Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          ggZYiZ7lNJlXdTXCz91xa8OaMARSprpJsVsQIZQsNJ0=
Subject key identifier:   D7:58:17:3E:2F:D6:E3:C9:A0:B6:1F:B3:93:0B:AD:B1:AA:C5:EE:F1
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       01962F3D52F2986C74F5A35FA9A421E35D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: ZysnbTBvN+5vNX3jMJelvPuCqWYbhOJCzy9uQzSBCHk=)
                          2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:52:f2:98:6c:74:f5:a3:5f:a9:a4:21:e3:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=d758173e2fd6e3c9a0b61fb3930badb1aac5eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:9d:2b:7a:26:d3:78:31:cd:b3:54:2f:f4:
                    3c:f4:c0:37:c4:1b:ff:2a:e9:df:97:37:bd:e0:8a:
                    09:fa:1c:56:f4:d9:76:9a:0e:01:4f:9c:42:44:cc:
                    42:54:31:26:40:54:ba:3c:24:e7:06:89:0c:39:aa:
                    21:ef:d6:d1:75:2b:b8:50:9e:88:11:7f:b5:fb:14:
                    0f:9b:e0:26:ca:bc:04:7b:8f:0d:08:ed:75:b0:35:
                    c2:7e:78:80:61:b6:84:59:90:94:fc:27:29:7d:47:
                    6d:ef:66:98:cd:d7:60:40:18:b9:d9:e5:68:17:78:
                    ac:7c:dd:0a:c3:90:14:c4:30:8e:7b:fb:6d:da:8f:
                    10:32:49:bc:03:97:42:f0:9e:de:7c:6a:29:7f:e2:
                    e0:5d:12:91:e1:dd:dc:4f:6c:97:60:ef:e2:98:3d:
                    b1:50:32:eb:68:2c:36:13:0a:d0:86:50:cb:07:60:
                    d0:bf:0e:a5:a2:51:7c:69:c7:2a:80:a1:81:4d:94:
                    07:09:d8:f9:f9:cf:95:52:24:ab:9e:ea:bc:00:13:
                    4d:5a:ce:83:00:3d:bf:95:3b:e4:20:84:16:15:fa:
                    33:48:8b:27:62:c6:0e:ef:ef:11:69:e7:f0:7a:72:
                    cf:fd:42:26:bf:b2:04:95:24:82:d9:48:e9:26:a7:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:17:3E:2F:D6:E3:C9:A0:B6:1F:B3:93:0B:AD:B1:AA:C5:EE:F1
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:b8:09:67:0c:3b:11:60:18:df:31:dd:5f:a2:81:87:23:
         95:2d:ae:9c:13:b3:48:54:fb:b5:38:17:b1:1d:09:5a:2f:15:
         1e:3f:6f:97:c8:c2:fe:f9:5b:54:34:b0:5c:93:00:a4:95:01:
         e5:52:3e:a1:82:a9:bf:53:0e:12:71:5d:85:8c:f5:1d:5b:d8:
         91:f5:14:62:25:26:b0:75:16:ce:77:80:60:0c:60:63:2d:42:
         8b:61:93:8d:5d:56:38:00:10:ae:e8:9a:8f:bb:a2:a2:a4:f1:
         fc:16:c5:4e:81:fa:ed:ac:31:86:ee:17:cd:63:48:65:85:9b:
         73:c9:0c:fa:b8:eb:3c:fa:32:b3:bb:9a:e0:5c:92:d5:2d:1f:
         d1:95:5d:ee:a9:be:a2:29:b8:70:69:81:b9:07:44:ce:39:61:
         a9:e1:5f:54:47:7a:86:c3:f9:aa:b7:df:26:51:ad:cb:62:b8:
         a1:49:07:47:9e:68:6f:84:47:9d:87:a7:d4:5b:22:1b:3c:b4:
         d5:d9:ae:b5:3b:eb:70:5c:a0:9a:54:35:d0:d3:38:b1:5e:54:
         05:5c:27:d3:5a:12:ec:a3:39:ea:fa:52:c4:bf:7e:e9:5e:5c:
         1e:dc:33:25:b1:db:88:0f:51:34:76:42:6f:49:e4:40:aa:f0:
         da:a4:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----