Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          EUku60V6ZA3lzh48BzYPTauicIDVyijnhj7ff053+Ms=
Subject key identifier:   ED:38:70:3B:70:E8:03:46:D6:0F:07:AD:AC:D4:1E:29:00:63:09:4D
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       01962E98F1AE9D4387275270BEC0ACC90290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          093B
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: mG/TyQrSpOvsE21/9EEzKL5fySzhVebG9SfCyDOWCg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:ae:9d:43:87:27:52:70:be:c0:ac:c9:02:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=ed38703b70e80346d60f07adacd41e290063094d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:0f:1d:aa:62:02:37:02:e3:06:6d:b9:89:
                    1c:24:dd:6c:c6:2b:01:45:10:d4:27:ad:66:2c:36:
                    15:64:c3:20:c0:83:4f:3f:56:be:b4:ab:8e:0f:76:
                    1e:76:79:b2:6a:5b:73:77:1e:b9:fb:43:3e:de:b2:
                    30:ec:46:e2:2c:fc:ea:33:86:1a:1c:92:0d:58:4f:
                    b8:eb:4a:97:c1:ea:2c:b7:d1:34:ab:d7:24:13:97:
                    30:59:b0:a2:b5:7b:95:41:36:74:4d:9d:7e:19:71:
                    43:b6:ce:3c:e0:ea:b1:3e:ca:26:d6:58:61:03:f2:
                    94:3f:8f:23:12:2a:9b:8f:2b:34:6c:4c:6d:44:72:
                    73:ac:7d:0a:c2:5a:36:38:37:5c:af:e1:89:bc:d1:
                    d8:0e:a2:3b:02:39:52:9f:b0:05:f7:08:86:7c:cf:
                    ac:4e:f0:4b:6d:c4:46:9f:76:6b:79:eb:ab:c8:26:
                    7d:4d:65:30:bc:5f:b5:e8:c4:2b:8c:76:90:d8:b0:
                    ad:50:8e:1b:25:40:ca:a7:89:00:83:ff:cc:54:3a:
                    da:07:0c:36:80:11:a9:65:3e:69:39:aa:ef:b4:3f:
                    d6:c6:c3:00:8b:39:7c:a3:1f:dd:3f:a3:80:b5:0c:
                    1e:d7:93:6d:20:d8:26:72:66:b1:f6:d3:33:34:ec:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:70:3B:70:E8:03:46:D6:0F:07:AD:AC:D4:1E:29:00:63:09:4D
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:d9:fb:0e:78:25:e5:f4:b9:57:6a:1e:a8:d8:58:b9:64:
         2d:59:5f:87:a4:95:62:ee:1b:28:2f:a3:37:00:a4:65:ae:f1:
         69:ed:e8:03:76:69:dc:b5:7a:16:84:ff:e0:a1:cf:09:02:27:
         4e:19:2a:5e:08:cb:c4:cd:37:8b:e4:00:4b:a1:ed:c2:60:cc:
         81:7c:db:57:cc:12:46:e6:01:5f:c9:06:cd:2c:7a:8a:0c:be:
         3d:34:30:11:ab:56:cf:09:8c:62:b7:54:5c:95:78:f2:e4:6e:
         1b:cf:2e:0d:0c:9e:fa:44:2a:6a:e0:50:e2:69:59:d9:7d:fa:
         ff:c9:ea:e3:06:03:e2:a4:f2:83:0a:f8:14:33:be:8d:25:a8:
         1a:fd:b9:9a:1a:91:20:f6:08:36:de:36:6b:35:4c:6c:2c:e2:
         4d:0b:46:f4:3e:3b:31:c4:cc:95:be:2d:58:3c:13:11:1f:f8:
         1d:b3:64:7e:78:ee:46:0f:ac:30:66:9f:08:59:b3:63:cd:e1:
         c8:e6:e5:f5:b2:66:dc:21:8b:82:ec:a2:21:c8:dc:a9:9c:30:
         f7:76:c6:4e:d5:f3:d4:29:f3:9b:b5:1f:17:74:77:5b:b3:33:
         73:87:19:9d:42:0a:8c:47:88:5b:fa:73:a0:7a:a9:a7:f7:3c:
         92:a5:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----