Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File:                     wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier:          2ML5gTBAcim9OLVRGTWTJYVMCRHvcdFN0MjOlKu374U=
Subject key identifier:   B0:AB:F1:70:D2:29:0E:74:C3:06:91:68:5D:09:28:D2:68:E2:79:15
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer:       /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial:       01962FAB6DE726EAF143CEB082F0C9887EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number:          0DE7
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
                          2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
                          3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: cczPnEv0IE8SSjlX/+132930sZ5JPSpkqPVOTDniLpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6d:e7:26:ea:f1:43:ce:b0:82:f0:c9:88:7e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=b0abf170d2290e74c30691685d0928d268e27915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:a4:e6:c7:4d:a8:fc:33:e7:70:09:d5:2d:
                    1c:49:3f:f0:ce:a3:db:f1:47:73:d3:29:b3:62:6b:
                    73:b8:7b:44:64:aa:b4:01:83:35:6b:ea:7f:13:77:
                    60:fe:9d:e2:91:7d:23:85:69:48:09:aa:92:fe:9a:
                    b7:df:a5:c2:3c:a0:ef:fc:8b:40:0c:7d:4d:f4:26:
                    38:00:c6:a0:82:6d:12:dd:c5:a3:9b:b2:bb:e4:5e:
                    23:69:75:02:2d:f2:bb:b1:d6:30:28:ec:4a:e0:98:
                    18:a3:20:66:52:47:3f:5e:f0:30:8f:92:a0:68:be:
                    b0:78:37:c5:68:d0:8d:de:8b:37:0e:74:c8:29:0e:
                    77:2a:87:5f:49:31:99:80:bd:f7:ff:de:84:8e:2c:
                    87:51:43:ee:f4:bc:d4:9b:f0:36:4a:05:ab:8d:f4:
                    d0:4b:1c:64:58:2a:bd:9b:e0:55:d9:d1:68:78:89:
                    50:0d:31:c6:08:5a:f3:b7:8b:40:41:d3:08:b0:56:
                    7c:2b:59:c0:5b:7d:d0:c2:f2:e5:05:46:a7:98:da:
                    b5:2e:6b:01:5e:29:55:87:6f:61:dc:f2:5c:f3:7d:
                    e0:29:23:6b:48:0b:8b:31:ef:1d:c8:e6:91:e6:05:
                    08:e2:ce:fc:33:4b:9c:23:66:0a:0c:c7:c8:1c:a0:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AB:F1:70:D2:29:0E:74:C3:06:91:68:5D:09:28:D2:68:E2:79:15
            X509v3 Authority Key Identifier:
                keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:14:79:5b:03:8e:f5:65:da:8a:9a:e8:1c:a5:4c:e2:1d:c8:
         36:c2:df:b9:5c:1a:79:12:fc:7d:1d:af:3d:c6:9e:91:e5:67:
         a3:4e:c8:3d:4d:24:f5:36:d5:d4:65:4f:ca:b3:d2:66:12:36:
         78:c3:d9:c5:64:75:fe:d2:ab:38:db:bd:dc:c6:e0:11:b1:a7:
         e6:f6:6d:26:1a:e7:b6:46:f2:6b:e4:d6:8d:de:b6:bf:17:4d:
         78:58:0b:f2:36:b6:6d:13:a2:da:c7:7c:10:2e:b7:b4:5d:e1:
         01:ef:0e:7f:13:83:af:ac:a3:29:f5:4d:86:7a:5e:15:bd:e5:
         89:df:14:e2:be:cb:a5:9e:f0:f9:4b:f5:79:d0:ea:96:21:93:
         c4:13:4e:3c:71:5a:61:69:61:c5:ce:b6:f4:78:fa:fe:c3:38:
         46:97:00:91:89:ce:c0:74:04:d6:99:c5:12:68:ee:2b:e5:3a:
         c9:95:7e:c3:e3:03:8b:0c:86:30:81:2e:85:5d:4b:eb:c2:54:
         2d:1b:04:92:7a:40:ca:85:6a:fd:0d:7f:b8:31:bd:b9:35:38:
         36:db:55:e1:15:e6:df:dd:97:01:5e:e6:f8:61:57:f5:cf:15:
         65:1a:29:4e:1f:22:09:b0:c9:0b:40:4e:c3:71:93:fd:34:31:
         d4:46:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----