Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File:                     w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier:          qMBBbnXVXhdBl0gUI6mY35Kev23uzO93CDJfLEWSaJo=
Subject key identifier:   53:6B:B8:14:5D:D3:37:19:25:D9:FD:85:7E:87:17:89:7A:63:41:CC
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer:       /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial:       01962E2AF53E5716FB826AB855CCD238BC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number:          6E
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
                          2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: BNZNJYb5ItoHGvXYKUrus1Qp16McU64h4FtPoDDzvrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:3e:57:16:fb:82:6a:b8:55:cc:d2:38:bc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=536bb8145dd3371925d9fd857e8717897a6341cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:e8:41:a0:8f:d2:80:c7:f9:6c:a2:c3:72:
                    eb:0f:90:fa:9e:d5:94:7f:06:27:d4:8a:c4:d2:25:
                    60:74:bb:d4:df:5e:24:3c:4f:5d:81:4c:82:90:70:
                    3b:4b:7d:db:c7:70:49:f2:fa:fb:1a:48:c0:33:a5:
                    43:44:95:5c:9a:be:b0:ec:2f:e9:72:2a:d3:0f:3c:
                    ba:2c:8d:91:90:42:d5:d9:f1:6a:2a:8b:22:83:64:
                    44:18:25:0a:50:2d:87:c6:44:50:54:b8:51:4f:d6:
                    00:31:98:f9:93:f4:10:ae:02:2c:07:b0:29:52:e2:
                    07:88:73:4c:98:c9:2a:b2:34:da:f7:25:3c:fe:91:
                    a4:80:dd:c4:23:70:75:33:a7:52:f1:65:2d:fe:df:
                    dd:14:d6:71:a2:1d:cc:14:d5:cc:b7:ed:ee:9d:a7:
                    96:ec:28:d8:b3:60:49:d9:17:34:3d:e5:ca:ff:61:
                    67:a1:ba:a4:0e:97:4f:35:d7:29:91:d0:bf:a4:96:
                    de:bd:f8:69:1a:8c:4d:fa:34:f6:7e:0e:b8:c9:58:
                    92:c4:51:90:09:1a:fd:cf:e5:bf:a7:67:b2:f7:98:
                    67:c7:0e:f4:33:92:9e:b8:7c:1d:0d:5f:7f:ba:4b:
                    44:38:25:15:d7:40:66:a1:c1:fa:ce:2d:68:df:bf:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:B8:14:5D:D3:37:19:25:D9:FD:85:7E:87:17:89:7A:63:41:CC
            X509v3 Authority Key Identifier:
                keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5c:2a:4e:12:c6:a7:31:de:89:9d:16:28:d2:80:8a:63:26:
         95:1b:09:42:0e:a4:b7:93:51:da:51:4c:77:c8:0a:ca:5d:c5:
         d0:d1:0e:db:56:bf:e3:fd:07:18:aa:47:08:4d:34:7b:1d:31:
         d9:d9:01:fe:58:64:2e:7c:5f:33:a5:e1:f5:65:e1:21:e7:ff:
         42:99:7b:da:ac:17:76:9f:83:eb:71:e4:b6:41:28:94:8e:95:
         4d:e7:97:6b:60:2c:fc:85:8f:03:45:a2:8f:5c:bb:85:e3:15:
         05:9f:c2:e8:83:46:8f:3d:c3:7c:c6:2f:9c:67:da:70:74:0c:
         94:06:ac:07:fd:63:e9:54:b3:08:21:98:17:02:54:18:d8:54:
         36:30:20:5c:93:2b:a9:8a:ff:1f:fd:d4:4e:a3:96:86:d9:9b:
         e6:19:1b:d8:f2:67:77:3c:be:ec:a8:69:f9:8a:f3:69:3a:cc:
         24:e5:f2:4b:33:94:7f:14:00:fc:a3:a0:77:b0:ce:c8:f3:01:
         50:c0:f7:4c:f0:48:58:c9:65:b9:84:68:59:10:e0:a9:05:0f:
         c8:85:59:b8:6a:6e:ee:c6:d0:02:cd:25:58:0b:a0:e1:8d:2f:
         5a:fb:bb:72:a5:67:f2:47:86:a4:9b:49:2e:c8:ab:92:2c:72:
         a0:86:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----