Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier:          /8vblslutP/sn3SElXfQZZU2VQxty4fANex6ddHXwIw=
Subject key identifier:   55:17:AE:22:3A:C2:2A:73:BC:43:28:7F:88:BF:39:25:C5:51:E5:76
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer:       /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial:       01962FAB4953DC63988B3D4249A02D089F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
                          2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: 1WIvXJjAQWC9tSEqIaY/h5acoSfFE5pomQzXGeHn2xY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:53:dc:63:98:8b:3d:42:49:a0:2d:08:9f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=5517ae223ac22a73bc43287f88bf3925c551e576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:80:35:94:a8:80:cc:e1:ce:cc:48:56:48:
                    58:28:04:d6:45:ed:07:93:34:8e:d2:38:23:62:4e:
                    eb:87:e0:af:d4:6f:c2:03:47:f6:7f:20:5b:04:84:
                    5f:de:83:bd:a0:df:bc:86:8a:e7:38:7a:0a:f3:3f:
                    4c:9e:e8:6e:93:b3:4f:4a:ec:6d:13:0d:76:3f:e2:
                    b1:d5:fa:40:d8:b9:ba:b8:80:10:94:93:7f:b3:5f:
                    de:2d:48:d6:08:78:32:c9:bb:d4:2e:e1:c8:c5:d3:
                    62:de:fd:da:51:2b:0b:ae:9f:32:21:4c:8c:fe:e0:
                    bb:6a:eb:bf:5a:00:61:e8:24:a7:c6:b6:1a:18:f0:
                    09:06:63:18:5b:1a:d6:b1:0f:a2:a0:32:cb:d3:28:
                    3f:68:56:53:e0:9a:1d:41:6c:62:95:7d:76:c4:a1:
                    14:29:f1:7d:8f:73:36:23:20:d0:07:48:e2:e3:81:
                    48:66:2d:93:1b:6c:52:1f:fa:e4:6a:89:e8:94:da:
                    8a:91:e0:d5:70:14:66:03:e5:0d:06:f0:27:4c:d8:
                    ff:28:13:ae:52:4b:d9:6f:77:95:45:53:50:22:37:
                    42:84:00:10:9b:c2:57:3f:ad:c7:2c:df:ef:02:11:
                    61:62:8c:a7:8f:35:1a:1d:07:7f:5d:2f:25:a7:aa:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:AE:22:3A:C2:2A:73:BC:43:28:7F:88:BF:39:25:C5:51:E5:76
            X509v3 Authority Key Identifier:
                keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:2d:61:77:3b:81:73:13:10:55:4f:f1:81:79:c8:ae:60:
         7b:09:84:d5:a4:31:86:30:df:3f:95:f2:49:6e:7f:13:11:7f:
         66:cd:26:55:13:9a:cc:3b:20:79:7b:d4:67:22:f2:7f:69:a9:
         71:4b:bf:a8:58:11:7d:43:26:88:fc:ed:51:da:5a:36:e5:ad:
         e6:8a:e7:52:8e:41:04:90:b6:fc:7d:4a:1e:7d:d9:a7:16:76:
         9f:6f:b5:39:00:21:8f:51:20:1d:70:d9:42:93:b7:b1:39:5c:
         34:76:fa:a2:de:89:ab:49:37:86:6c:ec:c9:7d:74:65:a9:a3:
         6e:c7:d7:b3:fe:3f:3c:f0:78:ae:3e:8e:b5:b7:0a:9d:f6:cf:
         22:86:18:ae:c0:72:53:b3:69:64:7d:85:1b:77:3c:4c:6b:ef:
         24:44:33:52:95:c8:7b:35:16:65:45:4e:e4:53:67:b2:57:0d:
         4c:aa:cf:66:33:62:b9:2e:22:48:de:80:02:68:92:84:c0:da:
         57:2b:37:ac:da:11:8b:95:66:b8:c9:12:86:bb:86:61:4a:f9:
         5e:76:f9:9c:e2:09:c6:46:80:ca:a5:00:2b:84:c3:5c:8a:ce:
         5f:f2:62:98:ff:c0:91:c8:7f:d0:98:d8:90:3c:b7:77:9b:42:
         95:94:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----