Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
File:                     mWpflIQ1rLESpm4lY3kiY-yLZX4.mft (raw, json)
Hash identifier:          459vh/aahcR+C+u0WHq3KiCDh7moYpSs6UB1KY9u59A=
Subject key identifier:   C0:36:56:2F:2B:B2:8E:D0:6E:6D:29:1E:58:0A:31:0E:82:E3:D5:DF
Authority key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Certificate issuer:       /CN=996a5f948435acb112a66e2563792263ec8b657e
Certificate serial:       01962FAB4C30CBCFAF57C6C405FFDD3CF8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: mWpflIQ1rLESpm4lY3kiY-yLZX4.crl (hash: ctSRqvbFwTDcdA4qv+V6qeQHhvgovtbZBwaWdf4/YeY=)
                          2: oUbphFvh_H2EgLkqqhGVtJvsWdA.roa (hash: YcXAdQPNOD/ei8uQHqKqayZyCGAzNtCVZnzz77qI+x0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4c:30:cb:cf:af:57:c6:c4:05:ff:dd:3c:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996a5f948435acb112a66e2563792263ec8b657e
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=c036562f2bb28ed06e6d291e580a310e82e3d5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:69:d3:10:9c:be:9d:e3:6a:24:88:95:5c:
                    b8:b1:97:cc:3f:30:73:3c:aa:2a:4f:ee:7d:1c:64:
                    1c:86:dc:46:5a:f8:bd:a4:42:4e:6a:5f:91:7e:7d:
                    82:2e:fa:2f:b5:aa:ef:07:12:19:af:55:52:9b:3a:
                    12:70:af:4c:4d:c6:e6:2f:7c:e4:51:6e:e5:14:74:
                    e7:a2:bb:cb:1a:b0:45:b6:86:26:63:7d:b8:3e:76:
                    0a:cf:ea:1d:c2:dc:e0:17:65:8a:b3:2c:44:af:d6:
                    0d:99:df:5e:90:23:09:e2:92:18:75:d4:07:2f:44:
                    26:11:86:49:d3:43:b8:ff:a1:c7:0a:75:17:44:8b:
                    fa:8b:c2:82:f6:c2:9b:33:ac:e3:38:00:dc:ba:d9:
                    3a:6a:85:5d:b4:48:b1:24:ca:97:a3:d6:84:40:0e:
                    9c:26:01:a8:7b:95:e7:fe:da:85:92:f1:47:e4:b1:
                    a1:9a:98:c7:d6:c4:e9:ee:c2:a0:bd:00:c7:cd:0a:
                    52:2c:c7:45:d3:42:5b:92:c7:c5:52:5a:0a:01:3a:
                    9e:32:40:8c:7f:c5:09:ba:a6:ad:7d:d7:2c:45:84:
                    8a:ac:8e:be:f7:a1:d8:32:38:d3:09:64:08:0a:5c:
                    a4:62:01:1f:c8:49:c7:f7:7c:dc:77:92:af:c2:b9:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:56:2F:2B:B2:8E:D0:6E:6D:29:1E:58:0A:31:0E:82:E3:D5:DF
            X509v3 Authority Key Identifier:
                keyid:99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:1d:39:73:4f:87:56:03:40:a3:de:02:39:c8:07:7d:6c:
         70:1d:58:6d:4a:8d:e0:8b:c1:fc:0a:5a:ca:c0:98:fc:04:65:
         a6:ab:96:5b:1d:30:37:e5:e0:5c:64:c1:d8:ca:0f:18:34:0c:
         1f:54:83:cd:08:e0:b5:f4:ed:c5:99:bb:20:24:9f:8f:1f:24:
         c2:61:a0:8b:15:f2:75:41:f4:4d:ca:df:ab:d5:64:e2:86:79:
         6e:49:70:68:d6:3e:15:cd:aa:a6:56:d2:eb:5b:81:77:57:26:
         74:0c:06:0e:d7:62:33:52:17:7c:29:0a:d0:a7:f0:45:75:74:
         f7:12:50:30:5e:29:db:2c:80:47:f2:f9:3d:40:a1:15:5b:0b:
         0a:82:05:32:dc:d4:ab:a1:1e:1e:08:a6:d8:4b:bb:23:a5:bf:
         09:ad:56:f7:af:43:a7:46:8e:b4:b9:72:24:89:8d:0e:b4:5a:
         36:80:f8:82:75:d0:ac:af:46:2c:75:02:f3:56:6b:4f:83:7c:
         d8:6d:38:22:28:a1:a3:f2:d2:59:64:27:a4:f2:7c:36:b7:30:
         b7:18:bc:15:c2:6d:3e:af:46:e4:57:b5:a5:6b:e9:81:35:a3:
         19:14:c6:b0:26:a8:11:42:f3:72:ab:30:a0:94:61:ea:dc:6f:
         3b:4b:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----