Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File:                     wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier:          Nm65FSu67Y1/NOxQLbyCLCInYmN5uAIV07Wve4y8h3o=
Subject key identifier:   92:2D:EB:69:6A:75:7F:53:E4:D9:83:54:5E:73:7F:4B:72:77:7A:4B
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer:       /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial:       01962F06E251B66A4E53E3BDD225D6B35756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
                          2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: hk76gJmFU+N2UrJ/t6ZdgmcKuQ52YJoQu1zx81us+Hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:51:b6:6a:4e:53:e3:bd:d2:25:d6:b3:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=922deb696a757f53e4d983545e737f4b72777a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:e0:5f:ab:c1:60:6c:af:de:73:cb:0a:02:
                    bf:11:35:53:ea:c5:7f:98:80:84:40:49:65:11:7a:
                    1f:42:d0:6a:5b:8a:db:97:f8:30:8f:6a:63:57:42:
                    f3:dd:f8:74:30:c8:58:c7:0e:08:1b:a5:12:54:b7:
                    8c:12:48:e1:2d:1d:da:0d:53:ac:76:3c:b5:9b:cb:
                    f4:8d:3d:31:9f:80:bb:99:8e:9b:39:48:3d:1f:89:
                    4e:b1:ea:26:be:7b:66:48:a8:0b:5d:ee:84:63:b3:
                    3d:42:41:b1:6e:7e:b4:de:71:83:62:2f:24:e6:2c:
                    c3:ff:28:f4:cf:07:55:e6:8e:77:52:e5:b1:98:f0:
                    aa:cd:e3:a4:c3:a9:83:a3:2a:40:a3:5c:5f:fc:91:
                    9f:f3:39:ab:cd:31:fd:a8:2e:45:f3:67:9d:19:98:
                    1b:81:d3:a9:54:32:fa:9d:17:ee:72:f8:4e:e7:05:
                    a0:bc:80:96:84:ca:11:c6:cd:90:06:57:69:bf:ed:
                    7d:69:40:f9:a8:ff:38:2e:3b:6e:59:48:cc:4c:7f:
                    21:88:75:50:80:7c:95:63:6a:ac:3d:12:c1:26:b2:
                    a8:d8:a5:4b:91:7b:e8:62:13:ac:bf:ef:2e:82:af:
                    f2:a5:4c:48:82:02:a6:dd:33:8a:d0:35:15:12:f2:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:EB:69:6A:75:7F:53:E4:D9:83:54:5E:73:7F:4B:72:77:7A:4B
            X509v3 Authority Key Identifier:
                keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:84:bf:d0:12:0a:54:bf:37:27:c5:50:4c:90:b0:18:80:
         e1:f6:8a:3d:9d:09:30:45:cb:aa:52:4c:c0:26:1c:2f:4b:1d:
         7f:89:a7:15:30:cc:f6:6f:ec:cf:06:09:ba:45:d8:3d:2b:2c:
         54:23:43:57:21:2b:fc:96:a0:fb:ce:2b:57:5c:2b:8c:48:2e:
         f5:f5:ff:10:7b:6c:bf:fc:11:ff:bb:dc:56:63:17:38:87:ff:
         88:f9:87:86:76:cc:cd:53:29:a7:e5:1c:d9:50:51:94:d8:2e:
         61:b8:1d:10:e5:f5:08:7d:c3:ab:4a:c1:ca:fc:91:cb:97:49:
         8f:e6:f5:c8:75:84:57:f7:29:ba:f0:0e:7e:92:f5:46:8d:cc:
         81:54:58:0a:c1:cd:e7:00:98:32:29:63:42:77:38:91:c2:8d:
         64:b5:51:4e:03:49:32:f8:a6:40:6a:d5:a7:37:f7:a8:86:6a:
         c7:81:66:ef:90:be:f5:72:ed:18:9a:e6:97:08:10:cc:74:aa:
         c5:38:ae:50:e7:89:26:c7:5c:e2:b7:03:d0:12:25:5f:ed:29:
         7f:ab:21:76:7d:a7:e1:f7:db:c9:61:90:0c:3f:3b:be:a5:3d:
         63:5a:fd:97:1a:d5:5c:8c:fe:6b:49:71:61:cb:f6:11:d2:78:
         39:7c:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----