Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File:                     wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier:          EgGuxAF0waXs1WG30uKtNM9mhRP6kkqIzOicZebyAis=
Subject key identifier:   5A:64:27:86:06:BE:EB:15:82:C1:0E:D1:8E:9F:0F:91:59:D2:FB:B4
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer:       /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial:       01962FAB3932297FAAA79E2F38A989426775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number:          0499
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
                          2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: cRWQ9f/fQFo3HxvdawHPnHcodM0ceUnkHojLXnQSNpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:32:29:7f:aa:a7:9e:2f:38:a9:89:42:67:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=5a64278606beeb1582c10ed18e9f0f9159d2fbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:55:30:1f:73:c9:81:cd:ca:ba:29:dd:ee:
                    a5:90:9a:fc:82:d2:39:18:65:92:a9:32:44:22:6a:
                    6a:d8:08:f2:39:2f:fc:b4:fe:45:a4:44:2b:5a:91:
                    92:ac:d9:c7:b3:a1:11:06:07:87:4d:1e:43:63:26:
                    65:a2:57:99:71:01:c0:51:ae:77:4f:1c:cb:9b:3f:
                    88:1d:4a:7c:05:b0:2a:d6:00:88:a0:ed:77:f8:7c:
                    13:25:70:e0:d1:cf:c2:3f:45:7f:a1:80:00:3c:24:
                    01:61:c0:69:4b:1b:86:7d:6c:ec:a7:cb:3c:2a:f1:
                    8b:37:8c:c5:63:bf:fb:f9:7a:2c:92:5f:71:97:f1:
                    d9:56:25:6a:6d:8e:3d:c7:4d:39:f4:52:53:2b:d1:
                    0b:f2:a4:3c:ee:5f:dd:46:7e:4a:9e:28:0d:e4:55:
                    5c:f2:42:96:08:de:84:51:dc:8b:23:e7:f1:df:3b:
                    4b:d4:7d:6a:16:08:d8:a4:e8:37:56:b8:23:aa:76:
                    35:60:53:8a:04:1d:b8:10:79:70:88:f5:76:9e:ba:
                    ee:aa:2a:7a:43:92:e4:af:b6:62:22:b4:0b:6a:86:
                    52:9b:09:56:80:41:bd:b7:0c:74:e9:3c:74:c3:c6:
                    b4:02:b7:23:4e:ba:f5:8c:38:85:8d:45:42:eb:6d:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:27:86:06:BE:EB:15:82:C1:0E:D1:8E:9F:0F:91:59:D2:FB:B4
            X509v3 Authority Key Identifier:
                keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:80:79:4c:4b:77:47:57:46:d2:a7:58:7c:3f:82:ae:c6:
         0d:92:64:2e:7b:db:f9:3d:68:34:b4:f8:e5:41:a5:a8:42:db:
         7d:fe:0f:32:05:f1:89:81:96:8c:e6:90:f9:3b:ab:6a:81:8e:
         a0:75:fc:80:46:d2:15:33:27:ab:e0:87:fd:3f:29:7c:e1:f6:
         b4:05:27:9f:8f:6e:a5:a7:3a:79:71:d4:6e:1c:7a:99:9c:87:
         57:30:45:1d:2a:ce:6b:b3:36:a2:21:41:9d:69:ea:3e:f4:81:
         68:0c:65:14:26:00:1c:45:95:55:14:af:a1:99:e5:fa:95:ab:
         d8:d8:38:b4:d8:da:a1:0b:6f:c1:94:7f:e0:ae:f2:27:04:45:
         d4:5b:6d:cd:e2:bb:41:2e:59:d1:69:65:3c:33:95:e9:b7:af:
         87:85:81:fe:68:9b:9b:63:95:96:79:a8:95:24:33:e3:a9:a7:
         83:dd:85:6e:1c:53:19:d1:93:dd:87:ff:a6:7e:c0:bb:89:55:
         d2:b4:1d:86:86:3e:2f:0a:e0:63:46:6d:f3:0f:bd:77:08:9f:
         51:03:bd:6c:4a:2e:85:c5:39:d6:84:f1:bb:cb:dd:4d:99:19:
         cf:9a:84:42:42:ec:fd:c2:fd:b7:a4:a3:7a:d7:29:98:45:3a:
         c4:17:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----