Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File:                     wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier:          B/Zm7rym5gYgq0ZtzwrU7kOKFzsOeb/p082lfTabmqA=
Subject key identifier:   AC:58:30:8D:D1:93:D6:3F:A7:7A:77:BB:9E:18:45:29:6F:83:84:6D
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer:       /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial:       01962ECF54D6C2C922FFC7559312E53BA3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
                          2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: nJZMrF++gFVQsFxFM2jMOBsvEU5O7A1JNeBVa3FyLF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:54:d6:c2:c9:22:ff:c7:55:93:12:e5:3b:a3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=ac58308dd193d63fa77a77bb9e1845296f83846d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:69:ec:41:54:47:06:8e:0d:6a:7e:31:eb:
                    94:18:9e:7e:19:87:dd:7f:37:31:fe:e2:c3:87:23:
                    01:56:e2:f8:e7:d9:ec:a1:48:a2:7b:8f:66:06:cd:
                    a5:ec:0c:12:0c:40:b9:2b:cc:2b:12:05:de:bb:64:
                    d1:b1:ed:9e:94:e0:86:28:8f:ac:78:55:d8:e6:81:
                    e3:df:c1:fe:60:3e:ea:53:89:5d:e4:c9:4e:3b:55:
                    bd:63:ac:ba:34:28:6d:12:60:0b:8a:4d:41:82:3b:
                    c6:36:b6:d8:43:fd:15:97:21:28:80:71:f8:6a:6d:
                    c7:83:ec:12:4c:a1:31:be:9f:fd:ca:58:42:40:58:
                    52:50:dd:f9:a2:f9:c0:da:09:bc:61:05:ff:32:67:
                    d6:88:e5:d0:b6:57:b2:45:e6:58:c5:83:45:75:e7:
                    79:23:f3:60:f8:ab:1e:6d:58:61:bf:63:47:cd:df:
                    ad:8f:54:cb:59:91:ef:e4:d4:be:97:de:08:06:09:
                    97:bb:ab:eb:16:4d:7d:4e:67:f9:85:6e:21:c2:44:
                    76:4d:d4:5b:33:5d:26:07:a9:f6:c1:d9:84:8d:8f:
                    52:0a:29:f3:4f:48:27:66:1c:6d:92:1f:62:c4:66:
                    6f:c4:72:0f:b6:df:d5:3d:20:fa:c4:73:15:b4:2a:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:58:30:8D:D1:93:D6:3F:A7:7A:77:BB:9E:18:45:29:6F:83:84:6D
            X509v3 Authority Key Identifier:
                keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:53:8b:12:6b:88:89:81:a2:98:d7:b4:fe:fe:05:7d:41:
         8d:72:8e:e4:7d:dd:1e:96:7d:c8:85:8f:2c:a4:9f:bd:d0:d5:
         bb:8b:38:87:35:99:b0:a1:e0:9e:9c:23:10:10:41:3d:97:a1:
         3b:4b:95:e0:34:bf:0c:cb:d5:ee:ed:18:36:88:db:ea:4b:ca:
         3b:9a:f9:28:5e:1b:0e:2c:a4:0a:09:44:b9:0f:99:b9:09:15:
         ec:7d:d4:1a:b7:08:68:70:81:95:af:dd:46:dc:32:1f:66:98:
         3f:52:df:98:aa:62:ee:a9:dd:a9:2f:a3:c1:74:b9:c8:37:04:
         d3:60:c0:ea:f5:1f:fb:af:dc:12:ad:99:0f:91:59:1f:60:74:
         c2:56:f2:56:58:15:4f:18:ca:76:8b:10:ea:0c:05:88:10:42:
         eb:cc:f8:bb:85:2d:54:6a:bd:c1:b3:f3:83:06:07:4b:ae:ee:
         7a:e1:82:db:9b:c5:06:7d:64:bc:8e:0c:fd:37:c3:63:7e:5a:
         34:4f:20:cd:c6:c1:a0:34:ef:af:33:79:1e:a1:66:08:f6:fa:
         31:18:f4:3a:d8:50:9f:74:1a:ec:14:6a:6e:eb:59:76:e0:14:
         3d:58:f6:73:06:e8:7e:2b:84:f2:fb:5b:e0:87:25:0f:d7:38:
         70:5c:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----