:de:1b:c5:
                    05:92:bb:63:5b:90:ef:7f:6a:f1:4f:44:50:f5:e6:
                    57:4c:09:ca:14:b5:9a:5d:4e:eb:1a:d4:5d:1d:f5:
                    f3:1a:7d:45:bb:7a:4f:76:09:56:c8:ab:54:9c:16:
                    a7:fc:ac:91:28:5f:35:2e:5b:9c:68:4f:ea:3c:ba:
                    ed:87:12:31:d8:d5:ed:8a:38:ba:29:16:6c:4c:d8:
                    ca:49:5a:1b:55:90:aa:f0:05:2e:b2:26:ed:f3:2c:
                    67:9e:52:c3:2c:d5:b3:94:3d:08:ce:78:1a:a6:64:
                    78:3a:f9:62:6a:7c:08:e7:d3:ff:bb:7d:bd:b4:1c:
                    c1:c9:b2:b7:94:a0:7e:71:e3:20:87:f2:92:b0:eb:
                    b0:82:6e:af:2a:47:45:ab:63:d5:73:d3:81:fd:80:
                    7d:40:ef:42:7f:6a:18:9d:24:56:3b:d9:3f:43:17:
                    50:95:4d:18:a9:aa:93:e6:e9:5e:61:39:05:95:31:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:B3:E4:5A:38:4D:97:01:4A:5A:97:D5:87:3B:98:F2:4E:C7:EC
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:00:f3:b6:bd:0e:cb:fc:8c:54:ea:2a:4c:08:bd:9c:ff:
         67:b7:0d:d5:98:30:bd:43:be:a5:10:20:e2:9a:56:0c:f6:80:
         cc:39:59:57:d6:0f:55:8b:a6:c4:e2:72:98:de:cc:8b:3f:6c:
         27:7d:0a:12:79:60:7e:1a:f4:75:a2:b2:1c:49:0e:e1:6d:0d:
         ef:5f:03:35:89:02:2e:e0:c7:eb:47:8d:b3:32:8d:0c:27:16:
         49:14:98:31:61:c1:bd:8d:62:92:ef:7f:a9:8f:45:be:16:29:
         61:5c:60:63:09:51:2a:5e:95:70:30:20:fb:ac:29:21:50:f7:
         b8:ab:4f:5b:40:95:ae:cf:b4:af:ed:48:8d:80:60:9c:d7:49:
         92:8d:72:3f:64:0f:96:a9:39:fa:44:fa:50:60:bb:55:8d:d4:
         89:43:0f:d9:d2:41:44:49:57:3c:3a:3e:6c:5d:bf:64:77:c8:
         15:75:78:9b:b7:85:ac:8b:e2:72:bb:c2:e9:48:31:39:a9:60:
         6f:fc:89:eb:a9:3e:e4:d9:bd:2d:d2:21:d1:6a:0e:bb:70:46:
         1d:7e:b6:1c:dc:cf:5a:0c:c3:4a:47:c8:b9:bf:1d:e6:68:ab:
         8e:a7:09:4d:6e:c0:31:79:db:16:26:d4:56:1e:87:3c:b0:4b:
         95:64:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----