Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          zkzKzH5zYv8fKanUpW2VyxUjkQHyf0CP3bH33vo4KJA=
Subject key identifier:   19:24:10:CC:76:97:9D:8D:BF:1A:9C:74:C0:47:E2:AE:CC:34:64:1F
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       01962E98EC9BFF7F7130D1DE393A70492755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          037A
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: 31sAFV+lLIChvpirAumMkmk20WfaUyFXMP/pzUjlwdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:9b:ff:7f:71:30:d1:de:39:3a:70:49:27:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=192410cc76979d8dbf1a9c74c047e2aecc34641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:f9:68:09:4d:3d:c4:2c:df:9d:bf:0d:e4:
                    9c:bd:f0:f2:2d:f6:b3:c2:a2:0c:0b:f9:40:2c:a5:
                    67:31:d1:27:f0:51:58:92:05:31:92:50:b1:44:30:
                    01:95:75:9f:00:d3:03:df:1f:67:12:14:3f:fb:81:
                    f0:96:5f:35:43:0c:9a:bd:c3:23:51:50:f8:fc:6e:
                    bf:a3:fa:d4:4a:30:d7:35:38:1b:a3:d5:49:50:e3:
                    f5:5d:f4:c3:ad:1c:da:20:8c:aa:c0:aa:70:d5:01:
                    78:2c:55:b9:04:de:92:1f:d6:3b:b1:b6:2d:7a:ad:
                    41:99:b8:cd:87:de:04:dd:93:6d:cd:50:13:24:68:
                    6b:6b:18:b1:52:a2:5a:08:98:8c:ad:b6:9a:9b:58:
                    ba:db:08:e5:f1:a3:34:28:cc:68:bb:0f:d4:80:29:
                    54:d9:56:c6:f0:22:c6:45:f3:32:10:ee:31:6c:8a:
                    1b:02:80:9a:2a:bc:70:c4:b5:cf:b6:a9:03:54:c2:
                    8a:b5:ee:11:9d:93:de:b4:5a:53:f9:af:d9:59:92:
                    e4:f7:66:a3:e6:44:c5:28:9f:7e:5c:17:f5:36:7d:
                    6d:58:0a:45:5b:5f:35:74:d0:01:05:88:48:b6:13:
                    66:d8:7d:be:ef:a9:8e:a2:ec:72:c6:10:19:31:28:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:10:CC:76:97:9D:8D:BF:1A:9C:74:C0:47:E2:AE:CC:34:64:1F
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:19:54:7f:de:07:76:6d:f8:13:65:25:69:eb:50:ef:20:e2:
         67:4a:37:ad:d4:1b:64:d6:f9:7f:07:ed:17:01:a5:4e:f4:d9:
         9c:45:09:22:95:2f:a0:9b:e6:bc:a8:f5:04:3c:59:8c:90:73:
         50:16:8f:49:e1:5c:04:02:58:a2:77:d6:4b:68:ef:79:ad:56:
         1c:a7:ad:a0:86:ff:40:df:0e:94:2d:fc:dd:6f:2d:de:11:bb:
         87:87:49:5e:8d:72:3c:24:38:93:2d:15:c2:dd:de:5a:f6:ae:
         6b:9a:f6:32:d7:68:35:39:19:39:ed:4b:43:7f:40:31:ef:46:
         07:e7:5f:5f:3b:83:36:bd:d3:c4:4c:be:b9:02:49:88:87:bc:
         4e:63:bb:65:af:89:53:91:a3:62:af:b6:a1:55:e3:ee:91:ff:
         60:7a:a4:76:4d:e3:3f:2d:62:cc:89:ec:3d:dd:90:c4:ae:93:
         89:b4:77:92:0a:ca:7e:e9:df:4d:0a:c5:7d:05:51:5b:e9:f0:
         e6:87:41:d8:22:83:88:97:14:2b:4f:d8:eb:87:ee:8f:c3:bf:
         af:29:31:d0:13:88:db:87:a4:8f:9e:44:ba:fc:06:cc:1b:1f:
         e2:d5:4e:af:fe:37:9d:d7:7b:e5:78:f5:e0:7a:28:2f:f9:aa:
         89:24:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----