Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
File:                     w-n8ZGejquEeyh5P15bA8hUYrAA.mft (raw, json)
Hash identifier:          pHdCC5lzNxt0UKnWjAn3nXNuXRCvmbDaWzno82gs6Xw=
Subject key identifier:   44:2E:8E:EF:EA:C8:0E:E8:F2:08:EA:C8:6D:78:6B:2D:AE:71:62:9B
Authority key identifier: C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
Certificate issuer:       /CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Certificate serial:       01962E2B174B23F5AA23F7C3580C1DBC37E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
Manifest number:          03E8
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: w-n8ZGejquEeyh5P15bA8hUYrAA.crl (hash: sHsFyaSMSPCX7WC3bFElVNZCt2F3osKyYZJd2P89eVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:4b:23:f5:aa:23:f7:c3:58:0c:1d:bc:37:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=442e8eefeac80ee8f208eac86d786b2dae71629b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:8c:ef:f2:95:7e:a2:f7:81:a6:52:cd:83:
                    d8:c6:1d:fb:c2:b8:8e:3f:ef:f0:8d:f8:2d:f0:ed:
                    9a:82:1c:33:9b:3b:ca:4f:68:06:aa:f4:29:f5:3b:
                    af:69:f0:0e:79:a2:1c:61:63:e4:4b:bd:1b:96:8c:
                    0c:2c:40:ea:6a:7b:41:d1:ad:f1:45:07:42:39:59:
                    39:50:1c:db:c1:50:1d:44:6c:15:dc:5e:76:cf:44:
                    30:19:1d:a2:02:57:7d:fe:77:c2:e8:39:00:15:6f:
                    8f:5d:d0:4c:06:1f:e8:51:64:4f:bd:90:8a:d9:13:
                    a1:c8:c3:ac:e7:30:c3:48:a0:7e:12:b4:b6:2b:22:
                    c5:b6:8a:f9:d6:d7:2b:0d:e8:9a:94:d6:b5:3f:85:
                    49:8e:6e:d6:74:c1:12:e4:b9:77:f7:d7:4f:cb:f6:
                    14:71:08:cd:bd:c4:d8:d1:48:b6:1f:0d:2e:d6:8d:
                    f6:7c:95:ce:a1:14:1c:9d:7c:30:31:c0:5c:58:8b:
                    a8:9f:0c:62:d4:45:5b:3c:30:9a:da:6a:80:56:c4:
                    0b:82:40:71:99:8c:09:62:02:f4:9a:be:03:94:00:
                    11:c6:f2:95:8d:3f:44:09:76:35:be:2f:d1:2d:f6:
                    50:93:cf:0e:a0:30:98:49:ac:5d:2f:49:93:cf:4d:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:8E:EF:EA:C8:0E:E8:F2:08:EA:C8:6D:78:6B:2D:AE:71:62:9B
            X509v3 Authority Key Identifier:
                keyid:C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2b:1f:77:bc:3f:a3:ab:4e:b4:41:49:2c:d7:3b:0a:b7:c6:
         2f:98:e9:96:97:b2:fd:24:b5:4d:52:a6:b0:c6:95:c7:d0:d6:
         ab:0c:df:5b:8d:6b:44:a8:ac:e1:d3:c0:7d:aa:7e:30:18:06:
         7f:3b:0a:ba:f1:ae:5d:26:25:9b:ff:c0:b5:61:0f:20:72:11:
         e0:c1:84:fb:8e:45:ae:73:4c:89:2b:fa:79:56:f1:84:7f:1f:
         90:51:06:f1:4e:a2:4a:85:a1:03:cb:8a:de:0c:69:ce:19:ac:
         27:79:62:e0:64:91:ae:f2:65:e8:50:d9:34:a0:49:84:d1:b4:
         78:19:f1:4a:ab:13:03:20:5b:78:39:e4:4c:02:42:eb:98:e1:
         84:be:23:25:90:66:a9:e8:18:10:b0:0d:18:42:79:6d:52:d2:
         5c:d4:da:bd:3a:7d:51:3d:98:b0:1e:ed:b7:3a:5b:03:1b:9d:
         3b:91:5e:37:3f:ef:cb:54:e1:ec:a7:9d:45:98:b0:1e:5a:19:
         a6:50:e5:7c:36:0a:4b:98:85:8f:05:f9:06:66:fb:72:34:60:
         86:23:1f:8c:5c:62:ff:b7:20:5d:e7:c9:b2:ea:b8:de:b3:7f:
         73:6f:3f:fb:16:c2:a5:9b:a8:1c:d4:8f:05:bc:8c:2b:69:3b:
         77:68:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----