Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          3zC1fbGrT6aFN5N6GpS+BseVfXJKVje2lLct9FDP2wU=
Subject key identifier:   A0:69:C3:60:95:47:62:86:08:AD:C2:5E:63:6C:B3:AF:31:51:8F:29
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       01962E61A73ADB7F2B4198CB6165FD42D581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0981
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 5CKcJ3WWdLnxNxA8zS9MSqemGeU.roa (hash: F1W/LYRU/swbDsn7VsjuOlThJoPhjHiHTuqYQgQV4vQ=)
                          2: FZ6_BK0_bbVrJHhN6MfGrD_zBBU.roa (hash: pGJzWgBtcqu+YLCletr5FYBbo/hFDdnErtqiP7qljbk=)
                          3: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
                          4: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (hash: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=)
                          5: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
                          6: pIvBgTa21ZIrbNAe93h6ywfLfqU.roa (hash: 4TvmPBfwBLS029TBaeYbv9kyWoozw1GEP3VDLEg1dFk=)
                          7: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
                          8: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
                          9: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: XQO7DPseYMM2eSqyVxHn/HZl5hHQQgmFUq6wSDr0OT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:3a:db:7f:2b:41:98:cb:61:65:fd:42:d5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=a069c3609547628608adc25e636cb3af31518f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:4d:a5:d7:c8:6e:be:7d:93:e5:da:fc:6f:
                    2d:0b:e3:19:b2:4f:8c:27:d4:56:06:7a:b2:32:67:
                    7c:81:a3:44:24:1c:4a:2f:7f:f9:53:d5:7f:25:8f:
                    2a:75:1b:1b:6d:23:c7:26:5b:40:37:98:17:49:dd:
                    d0:ec:ab:46:1b:65:5b:87:62:8f:14:c9:c5:02:43:
                    a9:11:15:eb:ec:53:0b:4d:97:2b:94:77:c2:7b:20:
                    27:3b:c0:95:c3:fd:cf:c7:4b:fb:e0:8c:86:c8:26:
                    11:54:6c:52:44:88:66:fc:a3:23:3d:31:bd:c3:1c:
                    73:ea:d4:ab:bf:77:34:63:50:1e:d5:9c:a5:db:a3:
                    18:dd:ae:4a:90:16:d9:97:7a:b0:ca:13:62:d5:0e:
                    b8:6d:65:dc:6f:24:c5:2a:10:f6:a7:07:07:b1:74:
                    05:8e:77:43:58:8e:77:34:e5:c2:bf:ef:0c:1a:28:
                    5f:c7:db:24:27:6f:51:1f:94:4e:1a:fc:cc:c9:7d:
                    dc:3c:0c:41:83:59:b9:98:f4:17:ab:01:6b:00:1f:
                    69:bc:4e:d9:12:ce:51:35:eb:f8:7b:2d:50:48:4b:
                    6a:2a:be:6b:6e:70:af:47:46:3e:11:04:e4:7f:09:
                    44:a2:6a:eb:0a:45:7e:0c:e1:f8:8e:7f:3b:89:aa:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:69:C3:60:95:47:62:86:08:AD:C2:5E:63:6C:B3:AF:31:51:8F:29
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:a8:09:35:be:e8:b4:0e:5d:3f:40:72:fe:fe:78:5e:cf:
         ed:b8:38:4c:ec:3b:38:7c:0d:69:fb:8d:62:42:06:68:19:15:
         8a:a1:c1:2d:9a:9f:22:b2:bd:50:8e:e9:1f:9b:16:7d:f3:80:
         9f:f8:73:c5:b6:60:85:67:4f:e1:59:61:80:6e:40:47:18:ed:
         05:77:22:5f:26:48:0b:5a:9c:7b:5b:0d:ff:7f:fc:bd:bf:9f:
         23:5a:d1:a6:8f:22:a3:e2:8d:8e:ac:ec:c5:86:cb:05:01:77:
         66:a2:a5:98:03:78:58:75:f9:b4:59:0a:0d:c0:ad:77:08:29:
         78:4b:1d:d0:11:f2:d0:dd:82:f1:bd:46:87:77:a6:77:a2:fe:
         95:89:d5:e2:2c:69:c1:d9:75:1e:e8:dd:2d:e5:46:36:92:91:
         08:12:fd:11:c9:dc:29:0c:54:bb:5c:f6:78:b7:d1:8c:6d:f5:
         a8:a7:61:d5:30:b1:51:1f:ae:a7:af:05:6e:a8:48:06:30:89:
         6e:92:90:3c:b4:9a:b9:86:22:16:bf:b2:89:07:50:08:2a:ae:
         cb:7e:ff:20:30:31:68:43:18:3d:80:83:85:9d:34:48:00:76:
         a3:05:fe:38:8f:d0:f0:db:b9:71:88:06:29:b2:f9:84:34:af:
         15:9f:a7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYac6238rQZjLYWX9QtWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
EyhhMDY5YzM2MDk1NDc2Mjg2MDhhZGMyNWU2MzZjYjNhZjMxNTE4ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoetNpdfIbr59k+Xa/G8tC+MZsk+M
J9RWBnqyMmd8gaNEJBxKL3/5U9V/JY8qdRsbbSPHJltAN5gXSd3Q7KtGG2Vbh2KP
FMnFAkOpERXr7FMLTZcrlHfCeyAnO8CVw/3Px0v74IyGyCYRVGxSRIhm/KMjPTG9
wxxz6tSrv3c0Y1Ae1Zyl26MY3a5KkBbZl3qwyhNi1Q64bWXcbyTFKhD2pwcHsXQF
jndDWI53NOXCv+8MGihfx9skJ29RH5ROGvzMyX3cPAxBg1m5mPQXqwFrAB9pvE7Z
Es5RNev4ey1QSEtqKr5rbnCvR0Y+EQTkfwlEomrrCkV+DOH4jn87iargVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBpw2CVR2KGCK3CXmNss68xUY8pMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbWoCTW+
6LQOXT9Acv7+eF7P7bg4TOw7OHwNafuNYkIGaBkViqHBLZqfIrK9UI7pH5sWffOA
n/hzxbZghWdP4VlhgG5ARxjtBXciXyZIC1qce1sN/3/8vb+fI1rRpo8io+KNjqzs
xYbLBQF3ZqKlmAN4WHX5tFkKDcCtdwgpeEsd0BHy0N2C8b1Gh3emd6L+lYnV4ixp
wdl1HujdLeVGNpKRCBL9EcncKQxUu1z2eLfRjG31qKdh1TCxUR+up68FbqhIBjCJ
bpKQPLSauYYiFr+yiQdQCCquy37/IDAxaEMYPYCDhZ00SAB2owX+OI/Q8Nu5cYgG
KbL5hDSvFZ+nCQ==
-----END CERTIFICATE-----