Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File:                     weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier:          fw3lxeqbeMA2MV/1+sjaaHpr6A9D7cOoJU28cwboGQc=
Subject key identifier:   A5:21:A8:9D:57:47:D5:3A:3A:DC:D4:E1:5E:1C:0A:83:53:60:C7:B4
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer:       /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial:       01962F066DDCFFFFD4FDD46C1F13BECFD16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
                          2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: stAalFtRSKrcp/PL4hpDUHptPi34rJ1oCguP+vukifk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:dc:ff:ff:d4:fd:d4:6c:1f:13:be:cf:d1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=a521a89d5747d53a3adcd4e15e1c0a835360c7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:aa:f1:77:8b:1e:c8:39:4c:8d:b2:8f:c4:
                    6f:4f:76:d8:a4:7a:e3:20:8d:84:c2:23:fd:18:e1:
                    bc:56:13:69:06:05:8e:e3:d2:48:72:63:98:a1:a0:
                    34:df:95:42:8b:03:7c:38:62:23:82:f6:9e:51:72:
                    2f:41:a7:26:e0:c1:f0:9e:29:6e:ac:fa:bb:b4:68:
                    05:ed:db:e1:e5:80:d4:55:61:dd:56:01:4f:e7:2e:
                    7d:37:20:0c:4a:93:1d:ab:ef:23:f6:b4:b9:4f:26:
                    79:2f:20:3b:a0:24:6e:1a:d5:08:c0:67:92:ae:d6:
                    82:75:32:97:92:dc:51:64:f5:50:c4:f3:8f:ec:8e:
                    8a:f3:ac:aa:77:0a:50:16:a1:d9:4f:75:39:49:a4:
                    a0:86:27:3b:b3:84:48:76:c9:7c:fd:0a:5a:34:19:
                    71:d9:47:a8:28:c8:a5:a4:af:e9:fc:b0:80:27:ad:
                    5f:c5:77:fa:fe:b3:7a:0f:4b:32:2e:ab:a6:14:b0:
                    3b:59:7d:8e:35:ec:c7:35:91:25:48:dc:f1:9c:a1:
                    8c:43:46:6c:bc:60:77:c5:08:f7:f3:1e:d8:c3:11:
                    b7:85:e6:aa:fe:9a:89:46:f7:7e:21:7f:2c:b1:40:
                    4a:e4:b4:03:d9:4f:7d:40:8a:b7:ca:51:e6:7c:97:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:21:A8:9D:57:47:D5:3A:3A:DC:D4:E1:5E:1C:0A:83:53:60:C7:B4
            X509v3 Authority Key Identifier:
                keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:c3:22:75:58:01:2f:8f:a5:90:d8:bf:72:28:8a:c1:83:
         84:e6:4b:d3:0c:a0:99:5e:c4:02:50:1f:82:22:37:5a:ab:8b:
         30:d6:b0:db:92:f3:0d:0a:5e:30:30:43:03:31:e3:fd:86:4d:
         84:13:be:01:10:c2:a5:95:e8:e5:29:64:d3:5d:60:e3:0a:ee:
         e7:20:55:a1:5e:2f:0b:83:08:16:c5:a8:6f:b6:aa:63:b7:fc:
         ff:3d:70:15:d8:df:bf:9b:b7:7d:a4:c5:b9:bd:82:2d:17:dc:
         ae:49:72:89:35:f5:a1:21:c5:8a:ee:47:51:08:1f:cb:82:3a:
         e8:31:db:45:b7:dc:ba:15:57:8e:2e:d7:fc:5a:6a:13:9a:a9:
         8d:f3:62:26:79:51:68:e2:45:c7:5c:e6:02:ae:c7:21:55:33:
         88:b8:16:e4:e6:fd:a4:0a:19:da:f6:6f:96:eb:b6:77:bd:be:
         f6:d9:3c:78:a6:65:a8:18:83:98:01:ee:94:65:cb:35:9b:5f:
         04:bc:29:82:da:27:56:21:28:32:c1:ad:3d:60:bb:6b:d4:87:
         be:55:a8:5c:88:1b:ec:6d:b9:f5:c5:6a:b0:73:9e:ae:99:95:
         8f:62:09:17:24:7d:ce:63:87:ce:4d:0e:8d:d5:a7:7a:70:0b:
         36:13:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----