Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          62pldZ3RgZpPLbQPxwvonc6Jj+jwgIgaeQIw16Y++Oo=
Subject key identifier:   04:ED:EC:F1:72:FB:48:76:A6:7E:21:62:68:49:0C:FC:22:DC:A9:E5
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       01962DF3CE81F6528B52BFAA6D1C1009ADA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          0DBC
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: EQKDUPTf2xoViVI4Jh+e8kmfxZec1zF0CKcimWFH5JY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:81:f6:52:8b:52:bf:aa:6d:1c:10:09:ad:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=04edecf172fb4876a67e216268490cfc22dca9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:ec:8c:67:25:2a:c5:66:24:f6:4b:02:c2:
                    df:96:5b:48:54:0c:85:f3:d0:46:42:e1:43:7f:35:
                    95:4d:99:ca:5d:d7:a4:23:96:64:cc:c4:32:10:e0:
                    44:c1:78:67:9e:fa:95:50:7c:d9:5e:9a:a1:3a:f7:
                    df:09:20:57:84:ff:5b:b9:7c:bd:a3:14:a6:95:1b:
                    3e:24:a5:ef:1b:86:8a:79:b8:43:bd:1a:53:9b:e5:
                    02:0c:61:c5:f2:c7:83:e1:63:fb:e8:98:de:ba:3e:
                    2e:da:6a:fd:91:6c:2b:60:25:5b:84:f4:e6:14:f6:
                    12:86:1e:14:fb:f0:c8:ff:7e:e6:e4:ef:71:f7:43:
                    a0:83:b1:73:96:91:e5:1c:fb:78:1f:db:6b:10:62:
                    5c:f1:49:dc:c3:5d:5f:a1:80:c1:c0:77:7e:bf:39:
                    40:30:6f:5b:75:ca:df:95:a7:bf:37:15:d3:e7:33:
                    5a:16:00:73:35:a0:a2:7c:1c:ff:7f:df:f0:40:ed:
                    e5:c7:92:ad:4d:5b:67:44:ba:55:a1:fb:a9:f7:d4:
                    69:01:23:d6:eb:14:20:86:93:74:d8:87:97:de:9d:
                    77:24:8f:45:e7:91:20:f2:b6:fb:c4:49:87:7d:70:
                    bc:47:a4:90:38:86:6b:33:9e:2a:83:c4:2e:94:7d:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:ED:EC:F1:72:FB:48:76:A6:7E:21:62:68:49:0C:FC:22:DC:A9:E5
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:37:87:3a:56:0c:2e:62:8e:b0:d3:b4:79:7d:96:92:1d:
         b3:b0:a7:ac:e8:f6:28:0a:71:12:32:c3:78:a1:95:20:9b:30:
         c7:13:bc:89:9c:0d:9b:88:0b:50:b0:2b:74:ea:0b:a8:92:da:
         ad:dc:4f:32:4d:9d:e8:e3:07:9c:d1:e6:0b:c5:6a:8c:9f:17:
         12:59:63:c2:c2:06:10:9a:69:d8:ee:a9:46:7c:d9:f2:01:ac:
         bc:c2:80:4e:2c:ca:c8:17:cd:f3:5b:85:cc:72:0d:1c:69:ea:
         25:69:e7:e5:d9:09:5b:19:55:3a:9f:17:18:ed:a2:73:13:43:
         7c:20:36:fd:33:9f:d0:86:e2:8b:fa:60:46:97:06:c2:dc:4c:
         19:08:d7:21:f2:c1:a4:84:00:e6:8e:a1:ec:53:ab:87:6a:0a:
         b4:c3:03:b5:88:16:b1:3e:bf:04:0e:43:df:af:63:0e:38:c7:
         e2:d2:7d:e7:48:c8:3c:61:89:62:1e:d4:23:cf:6a:66:a3:4e:
         c8:13:85:2c:8a:8b:c3:f7:b7:58:57:91:ef:7f:54:24:10:84:
         72:16:15:c6:0a:b3:c0:9d:4a:65:20:0b:41:ac:64:1d:02:c5:
         f2:10:a1:3b:78:f1:e5:53:a6:0f:3d:f7:06:94:6f:6d:27:11:
         07:6c:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----