Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          0vswXwGdLOUpf6Upp3KIL1SJgBkc/w7SyK+Mo/HO0us=
Subject key identifier:   CD:7C:B9:93:BB:FB:FB:B6:10:E3:83:C9:67:FD:FB:FF:F3:75:6A:66
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       01962E620EC6B614565D85E5B87D1E60F733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          0D18
Signing time:             Sun 13 Apr 2025 09:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:40 +0000
Files and hashes:         1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: r8s52QTcXflbUClAhh9eFwgI3N0IYBR26H3kxwtkD6U=)
                          2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0e:c6:b6:14:56:5d:85:e5:b8:7d:1e:60:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: Apr 13 09:01:40 2025 GMT
            Not After : Apr 14 09:01:40 2025 GMT
        Subject: CN=cd7cb993bbfbfbb610e383c967fdfbfff3756a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:9b:55:8e:1f:ef:d6:86:e7:25:3a:fc:51:
                    5c:62:86:79:88:43:26:c4:b8:07:3e:29:b4:e1:16:
                    52:33:1c:e7:66:9e:fd:17:98:88:39:78:39:f2:b9:
                    27:2a:f2:7b:b9:20:44:12:09:5a:c5:9c:e0:0c:c4:
                    38:df:2a:ce:d8:3a:cf:09:11:8a:5f:c9:8f:42:bf:
                    f4:0b:73:8d:c7:3c:4e:44:9c:73:c0:ea:99:54:21:
                    16:fa:10:c2:fa:e7:09:7c:cf:93:c6:fe:6a:bb:55:
                    f9:c0:23:bc:5d:0a:47:df:3b:62:3e:86:5c:12:74:
                    63:30:0f:67:9b:e5:ab:e4:fb:82:7a:25:54:93:52:
                    08:b7:44:ea:55:b0:16:d4:c2:fe:dc:86:42:a7:d4:
                    61:69:82:59:34:c6:0c:fa:0d:bd:ee:d2:df:ba:ec:
                    43:c8:bc:1a:6e:85:74:92:49:9e:a9:65:9e:dd:67:
                    0f:95:2a:27:70:71:c2:24:43:96:2b:f4:a4:e2:54:
                    db:6b:85:57:4d:da:9f:24:f4:8e:8c:71:48:02:8d:
                    c5:98:bf:4f:d8:f5:05:af:44:21:c8:68:e9:d3:b1:
                    6d:c0:12:c4:96:45:bd:42:3b:b5:c2:d6:e0:67:0d:
                    46:ae:70:bd:dc:04:a0:1f:c5:5a:4d:ae:b7:7d:61:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:B9:93:BB:FB:FB:B6:10:E3:83:C9:67:FD:FB:FF:F3:75:6A:66
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:08:2c:17:49:eb:e6:b3:c2:e9:b4:88:f3:d7:8b:b6:6b:
         c1:3c:57:76:ec:73:f5:ac:ad:7d:ac:29:59:b2:8e:29:0e:fc:
         3e:f5:a2:36:b6:86:c7:c5:de:72:3c:e4:6f:ee:19:4e:d3:8a:
         0c:3d:70:65:30:5e:6a:06:d2:6e:7b:b8:a3:45:2e:8e:53:9d:
         51:7d:cd:24:cc:cd:6b:e9:08:4b:1e:12:70:39:9a:54:19:95:
         01:0b:56:c1:d4:a4:fb:f6:fd:97:13:c7:ab:eb:a1:c3:51:57:
         e6:6e:f2:fb:d9:58:a1:1b:09:9f:72:d7:2f:86:3a:2c:67:8a:
         e7:2a:b1:f2:52:f6:8c:f8:1f:7b:23:84:5b:90:5a:78:de:5a:
         2e:77:99:1d:67:00:59:91:42:3a:24:7b:cf:7a:a0:1a:73:0d:
         66:3d:0e:af:11:e8:f6:82:4b:74:a4:e1:f3:a4:31:74:8b:8d:
         d8:8f:2e:29:ef:60:9a:d6:5c:ed:e1:0c:04:8b:45:03:76:43:
         99:3d:9c:17:8f:56:b8:d8:8c:9e:64:d7:f7:eb:2c:4a:df:ad:
         44:fb:7d:d7:cf:5a:2f:9f:45:9a:69:64:9a:10:08:d2:e5:b4:
         e6:1a:7f:7e:73:e0:ef:2b:ec:1f:4d:51:72:71:84:f4:4d:e7:
         3c:05:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----