Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
File:                     wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft (raw, json)
Hash identifier:          7izf/ImQPcFIyWDUUxVSi6XgmPl0uAhqs8ZrqufA7mI=
Subject key identifier:   D7:C0:44:F2:B9:B9:5A:1D:CC:BC:FB:97:5B:6E:CD:B3:86:3A:49:D4
Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
Certificate issuer:       /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Certificate serial:       01962FAB841B73691573B6EDBF3BF0F1384A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: f3Dh_2Y-zNZkcN90_TpfLSQTddk.roa (hash: vypiT7TdTiicDqreOdfVGNkJ1vOMr5vmxtAo64EoIdw=)
                          2: wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl (hash: snUd2+vdtl2OyS/XnfgkKi5ukLxhPZ7IEOwbtYxRRJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:1b:73:69:15:73:b6:ed:bf:3b:f0:f1:38:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=d7c044f2b9b95a1dccbcfb975b6ecdb3863a49d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:0c:5c:32:a8:f2:d1:28:a4:02:4d:cd:d3:
                    6e:bb:03:c6:0e:a4:73:05:ee:7d:be:af:67:dc:28:
                    09:d9:1a:df:66:d6:82:93:fb:9f:e5:51:0d:01:c3:
                    f9:33:1e:85:2e:56:92:09:2a:be:59:ad:e2:3d:4e:
                    13:4f:81:db:f2:23:c1:dd:6e:85:ba:49:bb:02:a7:
                    1d:e1:a1:9a:a8:8f:c5:b6:50:be:d6:af:b1:3f:ff:
                    ab:d7:a1:9d:a9:69:17:8e:ee:f7:76:ca:9d:ae:f1:
                    65:64:dd:8a:f1:e4:cb:54:85:5d:cf:e5:8b:38:42:
                    d8:9b:43:5f:ba:7d:31:46:a2:9b:fb:75:a9:95:c8:
                    b8:04:3f:57:c2:71:c4:17:a4:24:02:55:7f:8a:c2:
                    84:d5:96:7e:1c:93:b8:05:17:ae:a4:0d:3f:07:5a:
                    6a:af:6f:40:52:57:98:75:50:79:e2:ff:3e:50:9a:
                    7d:73:f3:0e:29:5d:5d:e9:c3:80:ff:aa:2a:96:a4:
                    29:2c:7c:e8:bd:73:1c:87:6a:6e:bc:e6:c9:de:6e:
                    47:b6:5e:4b:2e:98:e7:cb:49:7d:50:ee:3a:fc:b3:
                    af:28:a7:fa:fa:2d:c4:47:59:c9:2e:38:23:ba:cd:
                    cd:cb:5e:ad:34:f3:fd:24:53:16:ed:b5:a5:16:7f:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C0:44:F2:B9:B9:5A:1D:CC:BC:FB:97:5B:6E:CD:B3:86:3A:49:D4
            X509v3 Authority Key Identifier:
                keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:34:d0:ef:57:36:e4:af:13:4c:75:d1:a0:6b:8e:a6:5b:c5:
         fb:74:0e:ef:02:63:aa:2a:d1:d9:28:2a:6a:84:b9:ea:90:8c:
         9c:85:4f:82:fc:23:6b:dc:03:01:b6:d5:bc:bb:fd:93:d3:5d:
         70:d2:20:64:e8:3b:6c:fc:23:33:24:02:bd:04:89:65:f0:4d:
         c2:ff:bf:46:8c:55:de:1d:10:fa:f0:12:c0:97:b6:76:5b:4e:
         95:57:80:98:0a:f5:16:c9:03:88:1d:4a:cf:19:02:29:23:1d:
         c7:98:e4:2f:b3:88:99:dc:bb:13:b3:a0:16:a8:e9:40:67:53:
         75:5e:68:8b:35:83:c4:1a:02:a5:30:61:4d:ad:6f:14:7d:ce:
         06:d2:9b:83:62:59:db:44:22:59:09:c3:28:d7:3a:7d:ca:88:
         1a:5d:9d:48:a0:e9:4a:a7:6c:02:48:2e:08:fa:ec:3a:5a:fb:
         54:3b:cc:c1:72:3a:32:f9:bd:5e:94:2d:79:91:aa:0b:a7:0f:
         9a:29:b1:55:72:ad:54:b1:85:c9:c2:40:e1:7f:53:55:ae:59:
         87:56:28:84:08:d5:9c:47:7f:38:d2:a8:4d:b6:49:10:60:47:
         2e:a5:10:1f:a4:96:47:63:fa:97:2e:d7:a6:35:03:0d:5c:8c:
         3b:70:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----