Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
File:                     woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json)
Hash identifier:          XiQ3NuVhZpBbjWqrS4aL9NP/k+wa0rGJKpErLOzvVt0=
Subject key identifier:   F5:EB:24:D8:E5:B4:45:6C:74:FC:22:D9:E2:EF:8D:D2:C9:5F:95:41
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Certificate issuer:       /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial:       01962F06CA9E5A37C8397E79316E22CA736D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: cFpop9dizlBgkUyaV36_gGd8lnU.roa (hash: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=)
                          2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: lIuJVH6J9Sb3CS2UxCpfUqadqpoveskU1byWeUT0hJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ca:9e:5a:37:c8:39:7e:79:31:6e:22:ca:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=f5eb24d8e5b4456c74fc22d9e2ef8dd2c95f9541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:fa:69:19:ec:54:61:f1:3a:50:8d:f6:25:
                    46:f2:6b:48:ad:56:e1:36:7c:9d:d8:13:e8:53:72:
                    5d:99:4d:1d:76:66:f9:1f:6d:d1:5d:c7:04:cd:7b:
                    ba:18:81:c0:4b:37:c8:df:92:41:5e:f7:3d:5f:e5:
                    b1:ed:dc:6b:8e:f0:47:37:ac:49:ad:01:d1:68:86:
                    86:69:e6:0d:a0:6a:c2:c2:1b:52:3f:5c:1d:c5:14:
                    7e:93:ab:79:57:d5:e5:94:bd:59:64:6b:a7:38:3f:
                    0c:c4:ec:bc:41:8f:c6:78:b2:ef:57:08:9f:7a:50:
                    61:c0:ec:62:d7:6b:29:ed:f0:0c:43:e0:73:9c:56:
                    98:50:07:8d:99:3d:bc:f7:85:eb:43:c8:d3:ab:94:
                    98:85:4f:a0:4a:50:0c:8e:7a:a8:6f:4c:73:bc:46:
                    b4:3e:0f:0a:da:f4:a2:0c:c0:58:34:5a:1a:84:cf:
                    cc:99:7d:d0:18:35:a6:40:05:e3:a1:72:2a:7a:36:
                    7f:45:38:e3:8e:e8:07:7e:1e:44:e7:d2:ae:bc:e1:
                    2b:a4:03:0f:ac:92:e6:0c:0c:ef:72:7b:ad:6d:5b:
                    a4:4d:4c:16:e1:3d:69:f2:09:37:ff:eb:90:84:bc:
                    c0:f5:71:81:39:61:bc:0f:14:13:5e:8a:a4:fd:13:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:24:D8:E5:B4:45:6C:74:FC:22:D9:E2:EF:8D:D2:C9:5F:95:41
            X509v3 Authority Key Identifier:
                keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:46:30:55:8c:b1:0a:e8:42:24:59:4c:e1:9d:e5:31:fd:
         c8:8b:b2:66:0a:ee:68:d6:8a:0a:10:34:7c:49:9a:30:54:a1:
         5d:ed:71:0c:de:9c:fe:fe:15:ce:2c:f7:40:c6:57:2c:5c:10:
         29:3a:13:0c:d9:5f:2a:72:d5:5c:0e:68:d3:a0:27:cc:8a:da:
         6c:38:6e:7a:12:63:cc:25:25:a2:e8:30:5a:7f:ad:c7:3b:52:
         14:ee:0d:7c:64:81:d1:45:02:01:aa:a9:56:8c:d3:88:5e:65:
         07:4f:c3:f9:ac:77:00:ca:6f:db:24:08:50:80:17:6d:46:63:
         27:0e:61:18:f0:ea:9e:6d:24:22:f7:29:52:4b:96:a6:99:d7:
         d7:be:9b:da:72:7e:8d:89:e1:8d:d9:ef:a3:a3:54:6c:75:5e:
         90:99:7b:b3:21:09:a5:e6:17:e2:1c:e5:34:db:49:fb:35:3f:
         c2:15:b4:eb:d8:c9:2d:8d:94:49:35:ee:b3:93:71:b8:9d:70:
         3d:d4:4d:b9:fc:60:5c:fa:4d:b5:08:d7:f9:92:5e:a4:27:66:
         b7:d8:cc:a2:7f:bc:fa:55:70:cc:d6:4e:14:55:47:64:52:a8:
         49:93:99:88:e8:f8:64:69:85:3f:e6:11:4c:1b:d5:e6:6b:c5:
         df:13:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----