Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          rWo3W/5ZvOspVRT88COdKPjB1E4Txs0NhjQ3oG1Nsfo=
Subject key identifier:   5A:3F:D3:A1:33:BF:04:E9:32:A2:3E:18:EA:42:0D:71:6D:53:97:AB
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       01962F071DAC2C86C85D7547D67E5340A385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          1451
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
                          2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: LjE2lGCpQ+CtvVO58RDVcJ+4WAw5g52jZhzsZnIK3Nk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:ac:2c:86:c8:5d:75:47:d6:7e:53:40:a3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=5a3fd3a133bf04e932a23e18ea420d716d5397ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:09:6e:2d:de:42:52:68:3d:57:ca:78:6f:
                    9b:10:92:5a:0b:2b:83:25:38:fb:6d:df:68:0a:9b:
                    f0:42:59:ac:6b:2b:cd:b4:9f:a6:65:d6:c1:4f:47:
                    01:45:cb:ea:db:2a:48:20:d1:60:09:5b:76:9f:4b:
                    06:22:85:d6:93:f2:c9:a4:b8:ea:c0:34:51:1f:96:
                    d1:56:39:80:52:7b:58:17:6a:94:f4:e9:78:8e:ba:
                    ac:c7:a9:31:92:2d:f2:87:2e:99:f7:4c:6f:50:5b:
                    8f:6f:30:0e:67:2c:66:de:97:10:b9:78:12:ed:c9:
                    bc:ad:4a:a4:19:4c:7e:94:13:34:c4:ac:25:23:82:
                    39:11:64:e8:c3:2a:14:dd:a1:92:7f:02:f0:31:d9:
                    46:fd:8a:a0:2a:11:85:59:40:fd:f4:b1:19:a1:d1:
                    af:45:0d:f5:8e:8c:94:dc:76:91:e9:32:28:61:78:
                    5e:bd:54:01:7f:3b:93:8a:df:7d:90:23:bf:05:67:
                    48:bd:42:da:1d:da:5a:71:b4:78:fe:f9:28:c0:39:
                    e4:fd:95:87:90:e5:54:52:33:37:ac:55:b3:be:23:
                    03:3b:ef:72:df:8b:11:1b:03:00:c8:9e:e9:01:b8:
                    5b:38:a8:04:5d:c3:bb:c3:f2:51:ea:08:dc:62:9f:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3F:D3:A1:33:BF:04:E9:32:A2:3E:18:EA:42:0D:71:6D:53:97:AB
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:ca:a1:c5:49:9c:4e:f7:a5:29:ab:42:70:e2:5d:c8:81:
         60:0a:5d:7f:9c:2e:e3:54:71:ee:5a:d6:14:11:17:00:c2:5d:
         6a:b1:eb:10:3a:54:1c:00:b1:90:c8:43:18:7c:5e:3c:8a:e8:
         f2:3b:8c:88:bf:53:f8:ab:f9:36:c4:1a:dd:9a:81:24:fd:34:
         6e:76:1e:71:0d:9c:34:67:7f:c9:1e:0f:38:ca:3a:67:67:ce:
         e8:24:9c:b3:7e:75:28:6b:c9:cd:e8:18:6b:f1:b7:7f:46:48:
         8c:88:69:32:11:bc:02:72:0b:77:f6:1f:58:c8:05:f4:7d:42:
         3d:82:fa:95:60:6e:5c:0d:01:ac:03:ee:03:57:7c:23:7f:84:
         6d:c4:8d:77:1a:77:8a:2d:07:8d:69:ec:e2:01:b1:35:af:11:
         10:98:81:5c:32:a4:4a:fc:72:27:5f:81:9f:97:57:84:f2:cf:
         7e:df:5a:27:17:64:a8:e5:c0:51:f5:4e:41:fc:48:21:17:8d:
         a7:f8:e6:2c:bb:5b:c9:84:42:0b:57:01:95:fb:1b:68:36:b9:
         bb:10:f2:47:b4:c2:43:c3:b4:9f:31:95:4f:ac:42:df:97:db:
         70:7a:fa:5c:04:ae:7c:15:b3:4c:aa:d7:41:79:77:5d:cd:28:
         fd:2c:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----