Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          7H//RhwE22mWYbZEAmhVpoSxd6clqEpYZv20xlP4Www=
Subject key identifier:   FE:9C:9B:0C:BE:B8:75:82:CC:48:A0:CC:63:AA:41:7F:4E:48:2F:49
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       01962E61A455268332896C8ED2117B4C781A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=)
                          2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=)
                          3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: u2Zi5QPZRQb2ucZsPEBvIKL0lxUsU8dO30GlcIC0Yvw=)
                          4: Y3EPCVedITqwlsI8tq2oHmV74uA.roa (hash: NApSJnbDytNl9MdnnM7AVghalmDl36hhBVDmwSTO7A8=)
                          5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:55:26:83:32:89:6c:8e:d2:11:7b:4c:78:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=fe9c9b0cbeb87582cc48a0cc63aa417f4e482f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:32:9f:90:6a:55:ff:9b:93:b9:54:52:3b:
                    87:e8:1f:ca:d0:7d:81:e1:94:7e:1f:94:f8:e1:ae:
                    12:f7:22:19:fe:21:81:65:85:62:de:98:f2:81:8a:
                    35:d7:cf:4e:cc:e4:5b:ca:ae:93:e8:90:bf:6f:0c:
                    31:1b:74:a7:2b:ec:8e:95:82:c4:fa:7e:84:88:a7:
                    97:83:3a:bb:71:5a:1e:c7:94:5a:da:5c:19:22:93:
                    66:8d:16:cb:e2:a0:e4:d5:7a:d8:f1:eb:ce:be:d9:
                    7e:4c:36:85:46:83:b7:63:9b:69:a7:ca:75:66:65:
                    22:e3:f4:b7:1d:69:66:26:b9:40:cc:30:4a:a4:dc:
                    f8:fa:44:ad:88:6a:eb:68:d0:34:4a:f1:48:c0:59:
                    1a:1c:28:7c:07:28:8c:4f:d3:da:28:81:4a:61:0b:
                    17:d4:03:fa:0d:d1:a5:b4:ab:ab:86:51:cb:fe:27:
                    76:3a:18:20:82:1a:59:cc:84:08:22:17:a9:ee:dd:
                    9a:2c:f0:98:6d:2e:7a:fd:cc:39:13:61:6e:8f:b6:
                    0b:8b:38:01:23:55:2b:2f:b3:9a:cd:9c:f1:b6:80:
                    50:4e:82:bc:b8:26:03:a7:84:e8:86:b7:4b:94:bb:
                    fc:a1:a2:24:a3:f9:47:57:cd:d8:e0:98:4d:f9:b4:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9C:9B:0C:BE:B8:75:82:CC:48:A0:CC:63:AA:41:7F:4E:48:2F:49
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d9:da:67:62:47:fc:3f:a1:18:88:e0:6e:87:25:3a:d1:e3:
         ae:ec:b5:af:b7:9e:70:f6:3f:6c:fe:78:a9:77:0d:51:47:45:
         5f:50:4a:70:7d:a1:3e:78:e4:10:54:5e:ca:09:43:f5:79:d1:
         21:2b:43:8f:1f:2d:aa:de:c4:15:e3:8c:1f:66:7c:10:6e:68:
         0f:a2:9c:f8:67:54:cd:3d:9f:a1:ef:2d:59:18:a0:2e:e9:f4:
         26:ad:16:75:4d:07:d5:05:22:32:07:cc:bb:6c:d5:76:c7:38:
         cf:98:09:93:46:50:e5:c5:5c:4a:57:b4:ad:4f:7d:ca:cb:b1:
         43:c0:7c:74:22:ca:1b:93:88:f8:d4:94:6d:a8:3d:d0:b2:26:
         4b:fb:78:b3:af:be:2a:1a:54:6f:aa:5b:f3:7e:e5:83:37:57:
         78:2e:7e:7e:c0:3a:96:55:aa:66:5d:07:75:bc:14:fe:20:5c:
         8c:95:97:4f:fd:4d:92:8a:77:8a:62:b9:21:01:0d:ba:45:10:
         8b:02:a1:17:e0:73:cc:17:9f:79:96:78:dd:96:a1:f5:0e:f8:
         c6:be:19:10:a2:a8:ea:1a:e0:4e:43:a5:01:ad:b5:87:7b:a6:
         dc:ed:c0:57:d5:25:58:f3:11:cf:d7:a1:62:1a:30:01:cb:9d:
         56:6e:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----