Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File:                     WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier:          r5m6c3KS5qM6JSYcoZIET3yKU0X7djtxZwUDzlu81bM=
Subject key identifier:   8A:53:D0:7E:2B:0D:E3:68:D2:4B:AC:D5:9A:BC:3F:03:40:4C:11:E7
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer:       /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial:       01962E98D903146E351BB5A6591D1315610A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: SbK5WV5YxRuXqAuNVNWGCABr4186+Ri9e/RytZuwDfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:03:14:6e:35:1b:b5:a6:59:1d:13:15:61:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=8a53d07e2b0de368d24bacd59abc3f03404c11e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f0:6b:ca:62:47:f4:31:01:ed:d7:5e:e1:ef:
                    0f:04:e4:f8:53:68:e5:bb:69:5e:47:89:5c:38:3e:
                    7c:30:e0:03:f0:cf:32:3d:a6:e3:8e:a1:28:b1:2a:
                    a8:a3:b3:41:2a:08:9c:cf:a7:50:32:3c:aa:d2:3c:
                    d0:92:72:e4:a2:27:c1:00:ee:f3:21:57:71:6c:ef:
                    ef:f8:c8:28:63:c9:c5:57:9e:67:8a:71:a8:b9:ab:
                    86:ae:fd:a0:40:74:f4:cd:5b:70:51:57:51:8d:b5:
                    10:d9:0e:dd:7f:7a:3c:d2:93:4e:af:17:8a:9f:84:
                    36:69:0f:c7:76:88:fc:56:4c:79:31:d0:b0:fb:5b:
                    f4:5f:ec:22:ad:22:5b:3d:3f:f9:09:e2:77:a1:64:
                    23:f4:19:7d:da:9e:a6:7b:18:ad:c6:c6:0c:ae:44:
                    23:c2:b4:a5:a5:4d:6d:93:89:f9:6a:bf:60:38:20:
                    4f:21:65:f7:24:65:ae:48:cd:a7:a9:9a:88:c6:b8:
                    12:a7:c5:a5:a0:25:2c:cc:bc:88:bc:20:a0:a2:f0:
                    49:79:cc:b8:48:f0:47:cc:92:45:91:0d:80:d3:2f:
                    0a:08:02:45:fb:6a:11:e9:65:c8:4c:3d:d1:d7:a8:
                    b4:45:d4:6e:ad:a8:84:1f:f5:66:2d:48:d8:f8:8d:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:D0:7E:2B:0D:E3:68:D2:4B:AC:D5:9A:BC:3F:03:40:4C:11:E7
            X509v3 Authority Key Identifier:
                keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:b4:a1:97:72:27:e4:c9:c3:a6:db:0f:b6:87:7f:94:45:
         d4:0a:22:79:a5:9a:2f:e9:bc:67:e7:73:3a:52:55:cc:d4:d5:
         d2:e9:19:23:6a:d5:8a:c7:52:22:49:32:c3:44:39:1f:b2:f3:
         7c:a2:56:7b:3d:e1:0a:cb:d7:d2:5e:67:4d:32:ca:d8:b1:87:
         d7:73:93:f6:13:4d:c9:50:be:13:ca:2a:46:43:af:47:98:d3:
         46:1e:d6:4f:ee:98:a5:f0:aa:aa:10:b3:f1:18:ae:e0:ab:bf:
         98:13:a3:e4:01:e4:ca:e0:17:5a:78:43:78:32:ae:5c:3d:84:
         a8:fb:b8:a0:82:ce:00:2e:af:a8:47:30:1b:63:be:42:7c:9e:
         6f:58:66:19:1f:79:2a:8a:38:c2:1f:63:fd:86:12:f5:22:15:
         4f:1a:bb:e0:e0:f5:e9:9f:82:e2:cd:e5:4b:20:76:9f:a0:47:
         20:00:c1:5a:0c:37:21:7d:db:63:6d:30:95:43:21:12:12:3d:
         43:15:51:9e:6b:78:42:32:64:ad:e4:ad:d8:d2:14:ae:5e:be:
         9f:8f:94:7f:2b:71:dc:73:f5:76:2b:b5:2d:18:00:57:1c:b8:
         40:16:a2:4e:4c:37:06:07:91:8a:41:28:29:98:9e:9d:ed:2c:
         78:b5:3c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNkDFG41G7WmWR0TFWEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDQwYjM5Y2Q5OTQ5MDlmNTUwNDEwZGM0Nzk0NWJiNWI0
OTUyZjkwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
Eyg4YTUzZDA3ZTJiMGRlMzY4ZDI0YmFjZDU5YWJjM2YwMzQwNGMxMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fBrymJH9DEB7dde4e8PBOT4U2jl
u2leR4lcOD58MOAD8M8yPabjjqEosSqoo7NBKgicz6dQMjyq0jzQknLkoifBAO7z
IVdxbO/v+MgoY8nFV55ninGouauGrv2gQHT0zVtwUVdRjbUQ2Q7df3o80pNOrxeK
n4Q2aQ/Hdoj8Vkx5MdCw+1v0X+wirSJbPT/5CeJ3oWQj9Bl92p6mexitxsYMrkQj
wrSlpU1tk4n5ar9gOCBPIWX3JGWuSM2nqZqIxrgSp8WloCUszLyIvCCgovBJecy4
SPBHzJJFkQ2A0y8KCAJF+2oR6WXITD3R16i0RdRuraiEH/VmLUjY+I1dKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpT0H4rDeNo0kus1Zq8PwNATBHnMB8GA1UdIwQY
MBaAFFsECznNmUkJ9VBBDcR5RbtbSVL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTkt
NTVlNzAyMDliZTMyLzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTktNTVlNzAyMDliZTMy
LzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPne0oZdy
J+TJw6bbD7aHf5RF1AoieaWaL+m8Z+dzOlJVzNTV0ukZI2rVisdSIkkyw0Q5H7Lz
fKJWez3hCsvX0l5nTTLK2LGH13OT9hNNyVC+E8oqRkOvR5jTRh7WT+6YpfCqqhCz
8Riu4Ku/mBOj5AHkyuAXWnhDeDKuXD2EqPu4oILOAC6vqEcwG2O+Qnyeb1hmGR95
Koo4wh9j/YYS9SIVTxq74OD16Z+C4s3lSyB2n6BHIADBWgw3IX3bY20wlUMhEhI9
QxVRnmt4QjJkreSt2NIUrl6+n4+Ufytx3HP1diu1LRgAVxy4QBaiTkw3BgeRikEo
KZiene0seLU8AQ==
-----END CERTIFICATE-----