Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          nxGXEF7lOsIyijseVEKystP6BvpKtpGNDi2e6bMETy8=
Subject key identifier:   7D:85:8B:D0:EE:00:82:70:5E:25:F3:65:7C:2B:45:F3:B6:20:81:C7
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01962E997B2AC6CF46D4B4C4AB77E8A80606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0693
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=)
                          2: 7T6wbVSVfUbMQxA9Kfj6RlssxJA.roa (hash: CZDJpo6OSo3TFwUyZ1mHlAO51KLjNoVwRtMMsfn8f5w=)
                          3: 7auTlPRETRxcXk782_NChYijzmw.roa (hash: F+8y6oP0A0jc2woNB3astWD44+RmkWJPxqBkh/5OKlY=)
                          4: 9fsRc_BMbpYOg3HPrunqRbDandU.roa (hash: hkwBhq+hT9NHPOwlCpFk+QSmRgol1ZMkbmDm8IdLgcI=)
                          5: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=)
                          6: CMswoFz0kQnMGtr8LzkjHMaEYGI.roa (hash: olT02ujNnke3gR3cLyhD5YqdPmyoi+LNOKFLBkEVlos=)
                          7: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=)
                          8: FjZGrMmLxbb9ytGgYofXj5vEujM.roa (hash: kBfv+5FmyqPPeNOTTvyEDc9IM888mkH1dlLnLqeTMNA=)
                          9: H3ANC_Zr3HuvxcsKgmLcR7Rbd0k.roa (hash: QhCktI6Qg0USZE6iF49wU9TX0uMlvnP2Vzj+lZRVasI=)
                          10: KZJaSJuKG1aca7PnWGS7Y8cN4O8.roa (hash: Mrpw2zrBnc6NWdkrM0RaFO22/f3tmZVVNt6DDtddWIM=)
                          11: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=)
                          12: NNC7tJaGBVx3syUkmDF30itCW_g.roa (hash: HivK2q7Gci8gSQAradZW2iONMhmJm8FdFYX9H1HYy4M=)
                          13: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=)
                          14: REJlO5RDgGg8KHSZHn8vGUTMF7E.roa (hash: qp6IBgSlDMfFvmUxqyeIHZgSQ5M/3Vlus1RH7Mg0+Rw=)
                          15: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=)
                          16: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=)
                          17: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: Eo/ghx2dbL2U7/i3YvUPINkjwur0GbTyrnddWfr/ILI=)
                          18: X18r0YcBXdlVt4dtzTGtFKTLVus.roa (hash: fkhj9PhGn/lqfBa/A6zrPfKq6hlSrhRXutstC9gPX5Q=)
                          19: XdV-ys71t1gQO8NcFxxkG9Nl7cA.roa (hash: kvUsQzMSuuWTJbsZpOYtQlNbKvBW+GuG76RGitmvMhs=)
                          20: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=)
                          21: ZCZN07XAGVPmmqkx72Z7HiCk04I.roa (hash: xSeIbJX9BBWH/KK/chZET6n1OpNWJiyCQdQyC1Rxl6o=)
                          22: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=)
                          23: a6qbXteGKWwMlIeihawaSomclXw.roa (hash: aQEkpjVqh2P/hiA0BknVxaoIS4XGPZ4dAO9uuXoQ6mE=)
                          24: b4QTRifih97bgeiTzhcyC2ZKWhU.roa (hash: vFAypOAYsL6k+XE4lFPK93MvMEW1Arhh1rS9Kx4U5Yw=)
                          25: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=)
                          26: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=)
                          27: lKN4UVZtN90tPiHbxWVbAiES2eo.roa (hash: z/Q5abY5hFpeI2vwI0AV9WzD16kLOgpzqlnEO3K5QQg=)
                          28: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=)
                          29: lhffJwZbVCS9uhY0p10SH3Oz6Y8.roa (hash: iIoIfAWmeGMjoRI/egAoCgDlOBJ3pj4fCxJGNN8st/0=)
                          30: llZgG8Y-q78YQeKYfpEfukiXHZw.roa (hash: 750jurlzT+SnwXi+SNTPI/rfnPKw6g8CUFkTXOgWdgo=)
                          31: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=)
                          32: nZQmIW042p_t9yLEBQAHrilQd4Q.roa (hash: lZPRCE2GMXOvENfUgjP5VsUIVXxFRdfGkL6/dEivTZo=)
                          33: oDqQEagIQFa31cOBAlD4y_TvlPc.roa (hash: ooBY4R11jNEUxjSe5bhGHynfrwKEbfV0wSg1AOAVFs4=)
                          34: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=)
                          35: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=)
                          36: rb_J-8_h6RbiliPl0Q3Uy01uw4o.roa (hash: ITUML4K67Ea1/tZVTkocA9J2Y01LiDT/sbO/Jp5FM10=)
                          37: sUXFPW0NRpJM4hG7LzPDan-v-Ek.roa (hash: p4O9sfEQ+qJe5DEqRIHGkARxsLT8DQyNzXhwr7CF1/w=)
                          38: tI_3rsKvgFpQii2TzLBD6Ahd4XQ.roa (hash: v8nNZoNbBFVvaPHreErwOEH3EBxiuy8zs0Ri9pxd/CE=)
                          39: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=)
                          40: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=)
                          41: zM1h9OjeMChx3-dhICjxBLaXcu4.roa (hash: 3SnqlYFTtMhoAgn+gVVKIfPwwlQfIAsQVtJeSIZ8Lag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7b:2a:c6:cf:46:d4:b4:c4:ab:77:e8:a8:06:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=7d858bd0ee0082705e25f3657c2b45f3b62081c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:ae:c0:d9:52:19:fe:d0:05:cb:d0:6b:ed:
                    06:76:0f:f0:40:42:c8:18:4a:1a:f4:20:16:13:93:
                    85:8b:04:2e:fa:b3:fb:8e:72:22:e3:ba:c2:1d:2d:
                    d8:a7:f4:5e:68:be:17:8e:9a:39:e7:cd:d6:97:21:
                    39:78:e4:ee:5e:bc:e8:82:4e:0b:fe:3a:f1:73:98:
                    0c:79:63:a4:f0:65:f3:09:2a:98:b2:4f:f1:31:87:
                    30:c7:cd:05:19:01:d2:53:6c:0a:3e:0c:8b:81:8d:
                    f1:08:5b:62:c1:76:90:e5:05:35:34:84:b1:21:22:
                    3b:7c:11:f4:97:19:da:05:43:b9:6f:91:87:b6:f8:
                    c0:fb:05:2a:e8:b8:09:4b:58:08:19:9f:9e:62:23:
                    77:08:9f:17:c8:de:ca:64:d8:3f:2f:9c:0c:a8:e7:
                    44:f1:9f:72:36:e4:8a:f8:62:94:57:94:58:1d:38:
                    3e:7e:89:66:de:dd:1d:cd:88:b3:05:d3:76:9a:1c:
                    16:fe:1f:e7:c4:63:00:c3:9f:e3:bc:b9:b8:23:1e:
                    51:aa:eb:02:05:a9:30:7c:bd:d2:4c:49:92:4e:51:
                    59:f4:fd:dc:b7:8c:fa:26:48:eb:62:25:37:8b:10:
                    73:5d:88:b1:8c:41:03:fc:70:5e:25:9a:52:ca:68:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:85:8B:D0:EE:00:82:70:5E:25:F3:65:7C:2B:45:F3:B6:20:81:C7
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:4f:f5:2c:54:aa:70:60:46:4c:04:4d:8e:18:c5:c4:c6:
         e2:61:06:78:55:92:b3:c8:ee:c4:ee:f6:0a:f6:89:24:0b:b8:
         be:ce:75:05:4a:a5:24:8c:d2:5d:22:87:2a:09:50:fc:b7:89:
         85:9c:74:15:b4:57:81:0f:ca:28:1f:68:a6:f5:cc:8c:d1:7d:
         4a:be:2b:d6:ab:d1:6c:eb:50:91:a7:cd:c1:e4:77:b6:7e:1b:
         ab:2f:1d:43:31:2c:02:eb:7b:d7:45:01:cf:11:b3:1f:9c:19:
         8a:09:de:6e:af:6b:7f:91:84:3f:5e:7c:62:57:06:d9:37:ba:
         a4:41:79:5c:cf:56:51:93:b6:02:11:36:2f:54:7f:fe:5e:c9:
         82:a0:e4:17:7f:6d:79:dd:23:e2:17:4e:90:3e:a5:24:f9:df:
         94:e3:3d:47:09:f6:d9:ba:3b:c1:58:b1:93:00:ca:c0:35:90:
         9f:66:db:a0:e8:f3:c3:ea:53:6f:62:34:a5:60:39:c6:ee:97:
         cf:f5:e3:dc:cb:c8:de:24:a2:f4:c8:7b:e4:57:73:78:3d:97:
         3f:ed:a4:30:2b:8e:96:02:60:d6:0a:7b:4e:da:76:20:2b:42:
         e7:ee:2e:b7:73:3f:b6:38:36:35:ff:15:7d:f1:84:1e:ca:97:
         e6:ac:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----