Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          9Rk/3trM/Ek4HFjfRMtqhGMkcCkJM8iFsS0C9/VNwZk=
Subject key identifier:   44:A7:36:E1:6B:FD:04:73:6B:EC:3E:6D:49:15:E5:53:EA:A6:B6:A2
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       01962F7473BD99C79F3DA79DED86C44CA232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          0352
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: dOwtVPCk-WvN7ZMQPwT0i6o3PTs.roa (hash: iKLmmrkDgYTBybVLHZNcg/1f3W3OlockqL3lDqEGWGQ=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: F2o5vVOtJhN8u7to50Ksps1VrSlCG1uO/e4UyKOD/+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:73:bd:99:c7:9f:3d:a7:9d:ed:86:c4:4c:a2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=44a736e16bfd04736bec3e6d4915e553eaa6b6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:29:d1:4f:4d:f9:bb:27:32:23:3a:63:77:
                    1b:37:27:a2:ed:8e:fa:34:37:83:c1:41:86:ff:ef:
                    b2:e5:70:6c:51:b3:58:9f:0d:7c:92:3e:5d:01:e2:
                    7d:a5:25:ce:27:af:2a:cc:ce:9f:04:db:a4:f3:88:
                    f4:f5:e5:c4:ba:87:eb:89:a0:4c:ea:fc:ab:67:31:
                    ae:c2:72:f2:f7:b7:15:fa:67:d7:3a:9a:25:ae:09:
                    8f:ef:a5:0a:8a:21:de:4e:2e:ab:96:58:93:1e:5b:
                    30:57:01:09:4c:e2:eb:81:ad:3c:a2:86:06:87:3f:
                    f3:cd:5e:37:bb:59:84:f9:47:24:dc:8e:25:4a:f4:
                    36:d0:5f:fa:11:a7:36:de:58:df:f9:da:5a:61:63:
                    93:cd:46:15:a2:3b:21:60:cd:d8:9d:0b:4e:36:09:
                    03:79:0b:07:1a:21:8c:64:39:1b:16:e6:93:bb:03:
                    ba:91:ae:f7:0b:76:46:86:60:f5:be:c1:c9:45:68:
                    e4:75:d4:61:e9:e0:d6:ff:5f:76:3a:d8:4f:ef:e3:
                    9e:ed:b5:d3:35:55:08:92:67:a4:67:28:69:5f:2d:
                    fb:0f:2c:c4:de:1f:7a:83:52:63:0b:26:ec:40:ca:
                    ae:8a:f9:b4:5e:9b:cf:bd:b7:0d:e8:b1:d1:c3:fc:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:36:E1:6B:FD:04:73:6B:EC:3E:6D:49:15:E5:53:EA:A6:B6:A2
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:4a:ad:d3:ca:ec:42:be:b8:a7:84:8b:6d:03:2d:94:96:
         c3:0a:0b:52:1c:ed:f7:ef:d8:41:ab:1c:12:2b:75:6e:46:69:
         b3:1a:b4:c3:e1:f2:10:e2:05:7f:bc:c4:89:88:53:82:55:dc:
         1a:0a:d7:57:b5:2c:c7:cb:c8:e5:14:32:4b:35:2f:a6:64:7b:
         08:f7:10:a6:7a:03:53:d4:cb:39:1d:07:cf:ad:24:18:a4:7a:
         ba:b2:dc:bd:a4:92:d0:b6:f6:21:73:60:ca:6f:58:33:fd:af:
         48:48:4d:a0:18:9b:2d:63:6d:28:28:f4:f8:04:ac:b5:65:f4:
         4a:42:d3:50:aa:9c:a0:62:b7:ba:d8:48:d8:3e:fc:5d:63:2e:
         3a:4a:fd:c8:a6:c3:69:c9:7b:33:e0:6f:fe:ec:2e:f3:38:f7:
         b9:29:43:6f:7c:2f:fb:81:a4:41:65:b5:6d:6f:08:a9:d7:e9:
         f1:4c:b8:fb:bf:7d:8c:d2:47:09:3c:b1:76:60:69:96:25:a1:
         14:7b:d2:01:fb:ab:aa:b0:4b:b9:27:43:97:17:a0:72:91:85:
         27:21:6d:23:e4:68:55:33:99:f8:14:d0:26:02:d7:db:f4:48:
         fd:1d:a3:21:0d:ea:04:55:1a:a8:90:00:0e:72:1f:b1:ea:a7:
         df:c0:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----