Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File:                     wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier:          IVJ79WhJuLCxUIY00qUtMvefoJ/t0O+7L5pdawV7Sjg=
Subject key identifier:   96:9D:23:B1:72:9F:08:64:66:EB:A1:C8:7A:9F:64:03:F7:F5:60:D8
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer:       /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial:       01962FAB604AD566835EFAC347D7ABD4D860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number:          0B51
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
                          2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: HnrDC4YytMbzL1cVpWANp1pArmsmxPZo34oQRAU7/do=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:60:4a:d5:66:83:5e:fa:c3:47:d7:ab:d4:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=969d23b1729f086466eba1c87a9f6403f7f560d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:27:9e:68:99:7f:b6:60:17:42:5b:11:6d:
                    68:d8:58:6e:69:66:85:44:0a:18:a0:59:84:a8:17:
                    f3:38:0d:14:76:60:e5:f5:be:b9:19:39:94:01:7f:
                    87:a1:89:e4:a6:34:6b:85:5d:e8:e7:37:2b:22:25:
                    9a:24:f1:1b:5d:ff:6e:b5:7c:a4:31:a9:3b:28:84:
                    78:8d:87:4c:38:d6:1b:2e:fb:57:56:27:27:6c:ec:
                    70:02:42:a3:65:85:c3:b6:f8:2a:43:cf:f6:11:84:
                    44:10:bb:5c:8d:da:48:66:c0:9b:6e:5c:69:ad:38:
                    d5:c8:b8:6d:cf:50:b7:69:fb:c2:cb:ce:44:8a:63:
                    f1:77:a5:75:51:37:4d:1a:8d:fb:73:39:79:1c:26:
                    42:82:39:71:07:c6:a5:cd:b0:95:8b:be:0c:b1:10:
                    a1:f8:9d:22:09:a3:cd:38:03:7b:df:5b:60:9b:96:
                    37:06:20:73:97:5a:d8:12:40:ec:b1:81:e6:08:3e:
                    17:3c:61:46:e4:30:81:a6:05:41:a4:d9:ad:8a:eb:
                    66:b5:a4:86:14:4c:44:40:64:88:ab:8e:1c:18:b6:
                    de:58:4d:04:9c:3e:4c:17:05:4a:07:e9:30:08:ba:
                    4f:bf:bb:d6:4d:50:0f:5a:48:fe:1e:0f:ba:07:ef:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:23:B1:72:9F:08:64:66:EB:A1:C8:7A:9F:64:03:F7:F5:60:D8
            X509v3 Authority Key Identifier:
                keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:f3:4a:37:06:60:76:af:06:5a:7e:f9:ee:a4:4b:d9:44:
         5f:7a:37:d0:aa:ee:1d:4b:b2:8a:c0:51:30:34:08:3a:46:71:
         0a:85:dd:28:f5:6a:13:cc:32:77:a3:56:63:73:ca:d8:18:b9:
         c9:80:1d:bb:bc:c9:b1:10:87:a9:e9:5c:eb:c9:e6:2a:4e:7e:
         00:6a:40:84:f9:b0:11:2d:23:cc:6a:a3:8e:a9:ce:70:79:4a:
         c0:10:f3:7a:dd:a7:91:51:24:14:7a:12:c8:a8:07:a4:cb:e2:
         28:8e:dc:3b:67:fc:c9:9c:9a:c7:47:2b:14:f8:0a:3e:09:3e:
         44:74:c8:ae:72:06:fd:4b:f5:aa:bf:0a:58:f1:06:19:06:32:
         8c:8e:35:75:9c:82:d1:41:41:75:35:1b:d6:9d:ed:82:8b:1f:
         3f:5b:13:2e:21:ad:97:99:ea:1c:73:54:c6:fe:93:41:b1:fc:
         6c:4c:5e:46:e4:47:d8:7f:76:b4:63:7a:01:87:37:16:72:a7:
         3b:e0:c9:03:05:58:91:8d:9d:db:04:b0:22:a5:15:89:5f:0f:
         1a:83:7e:0b:5a:4a:ea:2e:71:9e:48:d6:c4:2f:59:9d:8f:9b:
         43:9d:82:28:cc:70:88:df:cc:31:5a:eb:a4:fd:71:f9:14:a4:
         65:ed:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----