Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
File:                     WnMRox5rU6F10ZE1sryZOh-5hLE.mft (raw, json)
Hash identifier:          83LSPAUq32Mhj2LqRm+1swdG/u8RTTJCE7wh2d1TBsE=
Subject key identifier:   69:0F:F3:F3:1B:F6:45:43:42:F5:E7:40:03:FD:21:BA:0C:85:37:24
Authority key identifier: 5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1
Certificate issuer:       /CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
Certificate serial:       01962DF3F12DF5B300F89D7661285C14EF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
Manifest number:          130F
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: WnMRox5rU6F10ZE1sryZOh-5hLE.crl (hash: c3gDolJKqY/dDj0rHgQ4XBHudZqgBOE7PHQiCKAuNOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:2d:f5:b3:00:f8:9d:76:61:28:5c:14:ef:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=690ff3f31bf6454342f5e74003fd21ba0c853724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:6c:54:90:2a:90:ee:4f:15:1d:c4:ab:a6:
                    61:e2:9f:3a:a4:39:45:4d:a7:2d:cf:8b:b6:5b:61:
                    70:0f:7b:9d:fd:2d:c2:c8:bd:3e:cc:80:3d:9a:39:
                    a9:49:a2:fd:96:e9:a2:e5:7a:2c:8a:6b:2a:53:a2:
                    69:25:25:c6:91:97:d4:29:3b:34:ff:37:ba:ca:bd:
                    29:eb:a7:db:3f:9a:ed:66:2f:fe:20:5f:4a:9b:4e:
                    dc:65:8a:8f:51:16:c5:88:41:46:e3:77:54:6d:47:
                    e2:8f:1a:43:92:99:03:35:78:00:b4:aa:47:3b:09:
                    ff:19:78:6f:52:42:55:9c:2a:55:3a:61:14:f8:ef:
                    9e:fe:7f:5b:e8:70:9c:5c:e2:da:60:8c:11:7d:33:
                    c1:e3:13:eb:af:70:dd:11:81:c4:70:12:70:51:08:
                    8a:b0:b1:25:76:05:e1:ab:0e:03:21:54:23:8a:55:
                    26:cf:76:96:eb:2e:d6:fc:ca:01:a3:04:6a:77:62:
                    13:a1:30:99:42:e5:fa:db:7c:e9:3c:84:8f:64:6b:
                    e3:78:13:46:9d:70:57:56:41:d6:ea:90:07:b1:7d:
                    94:02:6e:70:0d:3d:f6:06:16:0d:b3:e7:69:7b:b7:
                    2e:c5:6f:68:a1:66:7a:91:87:c4:d9:f4:67:d9:8a:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:F3:F3:1B:F6:45:43:42:F5:E7:40:03:FD:21:BA:0C:85:37:24
            X509v3 Authority Key Identifier:
                keyid:5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:01:eb:8d:6b:bb:90:8a:44:9c:b5:45:52:78:ef:06:b1:14:
         50:a0:04:ef:a5:1e:7e:e1:1b:60:85:a0:9b:eb:42:95:f8:78:
         32:ee:4e:d7:3a:cf:c2:a1:51:cd:1f:7e:d3:a4:b5:5a:3f:b5:
         18:73:bc:ee:eb:7d:15:f3:5b:ab:01:7c:2a:41:1e:67:d4:4e:
         12:c4:a1:8b:a0:18:65:0e:c5:ce:3d:18:96:ca:1c:28:5c:df:
         61:86:eb:cb:8d:1b:e5:e3:71:2e:bb:ea:7a:9c:d5:48:6d:e8:
         34:42:42:cf:4f:b3:70:7e:94:97:f1:1e:be:5c:8e:a2:dc:66:
         a5:42:99:f8:6e:89:81:30:32:58:8a:29:1d:f3:3c:1c:ea:6f:
         54:e7:92:92:88:f7:2d:5b:98:50:b3:a0:1d:02:3f:02:6b:57:
         11:56:ad:0c:92:b5:bf:a1:c9:57:76:19:6a:af:9f:99:a4:a3:
         73:e0:4a:54:c7:2c:78:d8:0d:8c:c5:62:3d:56:56:47:81:1e:
         ea:ef:5b:32:68:1f:81:23:95:50:36:83:30:9e:f8:8e:5d:af:
         ec:3e:c2:55:80:f9:02:c1:0a:46:b0:f3:91:3f:06:9a:70:2e:
         54:0d:d4:0b:3d:63:d4:b6:25:df:93:a9:2d:02:ab:ab:f8:8a:
         42:bc:e1:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/Et9bMA+J12YShcFO84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzMxMWEzMWU2YjUzYTE3NWQxOTEzNWIyYmM5OTNhMWZi
OTg0YjEwHhcNMjUwNDEzMDcwMTIzWhcNMjUwNDE0MDcwMTIzWjAzMTEwLwYDVQQD
Eyg2OTBmZjNmMzFiZjY0NTQzNDJmNWU3NDAwM2ZkMjFiYTBjODUzNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZsVJAqkO5PFR3Eq6Zh4p86pDlF
Tactz4u2W2FwD3ud/S3CyL0+zIA9mjmpSaL9lumi5XosimsqU6JpJSXGkZfUKTs0
/ze6yr0p66fbP5rtZi/+IF9Km07cZYqPURbFiEFG43dUbUfijxpDkpkDNXgAtKpH
Own/GXhvUkJVnCpVOmEU+O+e/n9b6HCcXOLaYIwRfTPB4xPrr3DdEYHEcBJwUQiK
sLEldgXhqw4DIVQjilUmz3aW6y7W/MoBowRqd2IToTCZQuX623zpPISPZGvjeBNG
nXBXVkHW6pAHsX2UAm5wDT32BhYNs+dpe7cuxW9ooWZ6kYfE2fRn2YoF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkP8/Mb9kVDQvXnQAP9IboMhTckMB8GA1UdIwQY
MBaAFFpzEaMea1OhddGRNbK8mTofuYSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25NUm94NXJVNkYxMFpFMXNyeVpPaC01aExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lNjc3ODEtMTcxZC00MGQ3LTkwMzct
MWJhYTgzYzhhMDM2LzEvV25NUm94NXJVNkYxMFpFMXNyeVpPaC01aExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lNjc3ODEtMTcxZC00MGQ3LTkwMzctMWJhYTgzYzhhMDM2
LzEvV25NUm94NXJVNkYxMFpFMXNyeVpPaC01aExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAHrjWu7
kIpEnLVFUnjvBrEUUKAE76UefuEbYIWgm+tClfh4Mu5O1zrPwqFRzR9+06S1Wj+1
GHO87ut9FfNbqwF8KkEeZ9ROEsShi6AYZQ7Fzj0YlsocKFzfYYbry40b5eNxLrvq
epzVSG3oNEJCz0+zcH6Ul/EevlyOotxmpUKZ+G6JgTAyWIopHfM8HOpvVOeSkoj3
LVuYULOgHQI/AmtXEVatDJK1v6HJV3YZaq+fmaSjc+BKVMcseNgNjMViPVZWR4Ee
6u9bMmgfgSOVUDaDMJ74jl2v7D7CVYD5AsEKRrDzkT8GmnAuVA3UCz1j1LYl35Op
LQKrq/iKQrzhXg==
-----END CERTIFICATE-----