Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File:                     WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier:          BfbhFNBoCTEMTjyOT9ByGOEWM2PxKnR+t5uolQoep18=
Subject key identifier:   F1:6E:1E:29:F2:1C:F4:01:41:CD:A1:7C:AD:F6:1C:7A:E3:7F:E7:30
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer:       /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial:       01962E2AF5E763F00A552C44E7A5FD6FACC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number:          0C89
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
                          2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: GoK2WWt8NVzo3LvvE4sqIZ90Ier0xvDvgOcyRgDbqYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:e7:63:f0:0a:55:2c:44:e7:a5:fd:6f:ac:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=f16e1e29f21cf40141cda17cadf61c7ae37fe730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:6b:f5:18:17:61:36:ff:f5:a8:72:55:02:
                    1d:f8:32:cd:07:98:ed:52:44:60:aa:82:87:85:58:
                    ab:38:80:c2:a0:70:be:38:9b:6f:a3:53:c0:51:57:
                    31:9a:1f:17:ee:be:0e:c9:00:dd:0c:98:4b:64:de:
                    6a:dc:5e:60:e3:ae:71:00:10:50:ba:77:e5:06:8c:
                    95:c8:3f:73:90:56:3c:82:4c:3e:27:59:6e:a5:96:
                    2a:7d:19:79:ad:56:ec:e3:04:7f:89:f0:d4:d5:99:
                    d0:31:3d:54:48:c0:40:ae:5f:d4:14:b1:fd:b7:e5:
                    8a:40:38:9e:36:00:85:19:33:8f:ac:e4:b4:ab:77:
                    9b:81:38:7e:b2:77:2e:a9:fa:0f:c2:69:b8:fc:64:
                    07:91:70:ff:ed:e7:55:b0:5c:a5:f0:d9:da:13:93:
                    36:d7:a7:32:66:68:d5:df:0d:f3:02:4a:73:77:f1:
                    8a:dd:a2:76:cd:9c:a1:5a:1d:49:33:d8:cb:66:e4:
                    ab:29:37:7f:6a:4b:3d:5d:11:6b:fa:ed:f2:60:5f:
                    fe:d5:19:2e:33:2d:0b:ad:72:25:bf:7c:63:29:0a:
                    2b:33:e9:a9:f0:5a:4a:e9:c7:ed:66:48:b3:a2:36:
                    44:31:29:7c:be:39:f9:7c:33:c3:20:2b:8a:77:22:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:1E:29:F2:1C:F4:01:41:CD:A1:7C:AD:F6:1C:7A:E3:7F:E7:30
            X509v3 Authority Key Identifier:
                keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:90:58:b6:95:76:8a:92:61:9f:61:2f:97:c7:b6:25:a9:
         95:ed:44:75:80:97:80:c2:4f:f3:c2:d4:4e:9e:f1:ae:7a:b2:
         17:ca:de:0e:bd:8c:c1:c2:af:07:8e:34:75:c2:fe:05:fd:57:
         9f:5e:91:d5:e8:9d:eb:b5:6f:0a:ee:0e:e2:6e:8a:42:bb:4c:
         d5:e5:33:78:3c:3d:cd:80:1a:82:3b:18:50:9a:c4:96:25:c0:
         dc:97:ac:8d:d3:f1:da:39:91:6e:fb:97:f6:1d:df:70:83:b2:
         da:8f:e4:5c:57:e1:ed:ce:7d:1d:7c:29:01:82:e4:fa:9e:a5:
         79:50:8c:3c:c0:34:6b:4e:ef:b1:6c:38:c8:a5:99:9f:e4:39:
         16:43:df:11:92:f7:39:b1:56:da:e3:76:fd:b7:dd:22:9d:15:
         e0:c7:6b:02:e1:23:90:a3:98:a0:19:26:9a:d9:60:2b:ac:8a:
         c8:46:27:a2:80:0c:33:3e:e4:39:94:67:2b:79:93:33:c3:17:
         30:de:e6:4c:08:8e:64:5d:5b:f0:9f:91:93:b8:d8:92:f1:96:
         f6:5b:41:88:8f:cc:74:09:79:eb:f8:ee:e4:d8:4c:a2:2d:4c:
         07:06:00:8d:50:06:d6:de:3e:78:d9:e5:9b:30:f8:b5:b7:15:
         b9:26:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----