Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File:                     WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier:          g63q9X/3VgxDm/gd/Qo1pSxMant1EgDf7YEPc8t/jI4=
Subject key identifier:   93:17:38:27:AE:0E:37:98:3A:99:46:8D:F2:53:91:90:B5:08:65:F0
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer:       /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial:       01962F068E8FFC83DCE7F2A60A3EA708018C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number:          0D0A
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
                          2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: aTuBMdGzI4lyhLaEVFkJ1GwWAnYaDhXMRepB+IpW7Ow=)
                          3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:8f:fc:83:dc:e7:f2:a6:0a:3e:a7:08:01:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=93173827ae0e37983a99468df2539190b50865f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:dd:86:f1:eb:53:ed:62:9e:5a:af:b0:db:
                    7c:d1:3e:2c:66:75:d1:2d:aa:a7:04:fd:d6:b0:49:
                    87:e7:42:50:2a:02:9c:ba:f8:80:c1:23:41:b9:78:
                    11:16:e4:cd:6b:c5:dd:07:3c:5d:55:c6:cc:5e:a0:
                    4f:4b:18:54:04:10:0b:92:ec:4e:12:9c:17:41:63:
                    fd:c8:48:2e:a4:7d:4f:26:d6:57:b0:21:da:01:4b:
                    7b:2a:1f:27:9a:da:b5:12:89:4e:73:02:de:df:f5:
                    6d:c0:d0:c4:a9:95:62:f4:1c:24:76:61:16:70:32:
                    68:92:26:e4:34:13:c5:9c:41:38:84:79:69:b2:89:
                    ed:af:90:2b:44:48:95:27:5f:e3:19:34:92:a5:67:
                    a8:b8:9e:ba:26:c1:31:d5:1f:01:1c:1d:5c:ea:06:
                    ab:b3:37:2d:a9:ae:a3:0a:73:fe:a6:69:b2:4d:32:
                    b6:e2:d3:48:4a:b6:43:15:7d:e5:cf:7b:4a:27:d3:
                    6d:75:dd:a6:d1:34:38:ce:a1:99:29:35:4d:aa:7b:
                    ef:27:d9:0d:2b:ec:7e:76:db:95:97:f8:d3:be:da:
                    c9:5e:a9:bf:99:74:e4:04:0d:94:5e:b5:6c:91:29:
                    e9:54:7b:56:e8:d6:d6:94:ee:48:7f:42:06:b5:d7:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:38:27:AE:0E:37:98:3A:99:46:8D:F2:53:91:90:B5:08:65:F0
            X509v3 Authority Key Identifier:
                keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:6a:ea:00:62:7e:4b:58:2a:94:93:13:73:3c:46:8c:e2:
         2c:11:cc:2d:ca:db:92:0f:db:5c:36:7c:e9:f2:77:3a:e6:8f:
         ef:11:65:bd:fc:95:90:c1:47:a6:6f:5c:66:78:ca:c1:94:5f:
         6d:fd:06:da:7d:ef:e2:20:76:6d:1f:1a:07:45:19:5e:91:62:
         01:16:00:c5:b0:ec:b5:ef:05:10:af:1c:19:5a:80:7c:12:84:
         40:2b:a5:ed:e8:8a:da:2a:07:13:e2:73:b5:50:f0:98:f0:c9:
         24:70:b1:32:b4:0a:9e:6f:11:b6:50:23:26:b4:49:26:f4:71:
         34:86:43:ef:c8:a1:fd:68:b6:e7:28:23:9b:97:64:86:fa:25:
         db:bc:a1:b8:88:ce:18:7d:3f:7f:a5:82:38:ff:2e:5a:d5:44:
         97:d3:e8:b2:9e:9a:c7:ca:fc:89:f2:e3:0a:bb:a4:2f:bf:a4:
         94:b4:ca:78:e6:1c:0c:a5:db:f0:d7:06:6c:40:49:a0:36:e4:
         05:e7:2d:c2:37:e9:54:f4:74:02:55:2a:8b:98:74:8b:e6:f6:
         3a:f1:f6:6b:1b:a3:64:6e:1a:3d:33:d1:96:98:52:db:32:5c:
         38:4a:3a:41:d3:7f:a0:68:d0:73:44:6b:b1:1f:a0:45:85:9b:
         b2:28:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----