Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          ORqAOHllTpRGVzdCsSdDoBp+eF8cU5M8yYtqUV/3Cto=
Subject key identifier:   E9:95:7A:84:F9:91:13:51:E4:2D:12:32:E9:2E:4F:CB:21:56:B9:D1
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       01962E9911EB286CAB1C0F603D416BFBCB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: 9rxfEHXFCgzF/wd3+26a7sYomQ1ONLuP9EkNT/xmBKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:eb:28:6c:ab:1c:0f:60:3d:41:6b:fb:cb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=e9957a84f9911351e42d1232e92e4fcb2156b9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:c3:7e:b0:8e:41:4c:d1:d4:c0:96:38:bd:
                    db:29:e0:ad:f3:6a:1a:5d:91:09:c1:f6:c4:f7:54:
                    0d:1d:63:44:a7:94:d5:09:14:f0:73:85:23:8b:9e:
                    5b:2b:c8:43:40:99:0c:40:87:7f:c9:2b:67:57:66:
                    ef:68:06:2b:eb:21:d3:db:a9:2c:e2:5d:e9:ca:1d:
                    e5:06:a4:38:8c:dc:8a:6d:3e:cc:be:9b:b3:e1:fb:
                    b1:0e:21:fb:f0:14:84:65:90:69:c6:5d:c2:9f:4e:
                    de:c1:de:56:8e:d9:69:24:d7:79:95:44:54:33:29:
                    f0:72:20:97:60:c6:4b:e6:99:54:44:34:61:7b:1e:
                    15:18:d8:b8:a7:7d:58:9f:49:69:e2:04:f6:82:ee:
                    58:30:43:4f:c0:ef:70:05:3b:c7:ac:81:8b:34:d6:
                    41:e6:4e:b8:3e:f6:fb:a5:e7:cf:46:95:49:b0:0f:
                    61:32:57:4c:67:7e:b7:0b:f0:1b:ef:b3:6f:34:88:
                    4e:32:04:86:e5:e9:d0:9d:d0:fe:a4:bd:05:d3:ee:
                    06:26:00:5f:08:59:d7:de:d3:3c:2e:39:5d:47:a2:
                    5b:c4:58:eb:68:0b:1a:75:7c:77:ed:af:38:ef:4a:
                    04:1b:63:29:d4:f3:42:c0:46:1f:38:d7:ed:b6:75:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:95:7A:84:F9:91:13:51:E4:2D:12:32:E9:2E:4F:CB:21:56:B9:D1
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:2e:c3:fa:b8:25:ba:6f:d6:10:71:9f:96:64:6e:09:74:
         a1:eb:f9:bb:a0:8a:06:5e:a3:cc:dd:f5:37:6e:b3:00:e9:98:
         63:e0:25:86:ae:af:31:95:5c:1f:c9:38:44:7b:32:45:58:06:
         25:0f:5e:17:48:33:be:e0:91:db:9d:71:85:cb:31:fd:12:eb:
         32:48:30:47:84:7f:50:57:f6:23:0f:08:e4:52:43:2b:eb:7f:
         8f:98:9c:a4:c8:9b:2e:58:d0:c0:dc:72:73:5f:d6:6d:0f:87:
         fa:c6:c6:d1:fa:b3:a8:4e:99:bd:bb:81:12:60:7e:f5:89:08:
         3d:8d:d0:71:6e:fc:d3:95:4f:57:e9:76:e0:64:84:b0:b6:6b:
         4a:e3:46:b8:14:e4:ee:c9:9a:19:d2:03:c9:7e:a7:3b:c3:04:
         c2:0b:03:de:12:d1:96:9c:ad:97:aa:9f:02:6f:f2:55:87:3e:
         a4:9d:bc:83:e3:75:d8:e8:a9:d0:7a:79:a6:a4:14:fc:53:b4:
         dd:e2:f4:ec:1c:65:aa:75:25:13:40:c4:ea:a1:2a:eb:3c:77:
         cb:31:a1:6f:42:34:6e:fc:7d:74:e9:94:d2:06:93:9c:5e:51:
         fd:19:a5:48:e6:fa:bb:ee:f8:7c:0d:13:2b:c6:f4:03:68:92:
         46:44:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----