Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File:                     WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier:          T8RFHHg+OGpj5NJ72l2Onn4hkdTb9mkPAGlF9aIizlc=
Subject key identifier:   82:EB:52:73:5A:98:A1:1B:CA:6A:C6:41:C8:9A:2B:9D:22:35:5F:99
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer:       /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial:       01962F06BE5E0C1E24835C8171AA6DB5C991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: rRNCpblj6jlQ0oy9TZYVTen4U9g5MSVYv6oyq7gE62Q=)
                          2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:be:5e:0c:1e:24:83:5c:81:71:aa:6d:b5:c9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=82eb52735a98a11bca6ac641c89a2b9d22355f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:6f:6c:64:51:7f:93:7f:c1:31:3b:63:58:
                    2c:30:d3:94:5a:14:ca:47:19:f3:01:17:e6:b4:bc:
                    66:69:62:cc:1a:0f:29:8c:43:15:6d:17:44:15:b2:
                    b7:90:4b:4d:ff:3a:c7:72:80:3d:9b:a3:dd:48:64:
                    dd:6e:41:fe:2c:59:b9:53:8a:13:c8:0e:ef:81:10:
                    ac:00:e0:31:1a:4d:1a:4e:b8:c5:32:1f:aa:76:72:
                    00:39:ee:eb:59:53:c0:e8:71:64:54:d2:97:a4:7b:
                    5e:81:c2:16:d8:8e:b0:87:3a:3d:53:87:7e:11:1b:
                    b3:9e:84:bc:75:de:2e:85:0d:24:08:77:c6:e5:1a:
                    61:7a:a9:c4:e8:44:d6:c0:2a:ac:eb:e2:97:ec:17:
                    11:38:23:15:3d:05:a9:3a:75:ce:75:eb:10:87:3f:
                    8f:3a:09:04:69:b4:9d:bc:c3:84:ed:af:94:4e:ce:
                    2b:a3:41:8f:64:49:b5:b3:27:71:f7:96:5c:71:04:
                    41:e5:7a:61:a1:cf:59:a5:72:3b:59:e3:e0:2d:b0:
                    bc:49:42:10:42:df:f2:ac:11:3f:41:c4:b8:5b:77:
                    fb:a1:e8:06:2d:0c:96:e4:77:3a:a7:00:06:10:42:
                    a5:c8:38:15:30:4f:87:1a:bc:e6:58:e8:06:9a:da:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:52:73:5A:98:A1:1B:CA:6A:C6:41:C8:9A:2B:9D:22:35:5F:99
            X509v3 Authority Key Identifier:
                keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:38:2a:dd:0d:10:23:84:be:85:2b:64:53:69:60:be:e9:
         e2:8f:ce:84:e5:e9:80:48:2c:60:cc:39:a0:a9:fd:af:e2:a1:
         66:c8:10:e9:1f:fb:22:55:e5:de:79:ec:2a:dd:81:26:0d:36:
         d9:8c:77:93:02:9a:1a:5c:07:2a:57:b4:8d:2c:a9:46:3e:2b:
         8b:a1:79:0a:45:f8:5f:21:df:ba:af:85:0a:42:9c:ed:cf:d7:
         9b:ea:7e:22:b9:e9:68:e1:c8:ea:4a:ea:09:89:6f:f0:80:40:
         4c:7d:1f:56:cb:44:78:81:ea:ac:95:5f:40:e8:ea:61:67:3c:
         28:4a:59:e6:94:1e:3a:f2:23:69:5b:58:c8:41:a1:0f:9b:05:
         aa:bb:1c:80:89:d1:f1:cc:c3:11:62:d1:8d:a1:31:54:e2:e2:
         f5:08:26:59:7b:fe:81:85:a7:5b:99:4f:f6:0a:da:e6:bb:d7:
         74:f6:ae:3c:86:e9:69:1a:db:85:75:78:c8:90:47:01:ea:37:
         e6:73:e5:9d:a4:78:50:30:4b:15:f8:6f:1f:77:6f:12:e7:3d:
         f5:d2:6b:d1:f8:6c:10:ad:be:3b:69:40:91:ae:d0:04:ca:5f:
         e0:ac:9a:4e:3b:d4:32:3c:bf:63:15:89:0a:aa:73:fa:3d:b9:
         63:3a:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----