Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File:                     wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier:          LsCamEgPgbwl6uTrGConb8VVGXe2Y8zBmfAt+BMuyfI=
Subject key identifier:   C3:C9:E1:E1:FD:24:42:89:87:53:37:FE:11:78:83:A1:19:F0:A5:A2
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer:       /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial:       01962F072AB05C27E5FA94C54D8CD20A89D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number:          153B
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
                          2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
                          3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
                          4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
                          5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
                          6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
                          7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: WDzFtKCzAVzGg/MFrsRbWAtpseHLv1NOnqAwo5y71cY=)
                          8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2a:b0:5c:27:e5:fa:94:c5:4d:8c:d2:0a:89:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=c3c9e1e1fd244289875337fe117883a119f0a5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:dd:93:fb:21:18:04:5c:b8:b7:84:8d:e6:
                    42:7c:ff:20:0d:5e:04:3c:f2:c7:28:a2:05:b3:2f:
                    44:9c:17:81:85:62:22:b2:71:97:66:4e:13:e6:05:
                    9c:ed:e3:92:87:48:60:61:19:c3:57:eb:41:93:ba:
                    9f:9f:20:ce:41:10:97:8b:2b:67:ce:23:63:2b:ff:
                    9c:5e:6f:e1:f7:a9:5b:cc:ab:9a:b7:ad:c1:b2:5e:
                    dd:66:3f:a9:2c:1c:5e:51:a9:0f:f3:c0:63:2c:b8:
                    86:69:00:bd:b1:c0:c3:a7:67:95:fd:91:4b:ca:bb:
                    89:15:10:8b:38:0a:65:e9:90:42:61:55:50:a1:bc:
                    88:a9:fe:c7:e2:e8:2c:b9:fa:f0:3d:e8:32:45:36:
                    e0:23:56:0a:76:0e:36:87:6d:18:11:33:7f:ca:e0:
                    82:64:5c:ec:05:a9:8a:23:41:03:0c:a8:ca:03:13:
                    47:c7:09:66:3e:1f:f3:eb:5b:1e:42:4d:6c:52:ed:
                    2a:a2:2d:aa:7f:35:e7:36:a9:45:d8:23:a1:43:c9:
                    b2:ba:44:32:3f:25:6e:8d:96:80:a4:7b:e8:d6:3d:
                    9d:80:ae:cf:fc:69:1a:5f:97:6f:a0:39:8c:03:cb:
                    86:d2:94:78:02:ef:f7:47:b3:65:f3:50:47:15:a6:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:E1:E1:FD:24:42:89:87:53:37:FE:11:78:83:A1:19:F0:A5:A2
            X509v3 Authority Key Identifier:
                keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fa:2b:be:8d:54:74:0b:a1:d0:af:b5:b2:f3:be:7e:7c:11:
         77:81:ba:7d:c8:97:73:28:05:23:1d:d0:2f:d6:d2:91:51:c4:
         47:99:7a:ac:39:c6:8f:ce:b0:01:96:8d:47:7f:9b:d1:d9:fe:
         19:df:87:4a:0a:10:60:b5:c2:7e:9e:f7:d5:9e:e6:9b:9c:4a:
         c2:eb:e2:c5:d4:ec:53:42:ef:e9:33:98:c8:26:81:9a:d7:2d:
         ca:39:83:f4:3e:1a:3c:df:93:c1:2e:ce:15:a7:46:39:fd:8d:
         88:00:1a:74:f0:ff:a2:7d:2b:5b:f8:66:96:3d:e7:b6:03:94:
         fe:1a:ee:1f:5d:01:f5:19:db:ff:cf:bd:25:fd:a5:49:33:8d:
         fc:07:de:aa:ad:fe:c9:ea:50:5f:3a:11:ef:69:d7:75:68:8f:
         47:f0:3e:91:fb:1d:0e:49:84:78:42:97:dd:3b:5e:a2:25:ff:
         f5:3c:e4:6a:3d:11:82:ad:3a:11:d9:7d:7d:12:48:92:c1:20:
         5a:72:c8:a7:8a:f0:62:2e:f7:9e:4f:3a:29:ab:06:b5:8a:c9:
         5c:53:9d:44:0b:04:3e:c4:7b:3e:b9:8e:56:fe:32:38:8f:1a:
         bd:dd:7d:bd:2a:1c:8b:b6:ea:c6:57:32:b2:06:d3:8a:b2:ff:
         a8:dc:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----