Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File:                     WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier:          PassfcZQBtL3OBn3XDqPKqy6VsskJTjlh7BJLdQNtOo=
Subject key identifier:   8D:3D:B5:54:E1:04:BE:1D:41:98:F0:95:15:D7:86:32:09:7B:08:51
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer:       /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial:       01962FAB938B4DC5C674CE91F631BAECFD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number:          03A1
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: EVlwxxid/jDvuJLmnojsN0mYHyK6ZHQx58Dei83T1y4=)
                          2: sqav3aLxOo9EBvGXAVp2M2JUjLk.roa (hash: VEx9zb2RSoqX9zcmLVzEThMXW7bJA3NuZWVb7RztklM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:8b:4d:c5:c6:74:ce:91:f6:31:ba:ec:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=8d3db554e104be1d4198f09515d78632097b0851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:ab:00:61:4a:be:e2:a7:86:72:21:ce:02:
                    3d:c2:a3:2f:18:fc:8a:8b:e8:8c:75:a7:60:31:60:
                    1a:0b:3c:24:2f:fb:ab:8f:7e:96:67:71:b3:d0:6f:
                    33:cf:05:08:d4:cc:df:5a:24:91:42:5c:1d:fa:e7:
                    bf:18:95:d6:76:7f:b7:9c:33:96:45:dd:18:7c:70:
                    40:b2:b5:be:bb:79:fa:8e:43:10:80:1b:07:48:df:
                    be:2f:7c:d6:38:c2:53:8d:3d:e2:70:4d:65:c6:32:
                    01:af:e3:f4:c2:a7:9a:0d:57:6b:de:f8:90:77:d0:
                    0a:fd:bf:36:f3:74:fc:ca:b7:58:4e:b8:f7:d0:e6:
                    39:65:9a:23:a3:f3:2f:ba:1e:00:4e:b6:40:0d:05:
                    e8:02:91:48:16:d8:e5:42:b6:15:84:9d:72:6a:c5:
                    94:75:57:49:06:e1:49:83:11:a2:9f:1b:8e:b1:3c:
                    55:1e:ce:45:ca:6f:d6:ff:51:09:18:99:1e:54:42:
                    5d:72:d3:ee:93:ad:03:05:d1:17:5a:d7:96:1a:fd:
                    ab:6a:8a:b3:bf:d1:ee:36:d8:1d:70:57:08:81:0d:
                    d3:46:bf:8b:7e:97:63:e6:4c:16:3b:dd:f2:86:de:
                    7b:77:60:e6:ae:81:ad:66:79:22:72:eb:80:5d:3c:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:B5:54:E1:04:BE:1D:41:98:F0:95:15:D7:86:32:09:7B:08:51
            X509v3 Authority Key Identifier:
                keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:c5:3a:09:98:68:48:a8:67:a6:19:7f:ac:c5:18:62:5f:
         b1:7f:75:26:ad:fe:d3:46:30:75:fa:16:5d:38:42:0d:86:92:
         32:76:7d:27:bf:99:d8:77:54:e0:d7:fa:12:a4:27:01:10:bc:
         b7:31:ca:28:b5:eb:ad:b4:85:b2:4a:66:48:3d:cf:83:7d:9f:
         e2:06:9f:1f:fa:a1:94:ba:05:ce:13:fe:d9:54:24:f3:6f:41:
         17:d0:8a:1a:64:76:7f:00:3f:17:d5:0c:e3:ee:8b:51:f0:ca:
         57:aa:1a:86:9c:e0:13:ff:09:86:99:d7:3b:91:fa:30:d5:7f:
         cf:46:b1:2b:e7:29:ed:ca:28:87:f7:0e:2c:28:ed:f4:c9:6c:
         86:30:f7:e8:36:96:16:5a:43:8c:f1:09:b7:68:b7:b9:e6:ba:
         1a:d1:41:31:46:d0:52:b5:e5:75:a8:31:d8:e3:c1:c2:d8:e0:
         af:46:6f:ba:e7:52:ae:8f:eb:63:98:c6:93:87:75:c3:a3:b0:
         d7:36:78:bc:68:3b:b4:51:54:92:5d:06:62:61:d9:83:d2:d7:
         e0:b1:27:65:1c:9e:7a:3f:55:e3:dc:7c:01:71:81:bc:0e:04:
         4f:8f:dc:37:f8:27:f9:e8:15:34:15:79:68:f8:d6:48:f4:8d:
         5f:e4:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----